Jan 13 15:10:01 oakrhelv001 CROND[786265]: (root) CMD (/usr/lib64/sa/sa1 1 1)
This is a syslog message from a product called crond by crond. The following fields were extracted from the message:
facilityCode: 1
facilityLabel: user-level
fieldExtractorName: generic_log
localHostname: oakrhelv001
localStartTime: Jan 13 15:10:01
messageType: systemd_event
pid: 786265
priority: 13
program: CROND
senderHost: oakrhelv001.achn.net
sensitivity: normal
severityCode: 5
severityLabel: notice
sourceInfo: unknown
streamName: crond
tags: ['rfc3164', 'crond', 'systemd_event']