Just replace the “bin/grep” line in the script with the following and you should be good to go

/bin/grep “$CUR_DATE” /var/log/messages | grep vsftpd | grep “OK LOGIN” | sed ‘/127\.0\.0\.1/d’ >> /tmp/out.txt

if you need a customize output, let me know and I will give a try.

As the log entries are logged only to /var/log/messages, few of them i have filtered and with the LOGIN OK: the same has been emailed to you for your reference.

Could you paste OR email me a few lines of your VSFTP logs i.e. the logs when a user logs in successfully and even if the user fails to login? I will update the script and will email you. Ofcourse, I will update here in the comments as well for others to see

Thank you very much
indar

Thank you.

Thanks for the email. Here is the text you need to add in the Search line to exclude localhost Ftp logins:

sed ‘/127\.0\.0\.1/d’

The Search line will now look like the following:

/bin/grep “$CUR_DATE” /var/log/messages | grep pure-ftpd | grep logged | sed ‘/127\.0\.0\.1/d’ >> /tmp/out.txt

Hope this helps.

I have sent you an email asking for some details. Please check it.

And yes, if you could forward a sample log of what you mean by ‘localhost’ login, I will edit the script accordingly.

Thanks