<134>2024-07-26T23:56:02.992659-04:00 NTNX-19FM3F370243-A-CVM audispd[27556]: node=ntnx-19fm3f370243-a-cvm type=PATH msg=audit(1722052562.989:15073121): item=0 name="/var/log/lastlog" inode=134800 dev=09:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lastlog_t:s0 objtype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
{
    "facilityCode": 16,
    "facilityLabel": "local0",
    "fieldExtractorName": "linux_audit",
    "localHostname": "NTNX-19FM3F370243-A-CVM",
    "localStartTime": "2024-07-26T23:56:02.992659-04:00",
    "message": "<134>2024-07-26T23:56:02.992659-04:00 NTNX-19FM3F370243-A-CVM audispd[27556]: node=ntnx-19fm3f370243-a-cvm type=PATH msg=audit(1722052562.989:15073121): item=0 name=\"/var/log/lastlog\" inode=134800 dev=09:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lastlog_t:s0 objtype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0",
    "messageType": "audit_log",
    "pid": 27556,
    "priority": 134,
    "program": "audispd",
    "senderHost": "192.168.14.171",
    "sensitivity": "normal",
    "severityCode": 6,
    "severityLabel": "informational",
    "sourceInfo": "unknown",
    "streamName": "linux_audit",
    "tags": [
        "rfc3164",
        "EVENT:PATH",
        "linux_audit",
        "audit_log"
    ]
}