SELECT time,facility,tag,message FROM syslog WHERE tag GLOB 'sshd*' AND message GLOB '*Accepted*for*from*';