Hrm, looking upstream /usr/share/logwatch/scripts/services/sshd (which is the same in Xenial):
($ThisLine =~ m/^pam_sss\(sshd:.*\)/) or -- { # Ignore these } Can you confirm that still happens with the latest code? But, the pam_krb5 and pam_ldap ones reported seem to be genuine issues upstream, can you file issues there? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to logwatch in Ubuntu. https://bugs.launchpad.net/bugs/1060238 Title: unmatched entries for sshd To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1060238/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs