{
    "node": "10.1.76.35",
    "timestamp": "1598352934",
    "timestampfractional": "208",
    "eventid": "1470",
    "items": {
        "LOGIN": [
            "pid=1750 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1 UID=\"root\" OLD-AUID=\"unset\" AUID=\"jr\""
        ],
        "PROCTITLE": [
            "proctitle=2F7573722F7362696E2F73736864002D44002D52"
        ],
        "SYSCALL": [
            "arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc68929b90 a2=4 a3=7fc5691c3371 items=0 ppid=897 pid=1750 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm=\"sshd\" exe=\"/usr/sbin/sshd\" key=(null) ARCH=x86_64 SYSCALL=write AUID=\"jr\" UID=\"root\" GID=\"root\" EUID=\"root\" SUID=\"root\" FSUID=\"root\" EGID=\"root\" SGID=\"root\" FSGID=\"root\""
        ]
    }
}