diff --git a/roles/epylog/files/merged/weed_local.cf b/roles/epylog/files/merged/weed_local.cf
index 6f2c5e36b7..571f456b4a 100644
--- a/roles/epylog/files/merged/weed_local.cf
+++ b/roles/epylog/files/merged/weed_local.cf
@@ -269,6 +269,7 @@ sshd.*: Found matching RSA key.*
 sshd.*: Found matching DSA key.*
 sshd.*: input_userauth_request: invalid user.*
 sshd.*: pam_unix\(sshd:session\): session closed for user.*
+sshd.*: Close session: user root from.*
 sshd.*: pam_unix\(sshd:session\): session opened for user.*
 sshd.*: Postponed publickey for.*
 sshd.*: refused connect from.*