add journalctl for ssh by default

2023-06-28 10:23:40 +02:00 · 2023-06-28 10:23:40 +02:00 · 350e2081f2
parent 893394ef5f
commit 350e2081f2
1 changed files with 6 additions and 0 deletions
--- a/config/acquis.yaml
+++ b/config/acquis.yaml
@ -10,6 +10,12 @@ filenames:
 - /var/log/syslog
 labels:
  type: syslog
+--- 
+source: journalctl
+journalctl_filter:
+ - "_SYSTEMD_UNIT=ssh.service"
+labels:
+  type: syslog
 ---
 filename: /var/log/apache2/*.log
 labels: