From mboxrd@z Thu Jan  1 00:00:00 1970
From: Casper Helenius <casper.helenius@dk.tntfreight.com>
Subject: Logging root activity with syslog-ng
Date: Mon, 02 Jan 2006 13:36:06 +0100
Message-ID: <dpb6np$9cm$1@sea.gmane.org>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <linux-admin-owner@vger.kernel.org>
Sender: linux-admin-owner@vger.kernel.org
List-Id: <linux-admin.vger.kernel.org>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
To: linux-admin@vger.kernel.org

Hi group,

I need to log every root activity on my Gentoo server, running syslog-ng.

I need to log logins (and, if possible, logouts) both by root or by 
users SUDO'ing. I need to log which commands are executed as well as 
their parameters.

Is this at all possible with syslog-ng? And if so, what exactly do I 
need to setup in syslog-ng.conf?

Best regards,

Casper Helenius,
Denmark