Linux auth logs: SSH sign-ins, password spraying and sudo
The Linux authentication pack in the Logit.io Dashboard Library installs six OpenSearch Dashboards that read the auth log your servers already write: an overview, failed SSH sign-ins, successful SSH sign-ins, sudo activity, SSH password spraying and a user investigation timeline.