3 Mar 2005 20:13
Adding a regex to the login module.
Clark, Rick <Rick.Clark <at> McKesson.com>
2005-03-03 19:13:50 GMT
2005-03-03 19:13:50 GMT
Hi all, I there a way to add a regex to the login module like you can to notices. I have machines that are sending sshd information in a different format. i.e Mar 1 08:45:03 systest.mckesson.com sshd[7994]: [ID 800047 auth.info] Accepted publickey for user from x.x.x.x port 46405 ssh2 I think I can match it with: sshd.*: \[.*\]\sAccepted Thanks, Rick Clark Security Infrastructure Engineer Security Architecture and Engineering Enterprise Security Group McKesson Corporation T (404) 338-2762 M (678) 458-5084
RSS Feed