Not logging sshd(pam_unix) in /var/log/messages - Redhat

This is a discussion on Not logging sshd(pam_unix) in /var/log/messages - Redhat ; Hi, Running Fedora core 1. I have mrtg running on this machine and I think everytime it runs it puts Jun 18 09:50:03 ns1 sshd(pam_unix)[22343]: session closed for user root Jun 18 09:52:02 ns1 sshd(pam_unix)[22356]: session opened for user root ...

+ Reply to Thread
Results 1 to 3 of 3

Thread: Not logging sshd(pam_unix) in /var/log/messages

  1. Not logging sshd(pam_unix) in /var/log/messages

    Hi,
    Running Fedora core 1. I have mrtg running on this machine
    and I think everytime it runs it puts

    Jun 18 09:50:03 ns1 sshd(pam_unix)[22343]: session closed for user root
    Jun 18 09:52:02 ns1 sshd(pam_unix)[22356]: session opened for user root by
    (uid=0)

    In the main syslog file. (/var/log/messages). I have tried all the
    suggestions on the web
    about redirecting sshd logs to a localx and changing syslog.conf and it is
    still there..
    Is there anyway of either redirecting these or not logging them at
    all....the log files
    get full of these and it is hard to find anything important. Thanks in
    advance.

    --
    -Dennis Leiterman



  2. Re: Not logging sshd(pam_unix) in /var/log/messages

    "Dennis Leiterman" writes:
    >Hi,
    > Running Fedora core 1. I have mrtg running on this machine
    >and I think everytime it runs it puts
    >
    >Jun 18 09:50:03 ns1 sshd(pam_unix)[22343]: session closed for user root
    >Jun 18 09:52:02 ns1 sshd(pam_unix)[22356]: session opened for user root by
    >(uid=0)
    >
    >In the main syslog file. (/var/log/messages). I have tried all the
    >suggestions on the web
    >about redirecting sshd logs to a localx and changing syslog.conf and it is
    >still there..


    That's because it is pam that is doing the logging on behalf of
    sshd.

    man pam

    >Is there anyway of either redirecting these or not logging them at
    >all....the log files
    >get full of these and it is hard to find anything important. Thanks in
    >advance.


    grep -v "sshd(pam_unix)" /var/log/messages > /tmp/important_messages.

    scott

  3. Re: Not logging sshd(pam_unix) in /var/log/messages

    Thanks Scott....will read the pam man page.

    "Scott Lurndal" wrote in message
    news:koFAc.4851$Gw4.4106@newssvr27.news.prodigy.co m...
    > "Dennis Leiterman" writes:
    > >Hi,
    > > Running Fedora core 1. I have mrtg running on this machine
    > >and I think everytime it runs it puts
    > >
    > >Jun 18 09:50:03 ns1 sshd(pam_unix)[22343]: session closed for user root
    > >Jun 18 09:52:02 ns1 sshd(pam_unix)[22356]: session opened for user root

    by
    > >(uid=0)
    > >
    > >In the main syslog file. (/var/log/messages). I have tried all the
    > >suggestions on the web
    > >about redirecting sshd logs to a localx and changing syslog.conf and it

    is
    > >still there..

    >
    > That's because it is pam that is doing the logging on behalf of
    > sshd.
    >
    > man pam
    >
    > >Is there anyway of either redirecting these or not logging them at
    > >all....the log files
    > >get full of these and it is hard to find anything important. Thanks in
    > >advance.

    >
    > grep -v "sshd(pam_unix)" /var/log/messages > /tmp/important_messages.
    >
    > scott




+ Reply to Thread