<134>2024-07-26T09:15:05.047279-04:00 NTNX-21SH3G470025-A-CVM audispd[5178]: node=ntnx-21sh3g470025-a-cvm type=SYSCALL msg=audit(1721999705.041:13807144): arch=c000003e syscall=260 success=yes exit=0 a0=ffffffffffffff9c a1=c30980 a2=3e8 a3=3e8 items=1 ppid=1591 pid=1909 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3189793 comm="chown" exe="/usr/bin/chown" subj=sysadm_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 key="audit_time_perm_mod_export_delete"
This is a syslog message from a product called linux_audit by linux_audit. The following fields were extracted from the message:
facilityCode: 16
facilityLabel: local0
fieldExtractorName: linux_audit
localHostname: NTNX-21SH3G470025-A-CVM
localStartTime: 2024-07-26T09:15:05.047279-04:00
messageType: audit_log
pid: 5178
priority: 134
program: audispd
senderHost: 192.168.14.168
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: linux_audit
tags: ['rfc3164', 'EVENT:SYSCALL', 'linux_audit', 'audit_log']