Don't reinvent the wheel, let rsyslog do everything for you. It has the ability to send emails when patterns are matched in syslog messages ...
Counting logins with last. If you don't need all of the login detail, you can view user login sessions as a simple count of logins for all users on ...
How to check user's login history in Linux? · last command searches the user information from the '/var/log/wtmp' file and displays a list of all ...
Each attempt to login to SSH server is tracked and recorded into a log file by the rsyslog daemon in Linux. The most basic mechanism to list all ...
/var/log/auth.log. That contains a lot more than just plain logins (sudo calls, etc) but logins are in there too. It's protected so you'll need to be root ...
In that case, who falls back upon /var/log/wtmp , which records all logins and logouts. The wtmp file format is exactly the same as utmp , except ...
Linux : /var/ run/utmp /var/log/wtmp /var/log/btmp. Solaris: /var/adm/utmp (deprecated), ...
On Ubuntu (and I'd guess all other Debian distros, if not all Linuces), the file /var/ log/auth.log records successful (and unsuccessful) login attempts: sshd[XXX]: ...
Variations of the "last" command can show you the history of one particular user, or the IP addresses of any computers used to log in from, provided the Linux ...
Under Linux operating system you can use the faillog command to display faillog records or to set login failure limits. faillog command displays ...