{
  "services": {
    "dropbear": {
      "state": "down",
      "enable": "echo \"airstack\":\"airstack\" | chpasswd",
      "disable": "",
      "run": "/usr/sbin/dropbear -F -E -R",
      "check": "",
      "finish": "",
      "log": "exec chpst -u root logger -t dropbear -p local0.notice",
      "tags": ["ssh", "dropbear"],
      "input": [{"source": "any", "destination": "any", "port": "22", "protocol": "tcp", "tags": [ "" ]}],
      "output": [{"source": "any", "destination": "any", "port": "any", "protocol": "tcp","tags": [ "" ]}]
    }
  }
}

{
  "services": {
    "dropbear": {
      "state": "down",
      "enable": "echo \"airstack\":\"airstack\" | chpasswd",
      "disable": "",
      "run": "/usr/sbin/dropbear -F -E -R",
      "check": "",
      "finish": "",
      "log": "exec chpst -u log logger -t dropbear -p auth.notice",
      "tags": ["ssh", "dropbear"],
      "input": [{"source": "any", "destination": "any", "port": "22", "protocol": "tcp", "tags": [ "" ]}],
      "output": [{"source": "any", "destination": "any", "port": "any", "protocol": "tcp","tags": [ "" ]}]
    }
  }
}

Update dropbear logging user & facility
Update dropbear logging user & facility