The syslog-ng 3.0 Administrator Guide

Procedure 6.9.2.1. Forwarding OpenSSH server logs from System i

1. Use the Work With Links (WRKLNK) command to edit the /QopenSys/QIBM/ /ProdData/SC1/OpenSSH/openssh-3.5p1/etc/sshd_conf file.

2. Edit the file like this:

   SyslogFacility AUTH
   sLogLevel INFO

   	Note
   	Consult the documentation on the OpenSSH web site (http://www.openssh.org) for other syslog options.

3. Create an empty log file. Sign on as QSECOFR, use the STRQSH shell, and issue the following commands:

   mkdir /var/adm 
   touch /var/adm/sshlog

4. Configure a source to read the /var/adm/sshlog file in syslog-ng. See Chapter 3, Configuring syslog-ng for details.