Mike Friedman:
> On Fri Mar 10 14:49:55 2000, Belknap, Christopher said:
>
> > By default, it looks like SSH logs to whatever daemon.notice is logging to.
> > I want to change where SSH is logging. I created a file called sshd.log in
> > /var/adm, and gave it 640 permissions, owner root:sys. I then changed the
> > following line in /etc/sshd_config:
> >
> > SyslogFacility LOCAL6
> >
> > I added a line in /etc/syslog.conf to log all local6.debug messages to
> > /var/adm/sshd.log as follows:
> >
> > local6.debug /var/adm/sshd.log
>
> (NOTE: I'm assuming SSH1 here).
>
> My experience (Solaris 7) is that normal sshd messages go to severity level
> 'info', which you can't change in the config file. So, in your case, the
> entry should be
>
> local6.info /var/adm/sshd.log
>
> On the other hand, if you specify FascistLogging in sshd_config, the
> messages will go to severity level 'debug', in which case your entry
> would probably work.
Usually
facility.level
means 'log anything from that facility which have severity level or
is more severe'.
Therefore local6.debug logs also info -level entries.
/ Kari Hurtta
