RP/0/RP0/CPU0:R3#show logging start Sep 23 12:12:10
Wed Sep 23 12:18:53.737 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 141 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 23 12:12:10.771 UTC: logger[67329]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN 
RP/0/RP0/CPU0:Sep 23 12:12:11.196 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9938]: Received disconnect from 10.20.1.1 port 57816:11: disconnected by user 
RP/0/RP0/CPU0:Sep 23 12:12:11.196 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[9938]: Disconnected from user cisco 10.20.1.1 port 57816 
RP/0/RP0/CPU0:Sep 23 12:18:42.085 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[10491]: Accepted authentication/pam for cisco from 10.20.1.1 port 49626 ssh2 
RP/0/RP0/CPU0:Sep 23 12:18:51.118 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[10496]: Received disconnect from 10.20.1.1 port 49626:11: disconnected by user 
RP/0/RP0/CPU0:Sep 23 12:18:51.118 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[10496]: Disconnected from user cisco 10.20.1.1 port 49626 
RP/0/RP0/CPU0:Sep 23 12:18:51.825 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[10652]: Accepted authentication/pam for cisco from 10.20.1.1 port 48192 ssh2