{
    "node": "10.1.76.35",
    "timestamp": "1597750877",
    "timestampfractional": "401",
    "eventid": "1790",
    "items": {
        "CRYPTO_KEY_USER": [
            "pid=2173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:6f:25:f2:91:2d:81:5a:c9:38:ad:81:2f:d3:39:1f:48:31:24:1a:1a:6a:b1:9d:5f:6a:c2:04:69:7a:8a:82:de direction=? spid=2173 suid=0  exe=\"/usr/sbin/sshd\" hostname=? addr=? terminal=? res=success' UID=\"root\" AUID=\"unset\" SUID=\"root\""
        ]
    }
}