after some tinkering with
sshd no longer logs information about failed login attempts to syslog for some reason. I've returned both
rsyslog configs back to where it was:
rpm -V $(rpm -qf /etc/ssh/sshd_config) rpm -V $(rpm -qf /etc/rsyslog.conf)
both produce empty output.
however there is still nothing in
journalctl -u sshd shows only:
Oct 02 12:59:29 server04.company.name systemd: Starting OpenSSH server daemon... Oct 02 12:59:29 server04.company.name systemd: Started OpenSSH server daemon.
(in case you're wondering: I made failed login attempt to check this.)
has anyone encountered the same weird behavior?