Fwd: more filters
"Kirk Bauer" <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
---------- Forwarded message ---------- From: JT Moree <[email protected]> Date: Tue, 23 Dec 2008 08:53:59 -0700 Subject: more filters To: Kirk Bauer <[email protected]> i have a few more logwatch filters. thanks - JT Moree System Admin www.kahalacorp.com 480.362.4800 480.362.4405 direct -- Sent from my mobile device ------------------------------------------------------ Kirk Bauer <[email protected]> http://linux.kaybee.org | www.logwatch.org Author, Automating UNIX & Linux Administration _______________________________________________ Logwatch-Devel mailing list [email protected] http://www2.list.logwatch.org:81/mailman/listinfo/logwatch-devel
logwatch-sshd.patch
(text/x-patch, 369 B)
4a5,7 > # 2008/12/23 > # Added more filters for pam_winbind and ssh lines, by JT Moree > # 230a234,236 > ($ThisLine =~ /pam_winbind\(sshd:account\): user(.*)granted access/) or > ($ThisLine =~ /pam_winbind\(sshd:account\): user(.*)OK/) or > ($ThisLine =~ /PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=/) or