Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I am looking for a way to log transfers over SFTP in Ubuntu. Nothing complicated, just a log where I can see which users have down/uploaded certain files. I read this but setting the -l INFO flag in sshd_config appears to not be working. Should that work for my purpose, or is there some other way?

share|improve this question

marked as duplicate by Jenny D, Kenny Rasschaert, dunxd, mdpc, voretaq7 Apr 3 '13 at 16:57

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 1 down vote accepted

Already answered: SFTP logging: is there a way?

For those of us on earlier versions of sshd (centos5 and the like) check out this patch: http://sftplogging.sourceforge.net/

share|improve this answer
1  
I included the same link in my post, and indicated that the -l INFO flag did not affect my log files at all. On Ubuntu where should those transfers be logged? – user60129 Jan 30 '11 at 4:38
2  
What version sshd do you have? as it says, this only works at 4.4 or greater. (sshd -V shows version) The log messages could be getting filtered by syslog because they are too low/verbose a level. I don't know what the default syslog.conf is on ubuntu, but try this: check for the file where where the normal sshd messages go. (/var/log/secure or /var/log/auth.log maybe) Look at /etc/syslog.conf for the line with that logfile name in it, and make sure the loglevel specification on the left says 'facility.*'. – eric sorenson Jan 30 '11 at 6:24