syslogauthlog

A Syslog authentication logger plugin for Joomla 2.5 and 3, which logs selected authentication events to AUTH log.

Logged Events
- User login
- User login failure
- User logout
- User logout failure

Which data is logged?

System syslog for:
- Date
- Time

Plugin logs:
- Severity
- Systemuser (for virtual environments)
- Event
- Username
- Details (if any)
- User remote IP Addr

Features

Configurable options:

Log mode:
- succesful and failed
- failed only
Log event:
- all events
- only login
- only logout
Log environment:
- front- and backend
- backend only

syslog entry

Format: 'Dec 27 13:14:14 host jauthlog[PID]: [SYSUSER] {PRIORITY} {EVENT} {USERNAME} {ADMIN} {MESSAGE} from {CLIENTIP}'

Syslog facility: LOG_AUTH

Syslog priority:
- LOGINFO ~ Normal log entry
- LOGWARNING ~ Failure conditions

Easy to use with fail2ban