diff -Nur -x '*.orig' -x '*.rej' logwatch-7.3.2/conf/logfiles/sshd-current.conf mezzanine_patched_logwatch-7.3.2/conf/logfiles/sshd-current.conf --- logwatch-7.3.2/conf/logfiles/sshd-current.conf 1969-12-31 17:00:00.000000000 -0700 +++ mezzanine_patched_logwatch-7.3.2/conf/logfiles/sshd-current.conf 2006-12-29 13:15:49.000000000 -0700 @@ -0,0 +1,15 @@ +########################################################################## +# $Id: sshd-current.conf,v 1.1 2005/09/07 00:37:59 bjorn Exp $ +########################################################################## +# $Log: sshd-current.conf,v $ +# Revision 1.1 2005/09/07 00:37:59 bjorn +# New sshd multilog files written by Shad L. Lords +# +########################################################################## + +# What actual file? Defaults to LogPath if not absolute path.... +LogFile = sshd/@*.s +LogFile = sshd/current + +# Keep only the lines in the proper date range... +*applytaidate diff -Nur -x '*.orig' -x '*.rej' logwatch-7.3.2/conf/services/sshd-multi.conf mezzanine_patched_logwatch-7.3.2/conf/services/sshd-multi.conf --- logwatch-7.3.2/conf/services/sshd-multi.conf 1969-12-31 17:00:00.000000000 -0700 +++ mezzanine_patched_logwatch-7.3.2/conf/services/sshd-multi.conf 2006-12-29 13:15:25.000000000 -0700 @@ -0,0 +1,36 @@ +########################################################################### +# $Id: sshd-multi.conf,v 1.1 2005/09/07 00:37:59 bjorn Exp $ +########################################################################### +# $Log: sshd-multi.conf,v $ +# Revision 1.1 2005/09/07 00:37:59 bjorn +# New sshd multilog files written by Shad L. Lords +# +########################################################################### + +# for use with multilog + +# You can put comments anywhere you want to. They are effective for the +# rest of the line. + +# this is in the format of = . Whitespace at the beginning +# and end of the lines is removed. Whitespace before and after the = sign +# is removed. Everything is case *insensitive*. + +# Yes = True = On = 1 +# No = False = Off = 0 + +Title = "sshd" + +# Which logfile group... +LogFile = sshd-current + +# Only give lines pertaining to the sshd service... +#*OnlyService = sshd +*RemoveHeaders = + +# Variable $sshd_ignore_host is used to filter out hosts that login +# successfully. This commented-out example filters out reserved local +# addresses (IETF RFC 1918 and RFC 3330). +#$sshd_ignore_host="^10\.|^172\.(1[6-9]|2[0-9]|3[01])\.|^192\.168\.|^127\." + +# vi: shiftwidth=3 tabstop=3 et