RP/0/RP0/CPU0:R4#show logging start Oct 4 15:28:37
Sun Oct  4 15:36:04.918 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 206 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Oct  4 15:28:37.947 UTC: logger[68530]: %OS-SYSLOG-6-LOG_INFO : informational STEP5-BEGIN 
RP/0/RP0/CPU0:Oct  4 15:28:38.254 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11139]: Received disconnect from 10.20.1.1 port 52338:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:28:38.254 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11139]: Disconnected from user cisco 10.20.1.1 port 52338 
RP/0/RP0/CPU0:Oct  4 15:31:24.127 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11416]: Accepted authentication/pam for cisco from 10.20.1.1 port 56362 ssh2 
RP/0/RP0/CPU0:Oct  4 15:31:26.349 UTC: logger[68814]: %OS-SYSLOG-6-LOG_INFO : informational STEP5-CLEAR: clear counters interface GigabitEthernet0/0/0/0 
RP/0/RP0/CPU0:Oct  4 15:31:26.508 UTC: statsd_manager_l[244]: %MGBL-IFSTATS-6-CLEAR_COUNTERS : Clear counters on GigabitEthernet0/0/0/0 
RP/0/RP0/CPU0:Oct  4 15:31:26.859 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11421]: Received disconnect from 10.20.1.1 port 56362:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:31:26.859 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11421]: Disconnected from user cisco 10.20.1.1 port 56362 
RP/0/RP0/CPU0:Oct  4 15:33:06.264 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11630]: Accepted authentication/pam for cisco from 10.20.1.1 port 34162 ssh2 
RP/0/RP0/CPU0:Oct  4 15:33:32.427 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11635]: Received disconnect from 10.20.1.1 port 34162:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:33:32.427 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11635]: Disconnected from user cisco 10.20.1.1 port 34162 
RP/0/RP0/CPU0:Oct  4 15:35:49.684 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11885]: Accepted authentication/pam for cisco from 10.20.1.1 port 56310 ssh2 
RP/0/RP0/CPU0:Oct  4 15:36:01.206 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11890]: Received disconnect from 10.20.1.1 port 56310:11: disconnected by user 
RP/0/RP0/CPU0:Oct  4 15:36:01.206 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[11890]: Disconnected from user cisco 10.20.1.1 port 56310 
RP/0/RP0/CPU0:Oct  4 15:36:02.252 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[12104]: Accepted authentication/pam for cisco from 10.20.1.1 port 53924 ssh2