@outfrost@mastodon.social Probably not the answer you are looking for, but for web traffic, I use fluent bit to read my nginx logs, does geo IP lookups etc, and send them to Loki. I then have a Grafana Dashboard that aggregates and displays them. Additionally I have monitoring for my hypervisor via Prometheus. Nothing for SSH right now, but with fluent bit that should be doable I think.