<p dir="ltr">Generally you'll need a filter facility (auth) but you should check that first by sending the logs. </p>
<div class="gmail_quote">On Apr 28, 2015 7:06 PM, <<a href="mailto:wiskbroom@hotmail.com">wiskbroom@hotmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">Greetings;<br><br>This is question is slightly OT, but I can't imagine a better place to ask; so please, no flames.<br><br>I would like to begin logging all attempts (succesful, failed, no password given, etc) to login to Sparc/Solaris machines, as well as RedHat 6 Linux boxes. My clients are using stock syslog, but my server is running syslog-NG; my second goal is to redirect all login type logs to just one file for ALL of my Solaris & Linux servers.<br><br>Does anyone have a known good syslog config file for both Solaris, and Linux?<br><br>Also, a good syslog-NG entry to force just the console and ssh data into a separate file?<br><br>Thank you!<br><br>.vp<br> </div></div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>