Hilton hilt86

## ssh-watcher.json
{
  "trigger": {
    "schedule": {
      "interval": "300s"
    }
  },
  "input": {
    "search": {
      "request": {
        "search_type": "query_then_fetch",

## elasticsearch_failed_invalid_ssh.json
{
  "query": {
  "terms":{"system.auth.ssh.event":["Failed","Invalid"],"boost":1}
  }
}

## keybase.md

      
        
          
            
              
              1 file
            
          
          
            
              
              0 forks
            
          
          
            
              
              0 comments
            
          
          
            
              
              0 stars
            
          
        
        
          
              
          
          
            
                hilt86
                / keybase.md
            
            
              Created
              May 12, 2017 13:05
            
          
        
      
        
  
      
    Keybase proof

I hereby claim:

I am hilt86 on github.
I am hdemeillon (https://keybase.io/hdemeillon) on keybase.
I have a public key ASCOOzKiDQT688lmmiH4CzgzwapzAO6b7Iyq1VdlDnzXlwo

To claim this, I am signing this object:
	{
	"trigger": {
	"schedule": {
	"interval": "300s"
	}
	},
	"input": {
	"search": {
	"request": {
	"search_type": "query_then_fetch",
	{
	"query": {
	"terms":{"system.auth.ssh.event":["Failed","Invalid"],"boost":1}
	}
	}