Мониторим сервер с помощью Jabber. Мои наработки.

gedit /etc/rsyslog.d/50-default.conf
***

:msg, contains, "Accepted password for" /var/log/ssh/Accepted_auth.log
:msg, contains, "Failed password for" /var/log/ssh/Failed_auth.log

***

/etc/init.d/rsyslog restart

//

gedit /home/$user/.sendxmpprc

***

user1@jabber.ru:5222 PaSsWoRd

***

$ tail -f /var/log/ssh/Failed_auth.log | sendxmpp -s 'SSH Login' -r 'F_SSH' -i user@jabber.ru

$ tail -f /var/log/ssh/Accepted_auth.log | sendxmpp -s 'SSH Login' -r 'SSH' -i user@jabber.ru