Re: Fwd: more filters
Mike Tremaine <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Kirk Bauer wrote: > ---------- Forwarded message ---------- > From: JT Moree <[email protected]> > Date: Tue, 23 Dec 2008 08:53:59 -0700 > Subject: more filters > To: Kirk Bauer <[email protected]> > > i have a few more logwatch filters. thanks > Commited [mgt@dwarfstar services]$ cvs diff sshd Index: sshd =================================================================== RCS file: /var/cvs/logwatch/scripts/services/sshd,v retrieving revision 1.76 diff -r1.76 sshd 272a273,275 > ($ThisLine =~ /pam_winbind\(sshd:account\): user .* granted access/) or > ($ThisLine =~ /pam_winbind\(sshd:account\): user .* OK/) or > ($ThisLine =~ /PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=/) or