How to truncate the ssh session logs recorded

SSH Log Rotation | Prune SSH logs recorded | 

In order to prevent a full disk its is important to prune the ssh log files regularly.  It is possible to auto-delete logs when the log size exceeds a limit.

Navigate to Settings->Security->Miscellaneous->Log space threshold


You can also set the period for which the ssh user  log and the rdp user  logs has to be retained in the  system after which it would be truncated by daily cronjobs. A value 0 means the logs would be retained for ever.

Navigate to Settings->Security->Miscellaneous->Log Retain Duration

Set a cronjob for root user  to run daily or once a week so that log files stored on the server in the directory ( /var/log/ezlogin/ )  are truncated when it exceeds a particular size or when it older than the specified number of days.

The path to the command that needs to be set in cron is

0 6 * * * php /usr/local/ezlogin/house_keeping.php   

The ssh log files recorded are stored in the directory /var/log/ezlogin/full , /var/log/ezlogin/input, /var/log/ezlogin/output, /var/log/ezlogin/rdp.  The 'full' directory store the entire ssh sessions. The 'input' directory store the recording from the STDIN . The 'output' directory stores the recording from the STDOUT and the 'rdp' directory stores the rdp session recorded. 


Deleting SSH recording from the GUI.

 You can also delete ssh log from the GUI by selecting the ssh log session and by clicking on the trash icon.  


Ensure the housekeeping script is set to run in cron (  0 6 * * * php /usr/local/ezlogin/house_keeping.php ) so that the ssh sessions recorded which are stored in  files are deleted from the backend server.  You may also run the command manually to ensure that files are deleted from the backend almost instantly . You may wonder why the ssh log recorded stored in the directory /var/log/ezlogin is not deleted when the ssh recording is deleted from the gui, this is because the webserver user does not have the privileges to delete the ssh log recording in the ownership of the ssh gateway user.


0 (0)
Article Rating (No Votes)
Rate this article
    Attached Files
    There are no attachments for this article.
    Related Articles RSS Feed
    How to change the private key in use and change the default public key in use?
    Viewed 3304 times since Fri, Dec 1, 2017
    How to import servers from a file into Ezeelogin ssh gateway?
    Viewed 2992 times since Fri, Sep 1, 2017
    how to create a complete backup of ezeelogin installation?
    Viewed 2534 times since Thu, Jun 15, 2017
    How do i export all server password into an excel file?
    Viewed 1999 times since Thu, Jun 15, 2017
    Migrate jump server installation from one server to another
    Viewed 2701 times since Wed, Jun 14, 2017
    How do i uninstall ezeelogin?
    Viewed 2273 times since Wed, Jun 14, 2017
    Backup Ezeelogin failed during Ezeelogin version upgrade
    Viewed 140 times since Tue, Jul 28, 2020
    How to move servers/migrate servers from one Ezeelogin installation to another?
    Viewed 1872 times since Thu, Jun 15, 2017
    How can we upgrade php in an ezeelogin installed server ?
    Viewed 989 times since Fri, Jan 25, 2019
    Configuration and error log files to check for troubleshooting
    Viewed 5371 times since Thu, Jun 15, 2017