Jan 14 03:31:36 oakrhelv001 systemd-logind: Removed session 8072854.
{
    "facilityCode": 1,
    "facilityLabel": "user-level",
    "fieldExtractorName": "generic_log",
    "localHostname": "oakrhelv001",
    "localStartTime": "Jan 14 03:31:36",
    "message": "Jan 14 03:31:36 oakrhelv001 systemd-logind: Removed session 8072854.",
    "messageType": "auth_event",
    "priority": 13,
    "program": "systemd-logind",
    "senderHost": "oakrhelv001.achn.net",
    "sensitivity": "normal",
    "severityCode": 5,
    "severityLabel": "notice",
    "sourceInfo": "unknown",
    "streamName": "systemd_logind",
    "tags": [
        "rfc3164",
        "systemd_logind",
        "auth_event"
    ]
}