I have setup the syslog-ng daemon using Cygwin in Windows 7. What I want to do is to log all of the ssh failed passwords, etc to /var/log/sshd.log
. I tried to do this by adding the following line:
auth.* /var/log/sshd.log
to /etc/syslog.conf
However, all the ssh info gets logged to /var/log/messages
and sshd.log
is empty.
I have been searching net for long time, but cant find a solution. Help would be much appreciated.