SSH Logging

Check /etc/ssh/sshd_config

#--------------------------------------------------------------
# Logging
#--------------------------------------------------------------
SyslogFacility SSHDLOG
LogLevel DEBUG

If sshd logs to the SSHDLOG facility, add the following lines to my /etc/syslog.conf file

# Log SSH daemon messages to own file
!sshd
sshdlog.* /var/log/sshd.log

Note that SSHDLOG can be changed to anything.