I run rsyslog on Ubuntu server. after rsyslog starts, it restarts in a loop. here is a piece of /var/log/syslog: Aug 13 16:05:50 ip-10-92-237-215 rsyslogd: rsyslogd's groupid changed to 103 Aug 13 ...
I am exploring ways to capture the remote login events in my Linux server [ Oracle Linux 5x ]. Many users are connecting to the server using rcp and rsh protocols , I wish to capture the events [ such ...
Feb 4 10:32:57 master sshd: pam_unix(sshd:session): session opened for user root by (uid=0) Feb 4 10:32:59 master sshd: Received disconnect from 192.168.0.107: 11: disconnected by user ...
Is it possible? If so, how is it done exactly? The syslog.conf file doesn't help too much.