11-08-2016
I'm confused. What problem are you trying to solve?
For example from the cygwin forums:
Quote:
Sshd (the daemon) logs by default on the Windows Event Application list, this
can be changed in the configuration (/etc/sshd_config) so that it can log using
syslog (a separate package not installed by default).
It also logs to wtmp, you can see who loged in and from where but entries are
not distinguishable from telnet/ftp/or any other logins.
One example of failed login in the event log (very common when somebody tries to
"break" into your computer) is (6 events):
The description for Event ID ( 0 ) in Source ( sshd ) cannot be found. The local
computer may not have the necessary registry information or message DLL files to
display messages from a remote computer. You may be able to use the /AUXSOURCE=
flag to retrieve this description; see Help and Support for details. The
following information is part of the event: sshd : PID 2868 : Invalid user lidia
from 61.129.117.112.
If so, search the cygwin.com site for your problem. I am not an expert on cygwin authentication and logging. It is somewhat unlike other unixes.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I have a SCO R5 Open Server Box running at a remote location, and from time to time it seems to "spontaneously" re-boot itself. Is there a specific log file that I can examine to see why the machine is doing this ? Any suggestions gratefully appreciated (1 Reply)
Discussion started by: pcs7088
1 Replies
2. Shell Programming and Scripting
G'day
Just wondering if anyone out there knows how to log files, using the example I provided in the earlier message / question earlier today:
:confused:
If I was to backup a file, how could I setup a log file to record the filename, date (This one I've got figured), and that the file was... (4 Replies)
Discussion started by: Aussie_Bloke
4 Replies
3. Cybersecurity
is there a log/ how do i make a log that logs every packet inbound or outbound through my server?
I want every packet or packet fragment to be logged that comes to my server. (5 Replies)
Discussion started by: The Fridgerator
5 Replies
4. UNIX for Dummies Questions & Answers
Is there a file that captures info whenever someone logs to su? i know it comes across as standard output on the server, but is it saved anywhere? Time and date info included??
thanks, kym (1 Reply)
Discussion started by: kymberm
1 Replies
5. UNIX for Dummies Questions & Answers
Hi, just wriiten a sh script and as my script will try to log into another server to delete some files but when i run , it keeps on saying that my files do not exist. It seems to refer to my local directory instead. Below is my script :
FTP_HOST=ip_number
FTP_USER="user password"
... (1 Reply)
Discussion started by: blueberry80
1 Replies
6. UNIX for Dummies Questions & Answers
Hi all!
On our current Solaris 8 machine we only have "standard" logging configured, and now i need to put on more. What i specificly need is time in the logfiles. Ex. When a user is logging in,
when a user makes it self SU. etc.
Regards...
dOzY (3 Replies)
Discussion started by: dozy
3 Replies
7. Programming
Hi
How to manage logging in an application.
Actually I am developing a Client-Server application in c/c++ and want to manage an optional logging in my application, but since prior I have never done ths activity.
Plz guide me.
thanks. (2 Replies)
Discussion started by: sumsin
2 Replies
8. Post Here to Contact Site Administrators and Moderators
Hi Everyone. First, I want to thank all of you for letting me participate in this great group.
I am having a bit of a problem.
After I get an email from a responder, I login to make my reply.
In the mean time I get another response by email from another member, I go to reply to them and I... (6 Replies)
Discussion started by: Ccccc
6 Replies
9. Linux
When unlocking a Linux server's console there's no event indicating successful logging
Is there a way I can fix this ?
I have the following in my rsyslog.conf
auth.info /var/log/secure
authpriv.info /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies
10. Windows & DOS: Issues & Discussions
I've installed cygwin_openssh on Windows 2012 R2 and it's working great. My issue is when a file is uploaded say from a different timezone, when it is uploaded, it doesnt pick up the sftp servers time.. Is there a way to fix that?
i.e. When someone in PST uploads a file to this server in EST,... (0 Replies)
Discussion started by: MikeAdkins
0 Replies
LEARN ABOUT OSF1
evmlogger
evmlogger(8) System Manager's Manual evmlogger(8)
NAME
evmlogger - Event Manager logger
SYNOPSIS
/usr/sbin/evmlogger [-c config_file] [-l log_file] [-o info_file]
OPTIONS
Sets the configuration file to config_file. The default is /etc/evmlogger.conf. Sets message output to log_file. The default is stderr.
When the logger starts it renames any previous message file by appending Specifies the name of an output file to hold summary details of
the current run session.
OPERANDS
None
DESCRIPTION
The EVM logger is started automatically by the EVM daemon at startup. It reads from its configuration file /etc/evmlogger.conf a set of
definitions of event logs and forwarders, each with its own filter string. The logger combines the individual filter strings to produce a
single compound string, connects to the EVM daemon, and uses the compound filter string to establish its event subscription. The logger
then writes each incoming event to each of the event logs or forwarders whose individual filter string it matches.
Event logs may be files or terminal devices. If a terminal device is given as a log, the logger automatically formats the event for dis-
play. If a log is a file or any device other than a terminal, and the log is not specified as a formatted log, the logger writes events to
it in canonical (binary) form.
If a log is a disk file, the logger creates the file if necessary. If the log name ends in the characters .dated, the logger replaces that
suffix with the current date in the form yyyymmdd, and begins a new file when the first event is written to the log each day. A lock file
with a suffix of .lck is created to protect the log file while it is being written.
A log can be configured to start a new file when it reaches a certain size. Successive generations of the same log are given the suffix
_n, where n is the generation number of the file. A generation control file, with a suffix of .gen, is created to control the generation
sequence.
If the logger is writing to the log file, and the file becomes unavailable or unwritable for any reason, the logger switches to the alter-
nate log file if one has been configured. Otherwise the log is disabled and the events are lost.
If the logger is writing to the alternate log, and the error condition that caused it to switch has been cleared, you can revert to the
primary path by using the evmreload -l command.
If a forward command is specified, when any incoming event matches the forwarding filter the logger executes the command, piping the incom-
ing event into its stdin stream.
If an incoming event matches the suppression filter associated with an eventlog or forwarder, the event undergoes suppression consideration
processing. In the case of an eventlog this reduces the risk of wasting storage space by logging repeated instances of the same event, and
for a forwarder it reduces the risk of sending replicated mail messages reporting the same event over a short period. For a full discus-
sion of the configuration values which control suppression see the evmlogger.conf(4) reference page.
By default, the logger reads its configuration from /etc/evmlogger.conf. The -c flag can be used to override this. If the logger's configu-
ration file is changed while the logger is running, the evmreload -l(8) command should be used to instruct it to reconfigure itself.
The logger reconfigures itself when evmreload -l is run, or upon receipt of a SIGHUP signal.
There is no limit to the number of instances of the logger which may be running, and individual users or applications can make use of it to
monitor and log interesting events. However, they must provide their own configuration files.
EXIT VALUES
The following exit values are returned: Successful completion An error occurred
FILES
Executable file Default logger configuration file Error log Run information file
SEE ALSO
Commands: evmchmgr(8), evmd(8), evmget(1), evmreload(8), evmshow(1), evmstart(8), evmstop(8), kill(1)
Files: evmlogger.conf(4)
Event Management: EVM(5)
EVM Events: EvmEvent(5)
Event Filter: EvmFilter(5)
delim off
evmlogger(8)