Get all login related logs

[mezuky04]

Hello. I need to store all the failed login attempts (including the reason for the failure) in a database and for that, I'm using sftpgo-plugin-eventstore.

The problem is that some refused connections are not inserted into the database. For example, if I try to use a not-supported KEX algorithm, the login fails but nothing is inserted into the database:

sftp -P 2022 -oKexAlgorithms=kexguess2@matt.ucc.asn.au test@host

I'm using the default plugin config:

{
      "type": "notifier",
      "notifier_options": {
        "fs_events": [
          "download",
          "upload",
          "delete",
          "rename",
          "mkdir",
          "rmdir",
          "ssh_cmd"
        ],
        "provider_events": [
          "add",
          "update",
          "delete"
        ],
        "provider_objects": [
          "user",
          "folder",
          "group",
          "admin",
          "api_key",
          "share",
          "event_action",
          "event_rule",
          "role",
          "ip_list_entry",
          "configs"
        ],
        "log_events": [
          1,
          2,
          3,
          4
        ],
        "retry_max_time": 60,
        "retry_queue_max_size": 1000
      },
      "cmd": "<path to sftpgo-plugin-eventstore>",
      "args": ["serve", "--driver", "postgres"],
      "sha256sum": "",
      "auto_mtls": true
    }

Log event 4 should be inserted when the algorithm negotiation fails, right? I also tried to use the pre_login_hook and post_login_hook options, but the reason why the login failed seems to not be included.

Is there another way to get all the failed login attempts (including the reason)? It does not matter if the results are directly inserted into a database or sent via a webhook.

Thanks