{
    "node": "10.1.76.35",
    "timestamp": "1597753201",
    "timestampfractional": "201",
    "eventid": "2380",
    "items": {
        "LOGIN": [
            "pid=2767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=6 res=1 UID=\"root\" OLD-AUID=\"unset\" AUID=\"root\""
        ]
    }
}