RP/0/RP0/CPU0:R1#show logging start Sep 20 11:23:21
Sun Sep 20 11:30:26.835 UTC
Time Zone UTC, DST disabled
Syslog logging: enabled (0 messages dropped, 0 flushes, 0 overruns)
    Console logging: Disabled
    Monitor logging: level debugging, 0 messages logged
    Trap logging: level informational, 0 messages logged
    Buffer logging: level debugging, 402 messages logged

Log Buffer (2097152 bytes):

RP/0/RP0/CPU0:Sep 20 11:23:21.763 UTC: logger[68248]: %OS-SYSLOG-6-LOG_INFO : informational STEP11-BEGIN 
RP/0/RP0/CPU0:Sep 20 11:23:22.125 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23142]: Received disconnect from 10.20.1.1 port 48100:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 11:23:22.126 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23142]: Disconnected from user cisco 10.20.1.1 port 48100 
RP/0/RP0/CPU0:Sep 20 11:26:30.053 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23432]: Accepted authentication/pam for cisco from 10.20.1.1 port 38130 ssh2 
RP/0/RP0/CPU0:Sep 20 11:26:40.310 UTC: ospf[1035]: %ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on GigabitEthernet0/0/0/0 in area 0 from FULL to DOWN, Neighbor Down: dead timer expired, vrf default vrfid 0x60000000 
RP/0/RP0/CPU0:Sep 20 11:27:32.667 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23437]: Received disconnect from 10.20.1.1 port 38130:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 11:27:32.667 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23437]: Disconnected from user cisco 10.20.1.1 port 38130 
RP/0/RP0/CPU0:Sep 20 11:27:37.464 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23584]: Accepted authentication/pam for cisco from 10.20.1.1 port 43084 ssh2 
RP/0/RP0/CPU0:Sep 20 11:27:40.069 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23589]: Received disconnect from 10.20.1.1 port 43084:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 11:27:40.069 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23589]: Disconnected from user cisco 10.20.1.1 port 43084 
RP/0/RP0/CPU0:Sep 20 11:28:01.262 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23667]: Accepted authentication/pam for cisco from 10.20.1.1 port 33996 ssh2 
RP/0/RP0/CPU0:Sep 20 11:28:03.762 UTC: logger[68803]: %OS-SYSLOG-6-LOG_INFO : informational STEP11-CLEAR: clear counters GigabitEthernet0/0/0/0 
RP/0/RP0/CPU0:Sep 20 11:28:04.276 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23697]: Received disconnect from 10.20.1.1 port 33996:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 11:28:04.276 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23697]: Disconnected from user cisco 10.20.1.1 port 33996 
RP/0/RP0/CPU0:Sep 20 11:28:13.102 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23759]: Accepted authentication/pam for cisco from 10.20.1.1 port 55158 ssh2 
RP/0/RP0/CPU0:Sep 20 11:29:08.956 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23764]: Received disconnect from 10.20.1.1 port 55158:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 11:29:08.956 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23764]: Disconnected from user cisco 10.20.1.1 port 55158 
RP/0/RP0/CPU0:Sep 20 11:30:06.264 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23984]: Accepted authentication/pam for cisco from 10.20.1.1 port 50308 ssh2 
RP/0/RP0/CPU0:Sep 20 11:30:23.589 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23989]: Received disconnect from 10.20.1.1 port 50308:11: disconnected by user 
RP/0/RP0/CPU0:Sep 20 11:30:23.589 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[23989]: Disconnected from user cisco 10.20.1.1 port 50308 
RP/0/RP0/CPU0:Sep 20 11:30:24.531 UTC: ssh_syslog_proxy[1188]: %SECURITY-SSHD_SYSLOG_PRX-6-INFO_GENERAL : sshd[24181]: Accepted authentication/pam for cisco from 10.20.1.1 port 53622 ssh2