Hey, logging experts. Got an answer for this one? Alan -------- Original Message -------- Subject: SSH logging Date: Fri, 10 Oct 2003 08:22:35 -0700 From: someone To: ADayley@adtron.com [Please forward to PLUG...] Ever since I upgraded SSH to 3.7.1, logging has ceased to /var/log/secure. Any ideas? $ cat /etc/syslog.conf # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console # Log anything (except mail) of level info or higher. # Don't log private authentication messages! *.info;mail.none;authpriv.none;cron.none /var/log/messages # The authpriv file has restricted access. authpriv.* /var/log/secure # Log all the mail messages in one place. mail.* /var/log/maillog # Log cron stuff cron.* /var/log/cron # Everybody gets emergency messages *.emerg * # Save news errors of level crit and higher in a special file. uucp,news.crit /var/log/spooler # Save boot messages also to boot.log local7.* /var/log/boot.log (I checked the whitespace and they're tabs...)