X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-7.4 required=5.0	tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,KHOP_PGP_SIGNED,KHOP_RCVD_TRUST,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE
X-Spam-Check-By: sourceware.org
Date: Sun, 19 Aug 2012 15:07:00 +0200
From: David Sastre Medina <d DOT sastre DOT medina AT gmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: internal-sftp logs
Message-ID: <20120819130659.GA5421@pris.crapsteak.org>
References: <CAPBo6and3F1dx7r_ggXks5docnrpzL2zV0T87YytKGbr=yh1pw AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="ew6BAiZeqk4r7MaW"
Content-Disposition: inline
In-Reply-To: <CAPBo6and3F1dx7r_ggXks5docnrpzL2zV0T87YytKGbr=yh1pw@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

--ew6BAiZeqk4r7MaW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Aug 17, 2012 at 01:46:42PM -0400, James Calfee wrote:
> Where are the logs in Cygwin for sftp?
>=20
> I'm using the sftp subsystem.  There is nothing to be found in
> /var/log/sshd.log or /var/log/*.  I have already enabled logging in my
> sshd_config file as follows:
>=20
> Subsystem       sftp    internal-sftp -l INFO

Just define the subsystem and configure the SyslogFacility option
to suit your needs, which in turn depends on how you've configured
your syslog daemon. E.g. :

sshd_config:

Subsystem       sftp    internal-sftp
SyslogFacility AUTH

syslog-ng.conf:

source s_src { system(); internal(); };
destination d_auth { file("/var/log/auth.log"); };
filter f_auth { facility(auth, authpriv) and not filter(f_debug); };
log { source(s_src); filter(f_auth); destination(d_auth); };

--=20
Primary key fingerprint: AD8F BDC0 5A2C FD5F A179  60E7 F79B AB04 5299 EC56

--ew6BAiZeqk4r7MaW
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iF4EAREIAAYFAlAw5PAACgkQ95urBFKZ7FaxOgD/bVij4SuomLxPqaaDWNoss3RU
vEi0twzbXjLbUFSGhcEA/3aaPg5n3ZUp4cXwdUsbe1PrX9V/Se9Tw0ct8diO9u8y
=E2I5
-----END PGP SIGNATURE-----

--ew6BAiZeqk4r7MaW--