<134>2024-07-26T15:25:35.472092-04:00 NTNX-22SH3G340266-A-CVM audispd[12378]: node=ntnx-22sh3g340266-a-cvm type=PATH msg=audit(1722021935.470:166060): item=0 name="/var/log/lastlog" inode=134800 dev=09:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lastlog_t:s0 objtype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
This is a syslog message from a product called linux_audit by linux_audit. The following fields were extracted from the message:
facilityCode: 16
facilityLabel: local0
fieldExtractorName: linux_audit
localHostname: NTNX-22SH3G340266-A-CVM
localStartTime: 2024-07-26T15:25:35.472092-04:00
messageType: audit_log
pid: 12378
priority: 134
program: audispd
senderHost: 192.168.14.190
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: linux_audit
tags: ['rfc3164', 'EVENT:PATH', 'linux_audit', 'audit_log']