<134>2024-07-26T09:15:04.827180-04:00 NTNX-19FM3F370242-B-CVM audispd[4979]: node=ntnx-19fm3f370242-b-cvm type=SYSCALL msg=audit(1721999704.823:14501116): arch=c000003e syscall=90 success=yes exit=0 a0=2ea19d0 a1=1ed a2=1 a3=7ffc94bbba20 items=1 ppid=6209 pid=6210 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=2467736 comm="python2.7" exe="/usr/bin/python2.7" subj=nutanix_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key="audit_time_perm_mod_export_delete"
This is a syslog message from a product called linux_audit by linux_audit. The following fields were extracted from the message:
facilityCode: 16
facilityLabel: local0
fieldExtractorName: linux_audit
localHostname: NTNX-19FM3F370242-B-CVM
localStartTime: 2024-07-26T09:15:04.827180-04:00
messageType: audit_log
pid: 4979
priority: 134
program: audispd
senderHost: 192.168.14.170
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: linux_audit
tags: ['rfc3164', 'EVENT:SYSCALL', 'linux_audit', 'audit_log']