Logging for session/user disconnection

[Christian Jorge]

Good morning

I need to implement some logging for ssh session disconnection or administrative user disconnection. Something as "user johndoe has logged out out" or "ssh session from user johndoe has being disconnected". Usually it happens due to a session timeout out or closing the putty window. But I have to log it.

I could not find much stuff about this in Internet. Only found that Syslog Message

%ASA-6-315011: SSH session from IP_address on interface interface_name for user user disconnected by SSH server, reason: reason

I tried connect/disconnect by closing the putty window, timeout, etc, but no logging message about this has been generated.

Anyone could help me with this?....Is there any kind of customization, requirements or tweaks I have to perform in logging configuration?

Regards

Christian

[Philip D'Ath]

This is an information message.  Are you logging these?  Assuming that you are using syslog:

logging trap informational

[Christian Jorge]

Hello Philip

Confirmed. Logging traps are configured as informational.

Thanks for your reply

Christian

[Philip D'Ath]

To be clear, it is now working - or it is not working and you have informational traps already configured?