Re: [arch-general] Missing auth.log

Hi, On Thu, 15 Nov 2018, Leonid Isaev via arch-general wrote:

If you want authpriv messages, then run "journalctl SYSLOG_FACILITY=10". See https://en.wikipedia.org/wiki/Syslog#Facility for mapping between numerical and mnemonic facility IDs. Oh, and do install syslog-ng :)

On Fri, 16 Nov 2018, Jonathon Fernyhough wrote:

Yes.

journalctl allows access to the logs from sshd, `journalctl -u sshd`

Thanks for your suggestions! They seem to work nicely. Best regards, Maxe