To enable logging of your sftp sessions
Replace the susbsystem line in your 
/etc/ssh/sshd_config with
Subsystem    sftp    /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO
Add the following to
 /etc/syslog.conf or
  /etc/rsyslog.conf
#sftp logging
local5.*                        /var/log/sftpd.log
Restart the sshd and syslog/rsylog services,
sftp sessions should now be logged to 
/var/log/sftpd.log
 
No comments:
Post a Comment