fail2ban is great for reducing clutter in logs. When I'm trying to debug something using auth.log I don't want to sift through 800 attempts by some IP to SSH in as root.
It gives just enough info about the origin and nature of attempted intruders without overwhelming detail.