Hi all, we were trying to log all SSH connections going to one of our test computers. Even though they appear in the conn log, it does not even create a ssh log. Do we need to activate this module at a certain place? Brian

Hello Brian, Just check "brolite.bro" (<bro_dir>/policy)

SSH logging

Topic		Replies	Views
Bro install on new machine - SSH logging broken Zeek	3	97	May 6, 2022
Hui Lin_SSH Analyzer Zeek	4	122	May 6, 2022
Detect-bruteforcing.zeek does not work properly Zeek	4	306	May 8, 2024
ssh Zeek	1	78	May 6, 2022
Question on quick start documentation SSH:Login example. Zeek	10	136	May 6, 2022