Jul 27 00:30:01 oakrhelv007 systemd: Started Session 39400 of user root.
{
    "facilityCode": 1,
    "facilityLabel": "user-level",
    "fieldExtractorName": "systemd",
    "localHostname": "oakrhelv007",
    "localStartTime": "Jul 27 00:30:01",
    "message": "Jul 27 00:30:01 oakrhelv007 systemd: Started Session 39400 of user root.",
    "messageType": "systemd_event",
    "priority": 13,
    "program": "systemd",
    "senderHost": "10.101.1.107",
    "sensitivity": "normal",
    "severityCode": 5,
    "severityLabel": "notice",
    "sourceInfo": "unknown",
    "streamName": "systemd",
    "tags": [
        "rfc3164",
        "systemd",
        "systemd_event"
    ]
}