<134>2024-07-27T00:50:07.512535-04:00 NTNX-22SH3G340266-B-CVM audispd[5729]: node=ntnx-22sh3g340266-b-cvm type=SYSCALL msg=audit(1722055807.504:187963): arch=c000003e syscall=2 success=yes exit=5 a0=7f113f94632e a1=2 a2=3e8 a3=3 items=1 ppid=6975 pid=6976 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50682 comm="su" exe="/usr/bin/su" subj=sysadm_u:sysadm_r:sysadm_su_t:s0-s0:c0.c1023 key="logins"
{
    "facilityCode": 16,
    "facilityLabel": "local0",
    "fieldExtractorName": "linux_audit",
    "localHostname": "NTNX-22SH3G340266-B-CVM",
    "localStartTime": "2024-07-27T00:50:07.512535-04:00",
    "message": "<134>2024-07-27T00:50:07.512535-04:00 NTNX-22SH3G340266-B-CVM audispd[5729]: node=ntnx-22sh3g340266-b-cvm type=SYSCALL msg=audit(1722055807.504:187963): arch=c000003e syscall=2 success=yes exit=5 a0=7f113f94632e a1=2 a2=3e8 a3=3 items=1 ppid=6975 pid=6976 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50682 comm=\"su\" exe=\"/usr/bin/su\" subj=sysadm_u:sysadm_r:sysadm_su_t:s0-s0:c0.c1023 key=\"logins\"",
    "messageType": "audit_log",
    "pid": 5729,
    "priority": 134,
    "program": "audispd",
    "senderHost": "192.168.14.192",
    "sensitivity": "normal",
    "severityCode": 6,
    "severityLabel": "informational",
    "sourceInfo": "unknown",
    "streamName": "linux_audit",
    "tags": [
        "rfc3164",
        "EVENT:SYSCALL",
        "linux_audit",
        "audit_log"
    ]
}