Servers – Ensure SSH LogLevel is Appropriate

Support > Fixing Checks > Server

06 March, 2026

This check ensures that the SSH LogLevel is set appropriately to capture essential logging information.

Proper SSH logging helps administrators track user activity, detect unauthorized access, and support incident response investigations.

Check Details

Resource: Server
Check: Ensure SSH LogLevel is appropriate
Risk: Incorrect logging levels may result in insufficient audit data or excessive logs, making security monitoring ineffective.

Open a terminal session on the server with root or sudo privileges.
Open the SSH configuration file:
```
sudo nano /etc/ssh/sshd_config
```
Locate the LogLevel parameter and update it to one of the following values:
```
LogLevel VERBOSE
```
OR
```
LogLevel INFO
```
Save the file and exit the editor.
Restart the SSH service to apply changes:
```
sudo systemctl restart sshd
```
Verify the configuration using the following command:
```
sshd -T | grep loglevel
```
Ensure the output shows either LogLevel VERBOSE or LogLevel INFO.
Perform regular audits to ensure logging configuration remains compliant.