{
    "node": "10.1.76.35",
    "timestamp": "1598384799",
    "timestampfractional": "470",
    "eventid": "5499",
    "items": {
        "CRYPTO_KEY_USER": [
            "pid=2363 uid=0 auid=1000 ses=2 subj==unconfined msg='op=destroy kind=session fp=? direction=both spid=2368 suid=1000 rport=53989 laddr=192.168.206.131 lport=22  exe=\"/usr/sbin/sshd\" hostname=? addr=192.168.206.1 terminal=? res=success' UID=\"root\" AUID=\"jr\" SUID=\"jr\"",
            "pid=2363 uid=0 auid=1000 ses=2 subj==unconfined msg='op=destroy kind=session fp=? direction=both spid=2368 suid=1000 rport=53989 laddr=192.168.206.131 lport=22  exe=\"/usr/sbin/sshd\" hostname=? addr=192.168.206.1 terminal=? res=success' UID=\"root\" AUID=\"jr\" SUID=\"jr\""
        ]
    }
}