Is it possible to view all ssh logs of a deleted user ?

When the user is deleted, the logs are still kept.  Although it’s not directly searchable with the username from the Ezeelogin web panel because the user is not listed in the drop-down,  you can search with other parameters such as server hostname  and date range.

Alternately, you can find the raw logs on your ssh jumphost box

/var/log/ezlogin/full/{username}/

You can  read the logs as plain text provided the SSH log encryption was not enabled at the time the ssh log was recorded.

0 (0)
Article Rating (No Votes)
Rate this article
    Attached Files
    There are no attachments for this article.
    Related Articles RSS Feed
    Webportals unavailable for user
    Viewed 1960 times since Fri, Dec 8, 2017
    How to find the ssh jumphost software version that is being run?
    Viewed 879 times since Thu, Mar 1, 2018
    How to stream the ssh sessions in real time?
    Viewed 2280 times since Wed, Nov 22, 2017
    Add custom fields on server add form
    Viewed 102 times since Wed, Mar 27, 2019
    How to enable Public key based authentication and Allow root login in SSHD
    Viewed 1058 times since Fri, Dec 8, 2017
    What are the details transmitted to the license server? What is the size of data transmitted?
    Viewed 953 times since Mon, Aug 21, 2017
    What are the encryption technologies used to secure my data?
    Viewed 997 times since Mon, Aug 21, 2017
    What are the security measures to ensure data security?
    Viewed 972 times since Mon, Aug 21, 2017
    Will i be locked out if i loose connectivity to the license server or if the Ezeelogin license servers goes down?
    Viewed 1583 times since Mon, Aug 21, 2017
    Where is my data stored?
    Viewed 954 times since Mon, Aug 21, 2017