{
    "node": "10.1.76.35",
    "timestamp": "1597750877",
    "timestampfractional": "404",
    "eventid": "1793",
    "items": {
        "CRYPTO_SESSION": [
            "pid=2172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=2173 suid=74 rport=64963 laddr=192.168.206.129 lport=22  exe=\"/usr/sbin/sshd\" hostname=? addr=192.168.206.1 terminal=? res=success' UID=\"root\" AUID=\"unset\" SUID=\"sshd\""
        ]
    }
}