Logging SFTP Transactions
The log facility for sftp-server
and
internal://sftp-server
is set with SftpSysLogFacility
.
Here, the informational level logs very verbosely. (For example,
stat-calls are logged. This can happen hundreds of times when reading a
directory listing.) Usually, you want to use a higher level
(for example, notice) for logging SFTP.
Nothing is logged by the SFTP-service if the SftpSysLogFacility
is not set in the configuration.
In /etc/ssh2/sshd2_config
add the following:
SftpSysLogFacility LOCAL7
|
In /etc/syslog.conf
add the following:
local7.notice /var/log/sftp
|