<14>Dec 25 16:50:40 centos audispd: node=domen.ru type=SERVICE_STOP msg=audit(1514209840.222:434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success