# send mail if anyone has tried to break in.
# this is in  cron.daily
#
if logwatch --range=yesterday --service=pam_unix --print | grep -q "authentication failure"
then 
 logwatch --range=yesterday
fi
#