This script lets you sort through the auth.log file to look for sudo, ssh, and su authentication successes and failures.