linux6.5 sftp, please post: How to configure SFTP logging on Centos 6.5 SFTP server

The suspected violation of this floor has been folded by the system. Hide this floor to view this floor

Subsystem sftp internal-sftp -I INFO -f local5 # Specify to use the sftp service to use the internal-sftp that comes with the system

LogLevel INFO

Match Group sftp, sftpadmin # Match users in the sftp group. To match multiple groups, separate them with commas

ChrootDirectory /home/sftp/ # limit user's root directory

ForceCommand internal-sftp # can only be used for sftp login

AllowTcpForwarding no # Disable users from using port forwarding

X11Forwarding no # Disable users from using port forwarding

But the collected logs are not complete

tail -f /var/log/sftp.log

Mar 6 06:58:38 JXCP-FTP sshd[8178]: error: Received disconnect from 192.168.0.7 port 2905:0: [postauth]

Mar 6 06:58:38 JXCP-FTP sshd[8178]: Disconnected from 192.168.0.7 port 2905 [postauth]

Mar 6 06:58:38 JXCP-FTP sshd[8178]: pam_unix(sshd:session): session closed for user zgj

Mar 6 06:58:38 JXCP-FTP systemd-logind: Removed session 1025.

Mar 6 07:01:01 JXCP-FTP sshd[7896]: pam_unix(sshd:session): session closed for user guestsftp

Mar 6 07:01:01 JXCP-FTP systemd-login: Removed session 1018.

Mar 6 07:01:07 JXCP-FTP sshd[7897]: pam_unix(sshd:session): session closed for user guestsftp

Mar 6 07:01:07 JXCP-FTP systemd-login: Removed session 1017.

Mar 6 07:01:08 JXCP-FTP sshd[6763]: pam_unix(sshd:session): session closed for user guestsftp

Mar 6 07:01:08 JXCP-FTP systemd-login: Removed session 952.

Guess you like

Origin http://10.200.1.11:23101/article/api/json?id=324101848&siteId=291194637