RP/0/RP0/CPU0:R3#show logging start Oct 11 15:22:33
Sun Oct 11 15:28:57.427 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 116 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Oct 11 15:22:33.935 UTC: logger[68494]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN 
RP/0/RP0/CPU0:Oct 11 15:22:34.338 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7007]: Received disconnect from 10.20.1.1 port 60294:11: disconnected by user 
RP/0/RP0/CPU0:Oct 11 15:22:34.338 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7007]: Disconnected from user cisco 10.20.1.1 port 60294 
RP/0/RP0/CPU0:Oct 11 15:28:28.113 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7528]: Accepted authentication/pam for cisco from 10.20.1.1 port 42838 ssh2 
RP/0/RP0/CPU0:Oct 11 15:28:37.047 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7533]: Received disconnect from 10.20.1.1 port 42838:11: disconnected by user 
RP/0/RP0/CPU0:Oct 11 15:28:37.048 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7533]: Disconnected from user cisco 10.20.1.1 port 42838 
RP/0/RP0/CPU0:Oct 11 15:28:37.840 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7657]: Accepted authentication/pam for cisco from 10.20.1.1 port 40674 ssh2 
RP/0/RP0/CPU0:Oct 11 15:28:54.358 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7662]: Received disconnect from 10.20.1.1 port 40674:11: disconnected by user 
RP/0/RP0/CPU0:Oct 11 15:28:54.358 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7662]: Disconnected from user cisco 10.20.1.1 port 40674 
RP/0/RP0/CPU0:Oct 11 15:28:55.176 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7856]: Accepted authentication/pam for cisco from 10.20.1.1 port 34144 ssh2