Our old method of parsing sftp logs is starting to wear a bit thin.? For people who are using OpenSSH for sftp transfers, how are you doing log management ? How are you parsing it into your SIEM (if you are using one) ? If so, how ? As part of our compliance and support requirements we log all the commands per session.? Ideally, we would like to continuously integrate activities into a sql table that we can quickly query if the need arises.? Anyone on the list doing that ? How do you do it ? Or are people using different products for that ? Users are all in chrooted environments FYI ??? ---Mike