I need to be notified by email when my Ubuntu server is accessed via SSH.
If it is possible, how can I do it?
You should be able to do so with a rule in
You can get more detail from a script run from
If you don't need immediate notification, the
EDIT: Ubuntu uses the incompatible
Notes: Backslash notation can be used to wrap lines as above. Substitution characters are documented in the
The log is on auth.log, you can do a
To actualy send the mail you could install SSMTP, edit it's config as follows:
Create a text file with the message body as follows:
To add the content you could do:
and then run
Another OP said you might want a notification each time it happens, you coud do something LIKE this:
create an script with
Mailcontents should include the addresses as stated before, the script code has not been checked to be valid, consider it pseudocode.
Your best bet is to set up a script to watch the log file.
I'm on my phone at the moment, but Check /var/log/access.log