RP/0/RP0/CPU0:R4#show logging start Sep 20 14:33:37
Sun Sep 20 14:38:20.725 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 314 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 20 14:33:37.787 UTC: logger[66646]: %OS-SYSLOG-6-LOG_INFO : informational STEP12-BEGIN 
RP/0/RP0/CPU0:Sep 20 14:33:38.240 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17447]: Received disconnect from 10.20.1.1 port 51542:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 14:33:38.240 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17447]: Disconnected from user cisco 10.20.1.1 port 51542 
RP/0/RP0/CPU0:Sep 20 14:38:02.631 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17830]: Accepted authentication/pam for cisco from 10.20.1.1 port 44038 ssh2 
RP/0/RP0/CPU0:Sep 20 14:38:09.123 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17850]: Received disconnect from 10.20.1.1 port 44038:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 14:38:09.123 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17850]: Disconnected from user cisco 10.20.1.1 port 44038 
RP/0/RP0/CPU0:Sep 20 14:38:10.515 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17922]: Accepted authentication/pam for cisco from 10.20.1.1 port 44044 ssh2 
RP/0/RP0/CPU0:Sep 20 14:38:17.890 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17946]: Received disconnect from 10.20.1.1 port 44044:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 14:38:17.891 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[17946]: Disconnected from user cisco 10.20.1.1 port 44044 
RP/0/RP0/CPU0:Sep 20 14:38:18.797 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[18054]: Accepted authentication/pam for cisco from 10.20.1.1 port 56040 ssh2