Can sshlog be configured with a "minimally invasive" config, for the sole purpose of logging negotiated outbound client connections (kex/key exchange, host key, ciphers)?
The goal is to avoid collecting or storing any info other than source IP, destination IP, and negotiated SSH parameters, and to retain them over time, to inform upgrade / migration / cleanup.