I have set up several EC2 instances and intend to give multiple users access to them via SSH. Is there any file on the server that monitors who logs in and when?
Any help greatly appreciated.
Max.
None of the suggested answers here (except the last
command) applied on Amazon Linux. I found SSH attempts and logins, as well as privilege escalations, in /var/log/secure
.
In addition to the auth log Daniel mentioned, assuming you're using Linux on your EC2 instance (which is likely), see:
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With