ssh logging

Bruce Dawson jbd at codemeta.com
Sat Mar 18 12:52:01 EST 2006


Jerry Feldman wrote:
> On Sat, 18 Mar 2006 08:38:17 -0500
> Bruce Dawson <jbd at codemeta.com> wrote:
> 
>>Does anyone know of a way to prevent openssh from logging the activity
>>for a certain set of keys?
>>
>>I have a job that copies files to a remote system every minute or so,
>>and its making the log files on the remote very large. However, I am
>>interested in logging of other keys.
>>
>>I'd prefer not running a private instance of ssh for just these scripts.
> 
> On the remote system, the configuration for sshd is /etc/ssh/sshd_config
> You can control the logging in that file.
> http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config
> LogLevel
>              Gives the verbosity level that is used when logging
> messages from sshd(8).  The possible values are: QUIET, FATAL, ERROR,
> INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2, and DEBUG3.  The default is INFO.
>              DEBUG and DEBUG1 are equivalent.  DEBUG2 and DEBUG3 each
> specify higher levels of debugging output.  Logging with a DEBUG level
>              violates the privacy of users and is not recommended.

My understanding is that affects all users, not just ones using a
particular key or username.

--Bruce



More information about the gnhlug-discuss mailing list