Stack Overflow
Stack Overflow

Questions tagged [auth.log]

6 questions
1
vote
1 answer

Check for login activities of last 10 minutes (Actual time) in auth.log file?

I have a cronjob that executes a bash file every 10 min. The bash file contains a Curl command that sends me a sms if var/log/auth.log file contains any lines with "Accepted password for". (obviously the if condition is true every time). Now i want…
Ash
  • 15
  • 7
0
votes
0 answers

Reading auth.log files from a php file and displaying it on web page

I have an Ubuntu 18.04 server, and have been trying to create a php file that searches through auth.log for certain attributes and then displays them onscreen. The php file has permission 644 and root:root as the owner:group. The auth.log file is…
GregRoberts0319
  • 3
  • 1
0
votes
1 answer

Querying auth.log for ssh attempts (disconnects that never authorized correctly)

Lurker here having gotten many good answers to my problems for some time. Hoping there's some insight here, please! I am struggling with a bit of bash script that kind of sort of works. The intention here is to grep "Disconnected from" in the…
Rich
  • 29
  • 5
0
votes
0 answers

interpreting the auth.log on a linux system, what qualifies as one login attempt

Using Python 3.5 i am composing a bit of code to analyze the /var/log/auth.log and discern a few happenings from it. I am on Ubuntu 17.04 with default settings for the output to /var/log/auth.log I am attempting to quantify a failed login event.…
Dan
  • 2,209
  • 3
  • 23
  • 44
0
votes
1 answer

Doesn't show the needed info from auth.log file when using grep

I want to get all info about user from auth.log file, but when I use grep user /var/log/auth.log but instead of giving me all the information with user mentioned, it just writes to me Binary file /var/log/auth.log matches. It used to pick up the…
Lenton
  • 479
  • 1
  • 3
  • 13
0
votes
1 answer

check-log plugin pointing to /var/cache/check-log/default/var/log/auth.log instead of /var/log/auth.log

I am using sensu to track log file alerts. I need to track auth.log. I have used the following in my config.json. "command": "sudo /etc/sensu/plugins/check-log.rb -f /var/log/auth.log -q 'fatal' -c 1" I am hoping to track hack attempts made to…
Siddharth
  • 9,349
  • 16
  • 86
  • 148