source: journalctl
journalctl_filter:
  # NixOS names the OpenSSH unit "sshd.service"; Debian/Ubuntu use "ssh.service".
  - "_SYSTEMD_UNIT=sshd.service"
labels:
  type: syslog