Linux – sshd not writing any kind of log Debian 6

debianlinuxloggingssh

I just installed Debian 6 on my server and noticed that sshd isn't writing any log to /var/log. I understand this is a huge security issue as I won't be able to know who logged in to my server. Is there anyway to fix this?

Best Answer

By default, sshd's SyslogFacility is set to AUTH.

If you haven't changed this in /etc/ssh/sshd_config, you should be getting sshd log information in /var/log/auth.log. You'll also see messages here from pam and sudo, so all access information is logged in the same place.

Related Topic