How to capture logoffs from routers and switches

[ben.weber]

I'm working with a customer who wants to capture to a syslog server as much information as possible about who is logging into their nodes and when.  Capturing both successful and failed login attempts is working fine.  But I'm getting stuck with how to capture when people log off of routers and switches.  I can do it with the ASA firewalls but not routers and switches.

Does anyone know of a way to do this?  Basically they want to keep an audit record for which engineer logs onto which device, capturing both when they logged on and when they logged off.

Thanks.

[Flavio Miranda]

Hi,

You can try this:

login on-failure log every 1
login on-success log every 1

[ben.weber]

Right.  That's how you capture it when someone logs on.  I'm good there.  I've got that and it's working fine.

I'm looking for specifically how do I capture it when someone logs off.