RP/0/RP0/CPU0:R1#show logging start Sep 22 15:32:13
Tue Sep 22 15:38:30.202 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 115 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 22 15:32:13.860 UTC: logger[68695]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN 
RP/0/RP0/CPU0:Sep 22 15:32:14.376 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7197]: Received disconnect from 10.20.1.1 port 47948:11: disconnected by user 
RP/0/RP0/CPU0:Sep 22 15:32:14.376 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7197]: Disconnected from user cisco 10.20.1.1 port 47948 
RP/0/RP0/CPU0:Sep 22 15:36:22.188 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7646]: Accepted authentication/pam for cisco from 10.20.1.1 port 38496 ssh2 
RP/0/RP0/CPU0:Sep 22 15:38:15.057 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7651]: Received disconnect from 10.20.1.1 port 38496:11: disconnected by user 
RP/0/RP0/CPU0:Sep 22 15:38:15.057 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7651]: Disconnected from user cisco 10.20.1.1 port 38496 
RP/0/RP0/CPU0:Sep 22 15:38:16.093 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7868]: Accepted authentication/pam for cisco from 10.20.1.1 port 55728 ssh2 
RP/0/RP0/CPU0:Sep 22 15:38:27.093 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7874]: Received disconnect from 10.20.1.1 port 55728:11: disconnected by user 
RP/0/RP0/CPU0:Sep 22 15:38:27.093 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[7874]: Disconnected from user cisco 10.20.1.1 port 55728 
RP/0/RP0/CPU0:Sep 22 15:38:28.089 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[8038]: Accepted authentication/pam for cisco from 10.20.1.1 port 57070 ssh2