https://unix.stackexchange.com/questions/139874/local-timestamped-logging-of-all-ssh-commands/145297#145297

# /etc/bash.bashrc

PROMPT_COMMAND='history -a >(tee -a ~/.bash_history | logger -t "$USER[$$] $SSH_CONNECTION")'

# source /etc/bash.bashrc

# /etc/rsyslog.conf

*.*;auth,authpriv.none.local6           -/var/log/syslog
local6.info /var/log/histor.log

# touch /var/log/history.log && /etc/init.d/rsyslog restart