Scenario:
I have some scripts that use the API to login and collect stats from the tik to feed my monitoring box (zabbix).
Problem:
I now have a log page full of successful logins in my logs which is hiding any “real” / interesting events that may be happening.
I hav not been able to find anything that removes this from my logs without pretty much redirecting all my authentication logs.
- Is there any way to just disable successful logins from the log on the tik itself? I don’t mind them continuing to go to syslog server or anywhere else (I don’t mind if they are disabled entirely). I need failed logins to keep coming in as I use it for dealing with people trying to brute-force my way in.
- If #1 is not possible, can the API logins be logged separately? or at least with a separate logging category?