Label org.sample.sshd-logging UserName root ProgramArguments /bin/sh -c /usr/bin/log stream --level info --process sshd --style compact --predicate '(sender == "sshd")' StandardOutPath /var/log/sshd-log RunAtLoad KeepAlive