Skip to content
SSH Login Alerts
Go Shell Dockerfile Makefile
Branch: master
Clone or download

Latest commit

Fetching latest commit…
Cannot retrieve the latest commit at this time.

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
alert
config
init
log
packaging
parser
util
.gitignore
.travis.yml
LICENSE
Makefile
Readme.md
main.go

Readme.md

LoginNotifier Build Status

This program notifies you of successful SSH login attempts. It parses the /var/log/auth.log file and sends you an alert via the supported platforms containing the user and source IP address.

Installation

You can use the packages (deb/rpm) or the precompiled binary from the releases section.

Configuration

The configuration file is by default located in /etc/loginnotifier/config.json. To specify a different location use the --config parameter. In case the file doesn't exist it will be created during startup.

Alerts

Currently supported platforms:

  • Slack
  • Discord

To enable alerts for a specific platform set the config option alerts.<platform>.enabled to true.

Slack

To use Slack alerts you have to specify the Webhook URL, the channel name, the username for the alerts and an icon emoji. You can find more information about Slack Webhooks here.

Discord

To use Discord alerts you have to specify the Webhook URL, the username for the alerts and an avatar url. You can find more information about Discord Webhooks here.

Log file

By default this program uses the /var/log/auth.log file to detect new sessions. You can specify a different file with the config option source_log.

License

GNU General Public License 3.0

You can’t perform that action at this time.