Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

I am looking for a way to log transfers over SFTP in Ubuntu. Nothing complicated, just a log where I can see which users have down/uploaded certain files. I read this but setting the -l INFO flag in sshd_config appears to not be working. Should that work for my purpose, or is there some other way?

share|improve this question

marked as duplicate by Jenny D, Kenny Rasschaert, dunxd, mdpc, voretaq7 Apr 3 '13 at 16:57

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

up vote 1 down vote accepted

Already answered: SFTP logging: is there a way?

For those of us on earlier versions of sshd (centos5 and the like) check out this patch: http://sftplogging.sourceforge.net/

share|improve this answer
1  
I included the same link in my post, and indicated that the -l INFO flag did not affect my log files at all. On Ubuntu where should those transfers be logged? –  user60129 Jan 30 '11 at 4:38
2  
What version sshd do you have? as it says, this only works at 4.4 or greater. (sshd -V shows version) The log messages could be getting filtered by syslog because they are too low/verbose a level. I don't know what the default syslog.conf is on ubuntu, but try this: check for the file where where the normal sshd messages go. (/var/log/secure or /var/log/auth.log maybe) Look at /etc/syslog.conf for the line with that logfile name in it, and make sure the loglevel specification on the left says 'facility.*'. –  eric sorenson Jan 30 '11 at 6:24