By default, it looks like SSH logs to whatever daemon.notice is logging to. I want to change where SSH is logging. I created a file called sshd.log in /var/adm, and gave it 640 permissions, owner root:sys. I then changed the following line in /etc/sshd_config:
SyslogFacility LOCAL6
I added a line in /etc/syslog.conf to log all local6.debug messages to /var/adm/sshd.log as follows:
local6.debug /var/adm/sshd.log
I then restarted syslogd. But, nothing is getting logged to /var/adm/sshd.log. What could I be doing wrong here? Thank you for any help you can provide.
