log { source(s_all); filter(sshlogsauth); destination(sshguardproc); };