after some tinkering with rsyslog, sshd no longer logs information about failed login attempts to syslog for some reason. I've returned both sshd and rsyslog configs back to where it was (I've checked with command like `rpm -V $(rpm -qf /etc/ssh/sshd_config)` ).

however there is still nothing in /var/log/secure, and journalctl -u sshd shows only:

```

Oct 02 12:59:29 server04.company.name systemd[1]: Starting OpenSSH server daemon... Oct 02 12:59:29 server04.company.name systemd[1]: Started OpenSSH server daemon.

```

(in case you're wondering: I made failed login attempt to check this.)

is this some queue issue? how could I fix it (I'm okay with just clearing the queue altogether)?

_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to