I have recently begun working with Debian and do so in a purely command-line environment. I connect from a windows desktop through puTTY using asymmetric encryption rather than passwords.
My principle reason for running a Linux server is to allow SFTP access to share files with external users over the internet. I do this using SSH and a 'chroot jail' which gives me a reasonable degree of inherent security. Nonetheless I need to be fairly diligent in examining the '/var/logs/auth.log' file for intrusion attempts. Unfortunately I have discovered this holds authentication data for all logins in the Linux system, not just the SSH daemon - which is quite hard to run my eyes over!
In order to narrow the log entries displayed to just those relevant for SFTP reporting I currently use:
grep SSHD /var/logs/auth.log | more
However, I wondered if there was an alternative to 'more' that I could pipe 'grep's output into that would offer colourization similar to 'vim/view' with ':syntax enable' set?
The closest I have come so far is:
grep --color=always SSHD /var/logs/auth.logs | more
This gives a red 'SSHD' highlighting in the text string which does indeed help the eyes a little. However it is not so good as the syntax highlighting in 'vim'.