RP/0/RP0/CPU0:R2#show logging start Sep 20 13:35:53
Sun Sep 20 13:40:15.341 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 102 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 20 13:35:54.020 UTC: logger[69076]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN 
RP/0/RP0/CPU0:Sep 20 13:35:54.420 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7589]: Received disconnect from 10.20.1.1 port 52990:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:35:54.421 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7589]: Disconnected from user cisco 10.20.1.1 port 52990 
RP/0/RP0/CPU0:Sep 20 13:37:28.224 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7739]: Accepted authentication/pam for cisco from 10.20.1.1 port 56480 ssh2 
RP/0/RP0/CPU0:Sep 20 13:37:30.712 UTC: bgp[1084]: %ROUTING-BGP-5-ADJCHANGE : neighbor 10.2.3.3 Down - User clear requested (CEASE notification sent - administrative reset) (VRF: default) (AS: 65002) 
RP/0/RP0/CPU0:Sep 20 13:37:31.528 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7744]: Received disconnect from 10.20.1.1 port 56480:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:37:31.528 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7744]: Disconnected from user cisco 10.20.1.1 port 56480 
RP/0/RP0/CPU0:Sep 20 13:38:05.673 UTC: bgp[1084]: %ROUTING-BGP-5-ADJCHANGE : neighbor 10.2.3.3 Up (VRF: default) (AS: 65002) 
RP/0/RP0/CPU0:Sep 20 13:39:54.714 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7995]: Accepted authentication/pam for cisco from 10.20.1.1 port 40580 ssh2 
RP/0/RP0/CPU0:Sep 20 13:40:01.140 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8000]: Received disconnect from 10.20.1.1 port 40580:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:40:01.140 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8000]: Disconnected from user cisco 10.20.1.1 port 40580 
RP/0/RP0/CPU0:Sep 20 13:40:02.302 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8094]: Accepted authentication/pam for cisco from 10.20.1.1 port 56946 ssh2 
RP/0/RP0/CPU0:Sep 20 13:40:12.237 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8103]: Received disconnect from 10.20.1.1 port 56946:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 13:40:12.237 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8103]: Disconnected from user cisco 10.20.1.1 port 56946 
RP/0/RP0/CPU0:Sep 20 13:40:13.230 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8233]: Accepted authentication/pam for cisco from 10.20.1.1 port 52646 ssh2