Linux · syslog
Linux SSH authentication — auth.log / secure
OpenSSH authentication messages are routed through the host logging configuration.
Log sources tagged ssh
Log sources tagged ssh. Browse source profiles associated with ssh.
Matching source profiles
Zeek · json
Zeek SSH JSON
Zeek protocol analysis produces structured metadata from observed network traffic.