---
journalctl_filter:
  - "_SYSTEMD_UNIT=sshd.service"
labels:
  type: syslog
---
journalctl_filter:
  - "_TRASPORT=kernel"
labels:
  type: syslog