Using the NSX API you can set your own SSH login banner. Simply connect using your API client of choice in my example I used postmon and change the following…
Insert Your Login Banner Here
Here is an example of a really simple but cool query that can be setup in vRealize Log Insight to track accepted and failed SSH logins to Edge devices.
appname contains “sshd”
text contains “failed password” (This can be changed to “accepted password” to track accepted logins)
hostname contains “hostname”