Leo Lapousterle wrote: > Micah, > > >>Does /var/log/auth.log have what you need? > > > Woa, I didn't know about that one :) > Can we configure which service to log or not in there? > > Thanks everyone for your solutions, Check out syslog, specifically syslog.conf. By default my auth.log shows failed/succesful SSH logins, console logins, and SU's. HTH, Micah