<134>2024-07-27T00:50:07.513202-04:00 NTNX-22SH3G340266-B-CVM audispd[5729]: node=ntnx-22sh3g340266-b-cvm type=USER_START msg=audit(1722055807.507:187964): pid=6976 uid=0 auid=0 ses=50682 subj=sysadm_u:sysadm_r:sysadm_su_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="nutanix" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'
This is a syslog message from a product called linux_audit by linux_audit. The following fields were extracted from the message:
facilityCode: 16
facilityLabel: local0
fieldExtractorName: linux_audit
localHostname: NTNX-22SH3G340266-B-CVM
localStartTime: 2024-07-27T00:50:07.513202-04:00
messageType: audit_log
pid: 5729
priority: 134
program: audispd
senderHost: 192.168.14.192
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: linux_audit
tags: ['rfc3164', 'EVENT:USER_START', 'linux_audit', 'audit_log']