<134>2024-07-27T00:50:07.513202-04:00 NTNX-22SH3G340266-B-CVM audispd[5729]: node=ntnx-22sh3g340266-b-cvm type=USER_START msg=audit(1722055807.507:187964): pid=6976 uid=0 auid=0 ses=50682 subj=sysadm_u:sysadm_r:sysadm_su_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="nutanix" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
{
    "facilityCode": 16,
    "facilityLabel": "local0",
    "fieldExtractorName": "linux_audit",
    "localHostname": "NTNX-22SH3G340266-B-CVM",
    "localStartTime": "2024-07-27T00:50:07.513202-04:00",
    "message": "<134>2024-07-27T00:50:07.513202-04:00 NTNX-22SH3G340266-B-CVM audispd[5729]: node=ntnx-22sh3g340266-b-cvm type=USER_START msg=audit(1722055807.507:187964): pid=6976 uid=0 auid=0 ses=50682 subj=sysadm_u:sysadm_r:sysadm_su_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct=\"nutanix\" exe=\"/usr/bin/su\" hostname=? addr=? terminal=? res=success'",
    "messageType": "audit_log",
    "pid": 5729,
    "priority": 134,
    "program": "audispd",
    "senderHost": "192.168.14.192",
    "sensitivity": "normal",
    "severityCode": 6,
    "severityLabel": "informational",
    "sourceInfo": "unknown",
    "streamName": "linux_audit",
    "tags": [
        "rfc3164",
        "EVENT:USER_START",
        "linux_audit",
        "audit_log"
    ]
}