[rsyslog-notify] Forum Thread: Re: Rsyslog doesn't log successful login attempts from a con - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25281#p25281

Message: 
----------
I'm sure that a log is being generated, the question is just what it looks
like

check in your other output files, or create a debugging file

*.* /var/log/debuglog;RSYSLOG_DebugFormat

The debug format is multiple lines of output per log message, but it shows
all the variables that are set as part of that message, so once you find
the message you are looking for, you can figure out why your filters are
not matching it.

You have not said what version of Linux you are using, or what version of
rsyslog, both would be needed before someone else could try to duplicate
the problem and tell you how to fix this.

But start with checking your other files and do a debug log (make sure you
don't have anything in your config that throws logs away, the '~' or 'stop'
actions)