PowerShell Shell awk '/sshd.*invalid user/ { print $9 }' /var/log/auth.log 1 awk '/sshd.*invalid user/ { print $9 }' /var/log/auth.log