1

I am looking for a way to log transfers over SFTP in Ubuntu. Nothing complicated, just a log where I can see which users have down/uploaded certain files. I read this but setting the -l INFO flag in sshd_config appears to not be working. Should that work for my purpose, or is there some other way?

1 Answers1

1

Already answered: SFTP logging: is there a way?

For those of us on earlier versions of sshd (centos5 and the like) check out this patch: http://sftplogging.sourceforge.net/

eric sorenson
  • 971
  • 8
  • 10
  • 1
    I included the same link in my post, and indicated that the -l INFO flag did not affect my log files at all. On Ubuntu where should those transfers be logged? –  Jan 30 '11 at 04:38
  • 2
    What version sshd do you have? as it says, this only works at 4.4 or greater. (`sshd -V` shows version) The log messages could be getting filtered by syslog because they are too low/verbose a level. I don't know what the default syslog.conf is on ubuntu, but try this: check for the file where where the normal sshd messages go. (`/var/log/secure` or `/var/log/auth.log` maybe) Look at /etc/syslog.conf for the line with that logfile name in it, and make sure the loglevel specification on the left says '_facility_.*'. – eric sorenson Jan 30 '11 at 06:24