RP/0/RP0/CPU0:R1#show logging start Sep 20 13:35:03
Sun Sep 20 13:39:22.768 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 93 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 20 13:35:03.235 UTC: logger[68943]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN 
RP/0/RP0/CPU0:Sep 20 13:35:03.642 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7456]: Received disconnect from 10.20.1.1 port 37876:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:35:03.642 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7456]: Disconnected from user cisco 10.20.1.1 port 37876 
RP/0/RP0/CPU0:Sep 20 13:39:02.366 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7800]: Accepted authentication/pam for cisco from 10.20.1.1 port 48652 ssh2 
RP/0/RP0/CPU0:Sep 20 13:39:08.758 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7805]: Received disconnect from 10.20.1.1 port 48652:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:39:08.758 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7805]: Disconnected from user cisco 10.20.1.1 port 48652 
RP/0/RP0/CPU0:Sep 20 13:39:10.042 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7875]: Accepted authentication/pam for cisco from 10.20.1.1 port 48654 ssh2 
RP/0/RP0/CPU0:Sep 20 13:39:19.425 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7883]: Received disconnect from 10.20.1.1 port 48654:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:39:19.425 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7883]: Disconnected from user cisco 10.20.1.1 port 48654 
RP/0/RP0/CPU0:Sep 20 13:39:20.479 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8003]: Accepted authentication/pam for cisco from 10.20.1.1 port 58870 ssh2