RP/0/RP0/CPU0:R7#show logging start Oct 4 15:00:36
Sun Oct  4 15:06:45.010 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 78 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Oct  4 15:00:36.738 UTC: logger[67374]: %OS-SYSLOG-6-LOG_INFO : informational STEP0-BEGIN 
RP/0/RP0/CPU0:Oct  4 15:00:37.042 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5884]: Received disconnect from 10.20.1.1 port 58270:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:00:37.042 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[5884]: Disconnected from user cisco 10.20.1.1 port 58270 
RP/0/RP0/CPU0:Oct  4 15:01:33.827 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6004]: Accepted authentication/pam for cisco from 10.20.1.1 port 50894 ssh2 
RP/0/RP0/CPU0:Oct  4 15:01:35.881 UTC: logger[67498]: %OS-SYSLOG-6-LOG_INFO : informational STEP0-CLEAR: clear counters interface GigabitEthernet0/0/0/0 
RP/0/RP0/CPU0:Oct  4 15:01:36.019 UTC: statsd_manager_l[244]: %MGBL-IFSTATS-6-CLEAR_COUNTERS : Clear counters on GigabitEthernet0/0/0/0 
RP/0/RP0/CPU0:Oct  4 15:01:36.726 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6009]: Received disconnect from 10.20.1.1 port 50894:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:01:36.726 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6009]: Disconnected from user cisco 10.20.1.1 port 50894 
RP/0/RP0/CPU0:Oct  4 15:03:44.178 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6231]: Accepted authentication/pam for cisco from 10.20.1.1 port 51422 ssh2 
RP/0/RP0/CPU0:Oct  4 15:03:49.832 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6236]: Received disconnect from 10.20.1.1 port 51422:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:03:49.832 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6236]: Disconnected from user cisco 10.20.1.1 port 51422 
RP/0/RP0/CPU0:Oct  4 15:06:31.138 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6529]: Accepted authentication/pam for cisco from 10.20.1.1 port 59986 ssh2 
RP/0/RP0/CPU0:Oct  4 15:06:42.226 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6534]: Received disconnect from 10.20.1.1 port 59986:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:06:42.226 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6534]: Disconnected from user cisco 10.20.1.1 port 59986 
RP/0/RP0/CPU0:Oct  4 15:06:43.067 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6726]: Accepted authentication/pam for cisco from 10.20.1.1 port 59574 ssh2