Log File Locations
File Transfer Audit Logs
If you have enabled file transfer auditing, logs are created by default in
/opt/microfocus/rsit/etc/logs. You can configure a non-default
location using AuditLog.Directory.
Login Information
The output location for login information is platform-dependent. For details refer to the following table.
| Platform | Login history | Current login | Failed login |
|---|---|---|---|
| RHEL | /var/log/lastlog /var/log/wtmp |
/var/run/utmp |
/var/log/btmp |
| SLES | /var/log/wtmp |
/var/run/utmp |
/var/log/btmp |
Note
-
Some platforms write to more than one file.
-
On some Linux systems,
btmpis not present. The server writes to this database if it is present.
The output for sshd and sftp-server messages is affected by both
Reflection for Secure IT UNIX Client and Server configuration and syslogd configuration.
For example, the following entry in /etc/syslog.conf configures a
facility called local6 and sends output from that facility to
/var/adm/rsit_log.
Note
This syntax shown requires a tab between the two entries.
local6.info /var/adm/rsit_log
To configure Reflection for Secure IT UNIX Client and Server to send sshd messages to the
local6 facility, include the following line in the server
configuration file (/opt/microfocus/rsit/etc/sshd2_config).
SysLogFacility local6