Project

General

Profile

Actions
Copy link

Bug #15714

closed

remote logging: pfSense does not log GUI logins

Added by Craig Coonrad 3 months ago. Updated 3 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
System Logs
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

version: 24.03-RELEASE
platform tested: 2100/4100/QEMU
reproducible: 100%
tested both log message formats (BSD,syslog)

local pfSense `/var/log/system.log`:

Sep  9 17:58:23 pf2100 php-fpm[558]: /index.php: Successful login for user 'admin' from: 192.168.1.8 (Local Database)
Sep  9 17:59:13 pf2100 php-fpm[799]: /index.php: User logged out for user 'admin' from: 192.168.1.8 (Local Database)

remote (rsyslog) `/var/log/syslog`:

Sep  9 17:59:13 pf2100 php-fpm[799]: /index.php: User logged out for user 'admin' from: 192.168.1.8 (Local Database)
Actions
Copy link
 #1

Updated by Craig Coonrad 3 months ago

problem exists in the latest dev snapshot (24.08.a.20240910.0600)

Actions
Copy link
 #2

Updated by Jim Pingle 3 months ago

  • Status changed from New to Rejected

Most likely something in your configuration as I get login events via remote syslog from both Plus and CE snapshots, it works both with "everything" checked as well as "General authentication events".

Actions
Copy link

Also available in: Atom PDF