5711 192.0.2.1 Example of rule that will ignore sshd failed logins from IP 1.1.1.1. ossec syscheck_new_entry File added to the system. syscheck,