SELECT time,facility,tag,message FROM syslog WHERE tag GLOB 'sshd*' AND (message GLOB '*Failed password*' OR message GLOB 'Invalid user*from*');