{
    "node": "10.1.76.35",
    "timestamp": "1598352991",
    "timestampfractional": "400",
    "eventid": "1951",
    "items": {
        "LOGIN": [
            "pid=2034 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1 UID=\"root\" OLD-AUID=\"unset\" AUID=\"jr\""
        ],
        "PROCTITLE": [
            "proctitle=\"(systemd)\""
        ],
        "SYSCALL": [
            "arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffdf69b28b0 a2=4 a3=7fe229448371 items=0 ppid=1 pid=2034 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm=\"(systemd)\" exe=\"/usr/lib/systemd/systemd\" key=(null) ARCH=x86_64 SYSCALL=write AUID=\"jr\" UID=\"root\" GID=\"root\" EUID=\"root\" SUID=\"root\" FSUID=\"root\" EGID=\"root\" SGID=\"root\" FSGID=\"root\""
        ]
    }
}