No auth.log

[finotti]

I just noticed that my (more or less) recent installation of siduction does not have an "auth.log".  Is there a way to create it?  I mostly need SSH logs.

[edlin]

You can find the answer in

Code Select Expand

edlin@Devil:~$ less /var/log/README

In the future, just use commands like

Code Select Expand

# journalctl _SYSTEMD_UNIT=ssh.service
# journalctl _SYSTEMD_UNIT=ssh.service | egrep "Failed|Failure"

edlin

[finotti]

You can find the answer in

Code Select Expand

edlin@Devil:~$ less /var/log/README

In the future, just use commands like

Code Select Expand

# journalctl _SYSTEMD_UNIT=ssh.service
# journalctl _SYSTEMD_UNIT=ssh.service | egrep "Failed|Failure"

edlin

Ah, sorry I missed that!  But thanks for the info!