26 Jul
2008
26 Jul
'08
6:11 a.m.
On Jul 24, 2008, at 8:45 PM, Zeeshan wrote:
Hi all...
Is there any way to log all SSH sessions on the filer in /etc/ messages...or somehow view current SSH sessions...especially the IP addresses of hosts... With default settings, the message daemon only logs failed logon attempts...
follow this NOW article:
https://now.netapp.com/Knowledgebase/solutionarea.asp?id=ntapcs5526
Works well for all our filers. Commands entered via ssh get pushed to syslog host. Failed and successful ssh connections with source IPs are logged as well.
-=--=- gerald villabroza <geraldv at stanford.edu> technical lead, its storage, stanford university