notifications of log in

[Arthur Chance]

On 27/02/2014 04:11, Jim Pazarena wrote:
> Is there a way to have syslog email a notice upon ANY log in to a
> server, by any user ID?
>
> I'm not worried about failed attempts, but I'd like a prompt notice if
> someone does successfully log in.

According to the syslog.conf manual, one option for the action on an 
event is:

> A vertical bar (“|”), followed by a command to pipe the selected mes‐
> sages to.  The command is passed to sh(1) for evaluation, so usual
> shell metacharacters or input/output redirection can occur.

You could feed auth facility syslog events to a script that mails you 
about console logins, sshd events and anything else relevant.