How to stream the ssh sessions in real time?
Stream SSH sessions in real-time
Overview: This article provide step by step instructions to stream the SSH sessions of gateway users in real time by enabling streaming with time interval settings.
Step 1: Login to Ezeelogin GUI, navigate to Users -> SSH log and click on the View button. If the tab is not visible then ensure that the user has the privileges to view the SSH Log in Access Control.
Step 2: Click on the 'Enable streaming button' and set the interval for streaming.
Step 3: Ensure that 'Encrypt SSH Session Logs' is disabled in Settings -> General -> Security for live streaming to work.
SSH Live streaming is possible only for ongoing ssh sessions.
SSH Live streaming is possible only if 'SSH Log Encryption' is disabled.
FAQ
1. Why are SSH log files (Users → SSH Logs in the Ezeelogin GUI) still present after deletion from the web interface?
Deleting log entries from the Ezeelogin web interface only removes the metadata from the database. The actual log files stored on the filesystem under /var/log/ezlogin/ are not deleted.
To restore the metadata for these logs back into the web interface, use the following command:
root@gateway:/usr/local/ezlogin/eztool.php -reimport_logs
This command re-imports the log metadata from the log files that still exist on disk.
2. Is there any impact if the logs in /var/log/ezlogin/ are deleted?
No, the logs in /var/log/ezlogin/ can be safely deleted without affecting system functionality. However, once deleted, these logs cannot be recovered.
Related Articles:
Prevent passwords from being recorded when SSH session recording is enabled
How to transfer Ezeelogin SSH session logs recorded to a remote server?