/rules/
../
auth_failed
auth_success
ssh_publickey_accept
tags_test
watch_alllog
watch_httpd