RP/0/RP0/CPU0:CE9#show logging start Sep 27 16:21:54
Sun Sep 27 16:28:21.967 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 91 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 27 16:21:54.363 UTC: logger[67526]: %OS-SYSLOG-6-LOG_INFO : informational STEP1-BEGIN 
RP/0/RP0/CPU0:Sep 27 16:21:54.615 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6039]: Received disconnect from 10.20.1.1 port 42240:11: disconnected by user 
RP/0/RP0/CPU0:Sep 27 16:21:54.615 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6039]: Disconnected from user cisco 10.20.1.1 port 42240 
RP/0/RP0/CPU0:Sep 27 16:25:07.396 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6350]: Accepted authentication/pam for cisco from 10.20.1.1 port 59948 ssh2 
RP/0/RP0/CPU0:Sep 27 16:25:20.581 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6356]: Received disconnect from 10.20.1.1 port 59948:11: disconnected by user 
RP/0/RP0/CPU0:Sep 27 16:25:20.581 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6356]: Disconnected from user cisco 10.20.1.1 port 59948 
RP/0/RP0/CPU0:Sep 27 16:28:12.623 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6677]: Accepted authentication/pam for cisco from 10.20.1.1 port 60518 ssh2 
RP/0/RP0/CPU0:Sep 27 16:28:19.323 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6684]: Received disconnect from 10.20.1.1 port 60518:11: disconnected by user 
RP/0/RP0/CPU0:Sep 27 16:28:19.323 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6684]: Disconnected from user cisco 10.20.1.1 port 60518 
RP/0/RP0/CPU0:Sep 27 16:28:20.065 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[6796]: Accepted authentication/pam for cisco from 10.20.1.1 port 60520 ssh2