From: unruh@invalid.ca   
      
   On 2021-09-01, Sidney_Kotic  wrote:   
   > Is there a "simple", for my simple mind, way to produce a listing of all the   
   > logins that failed for a specific (say yesterday) period via a cronjob?   
   >   
   > As root, or using sudo, this sorta works, for successful logins:   
   > journalctl --unit=systemd-logind --since 2021-08-30 --until 2021-08-31   
      
   I never did like systemd logging-- a log is a place of last resort,   
   which should be readable even if you have nothing working, not an   
   incomprehensible database which requires a special program to read it.   
   So I also use rsyslog and have an auth.log file in /var/log.   
      
   I have a cron job whichlooks for failed ssh logins.   
   So it has lines like   
   grep 'sshd.*Failed password for' /var/log/auth.log|awk '{print $   
   NF-3)}'>$OUTPUT   
      
   >   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)