my $prev_line = "";
  while ( my $line = <$log> ) {
    if ( $line =~ /Auth\s+failed./ ) {
       ...
       # error message should be in $prev_line
    }
    $prev_line = $line;
  }
[download]