Quieting SSHd messages to the console

All,

Sometimes, like when doing an upgrade on my system, I want to use the 
console.

I want to get a message on the console when a user su's (auth.notice). 
That seems pretty critical.

I do not want to get logs on the console for every other ssh session that 
fails to complete because the internet is full of bots.

Sep 18 08:42:31 <auth.err> prime sshd[3098]: error: 
Fssh_kex_exchange_identification: Connection closed by remote host

Sep 18 08:38:24 <auth.err> prime sshd[2531]: error: PAM: Authentication 
error for illegal user test from 78.38.71.249

What goes to the console in /etc/syslog.conf is:

*.err;kern.warning;auth.notice;mail.crit                /dev/console

Is there a way to say "everything else.err, but not auth.err"?

-Dan

-- 

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
FB:  fb.com/DanielMahoneyIV
LI:   linkedin.com/in/gushi
Site:  http://www.gushi.org
---------------------------