SSH Audit

[conejo <lo...@gmail.com>]

Hi.
Is there any way to audit ssh connections?
I would like to get logs that display the IP and the user who tried the
connection.
I would also like to make statistics (using decanter probably) in which they
will show the IPs that are most connected, the users that connect the most,
the average time of connection by IP, ...
In short we would like to know statistics of access to the system via ssh
(or any method).

Could you give me some starting point?



--
View this message in context: http://karaf.922171.n3.nabble.com/SSH-Audit-tp4049070.html
Sent from the Karaf - User mailing list archive at Nabble.com.

Re: SSH Audit

[conejo <lo...@gmail.com>]

Hi.
But can you get the ip that tried the connection?

Thank you.



--
View this message in context: http://karaf.922171.n3.nabble.com/SSH-Audit-tp4049070p4049072.html
Sent from the Karaf - User mailing list archive at Nabble.com.

Re: SSH Audit

[Jean-Baptiste Onofré <jb...@nanthrax.net>]

Hi

Yes
Audit log is available and via eventadmin too.

Regards 
JB\u2063\u200b

On Dec 22, 2016, 11:55, at 11:55, conejo <lo...@gmail.com> wrote:
>Hi.
>Is there any way to audit ssh connections?
>I would like to get logs that display the IP and the user who tried the
>connection.
>I would also like to make statistics (using decanter probably) in which
>they
>will show the IPs that are most connected, the users that connect the
>most,
>the average time of connection by IP, ...
>In short we would like to know statistics of access to the system via
>ssh
>(or any method).
>
>Could you give me some starting point?
>
>
>
>--
>View this message in context:
>http://karaf.922171.n3.nabble.com/SSH-Audit-tp4049070.html
>Sent from the Karaf - User mailing list archive at Nabble.com.