diff -Nur e-smith-openssh-2.6.0.old/root/etc/e-smith/templates/etc/rsyslog.conf/32sshd e-smith-openssh-2.6.0/root/etc/e-smith/templates/etc/rsyslog.conf/32sshd
--- e-smith-openssh-2.6.0.old/root/etc/e-smith/templates/etc/rsyslog.conf/32sshd	1969-12-31 19:00:00.000000000 -0500
+++ e-smith-openssh-2.6.0/root/etc/e-smith/templates/etc/rsyslog.conf/32sshd	2021-02-18 23:11:58.454000000 -0500
@@ -0,0 +1,6 @@
+
+#sshd
+if $programname == 'sshd' and $syslogfacility-text == 'authpriv' then      /var/log/secure
+:programname, isequal, "sshd"            /var/log/sshd/sshd.log
+& stop
+
diff -Nur e-smith-openssh-2.6.0.old/root/etc/logrotate.d/sshd e-smith-openssh-2.6.0/root/etc/logrotate.d/sshd
--- e-smith-openssh-2.6.0.old/root/etc/logrotate.d/sshd	1969-12-31 19:00:00.000000000 -0500
+++ e-smith-openssh-2.6.0/root/etc/logrotate.d/sshd	2021-02-18 23:13:02.453000000 -0500
@@ -0,0 +1,13 @@
+/var/log/sshd/sshd.log
+{
+    missingok
+    notifempty
+    sharedscripts
+    delaycompress
+    su root root
+    create 600 root root
+    postrotate
+        /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
+    endscript
+}
+
diff -Nur e-smith-openssh-2.6.0.old/createlinks e-smith-openssh-2.6.0/createlinks
--- e-smith-openssh-2.6.0.old/createlinks	2021-02-19 01:04:35.196000000 -0500
+++ e-smith-openssh-2.6.0/createlinks	2021-02-19 01:05:30.696000000 -0500
@@ -54,4 +54,5 @@
 event_link("systemd-reload", $event, "89");
 event_link("systemd-default", $event, "88");
 safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/sshd");
-                                                                                    
+templates2events("/etc/rsyslog.conf",$event);
+safe_symlink("restart", "root/etc/e-smith/events/$event/services2adjust/rsyslog");