From owner-freebsd-questions  Thu Nov 13 17:44:13 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id RAA12732
          for questions-outgoing; Thu, 13 Nov 1997 17:44:13 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: (from jmb@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id RAA12726;
          Thu, 13 Nov 1997 17:44:08 -0800 (PST)
          (envelope-from jmb)
From: "Jonathan M. Bresler" <jmb>
Message-Id: <199711140144.RAA12726@hub.freebsd.org>
Subject: Re: watching logins
To: rutz@dab.iit.uni-miskolc.hu (Antal Rutz)
Date: Thu, 13 Nov 1997 17:44:08 -0800 (PST)
Cc: questions@FreeBSD.ORG
In-Reply-To: <Pine.BSF.3.91.971114013510.26194A-100000@dab.iit.uni-miskolc.hu> from "Antal Rutz" at Nov 14, 97 01:35:43 am
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Antal Rutz wrote:
> 
> We have 12 boxes and our administrator wants to know about the user
> logins:
> Who when on which machine logged in. Is it possible to keep the
> information about all logins in a central place?

	use syslog to send all the logging to a single host.
	syslog will use UDP to send the log messages, so some
	might get lost if your loghost gets so heavily loaded that
	it starts dropping packets....dont let users log into 
	the loghost.


	from the syslog.cong man page:

	o   A hostname (preceded by an at (``@'') sign).  Selected messages are
            forwarded to the syslogd program on the named host.

jmb