From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20030225
Description of problem:
To catch some more potential issues, the keyword "failure" could be added to the
ALERTWORDS section of "/etc/sysconfig/redhat-logviewer".
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. run "redhat-logviewer"
Noticed that su(pam_unix) authentication failures haven't got a red icon.
"failure" keyword should trigger some more results.
Red Hat Linux release 9 (Shrike)
Maybe just "fail"? Even more general
The word failed was in the list, so I changed it to fail. When you upgrade to
the version 0.8.5-6 from rawhide, it will not overwrite your preferences file,
so if you want to use the change, you should go into the Preferences, remove the
keyword failed, and add fail.