Syslog Organization on log01 - tmansfield42/Tech-Journal GitHub Wiki

Syslog Organization on log01

This lab we formatted the logs created by rsyslog and changed configurations to log failed login attempts through ssh.


Step 1: In order to change a password on VyOS, follow these steps

configure

set system login user [username] authentication plaintext-password [password]

Step 2: We want to log failed login attempts through ssh, to do this go to /etc/rsyslog.d/ on web01

sudo nano sec350-client.conf

Ensure it looks like this:

user.notice @172.16.50.5
authpriv.* @172.16.50.5