diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf index 206b913a..595e957f 100644 --- a/config/filter.d/sshd.conf +++ b/config/filter.d/sshd.conf @@ -126,7 +126,7 @@ ignoreregex = maxlines = 1 -journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd +journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd + _COMM=sshd-session # DEV Notes: #