The Linux/SSH Login Event Monitor runs "lastlog" on systems that support it and alerts based on user security events. This tutorial will teach you how to set up a Linux Login Monitor and begin monitoring these values.
First, choose a level of alert to receive if the SSH server cannot be reached.
You can also choose to receive an alert if a user logs in.
If a new user is detected, the next option will send you an alert of your choice.
The next option will alert you if a user is removed.
Under "Monitoring Options", you can choose whether or not to include a list of users in each notification. You can also input a specific list of users to alert about or specify users to ignore.
Under "Connection Options", specify the port number and timeout that will be used.
This tutorial taught you how to set up a Linux/SSH Login Event Monitor. More Linux event monitor tutorials are on the Features page, which we update regularly. For more documentation on this event monitor, click here to visit its Technical Resources page.More Tutorials