On 2018-03-05, Lars Noodén <lars.noo...@gmail.com> wrote: > I'm not able to get sshd(8) to use alternative loglevels, such as Debug3. > > When sshd(8) starts, it goes through the normal reporting regardless > of which LogLevel is set in sshd_config(5). Here is an excerpt from > /var/log/authlog showing the daemon starting and a first connection > from outside:
The default for /var/log/authlog is auth.info. To get these through syslogd, you'll need something with .debug instead. (btw, some of the higher-level debug for SSH is fairly sensitive, you might prefer to log it to memory buffers rather than disk - set the -s flag to syslogd and then you can do things like "*.* :64:debug" and watch with "syslogc -f debug").
