[ { "model": "app.anomalytype", "pk": 1, "fields": { "library": "injected", "name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from " } }, { "model": "app.anomalytype", "pk": 2, "fields": { "library": "injected", "name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB" } }, { "model": "app.anomalytype", "pk": 3, "fields": { "library": "injected", "name": "disk_full", "program": "systemd-journald", "facility": "daemon", "severity": "crit", "message_text": "Failed to write entry, ignoring: No space left on device" } }, { "model": "app.anomalytype", "pk": 4, "fields": { "library": "injected", "name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6" } }, { "model": "app.anomalytype", "pk": 5, "fields": { "library": "injected", "name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)" } }, { "model": "app.anomalytype", "pk": 6, "fields": { "library": "injected", "name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash" } }, { "model": "app.host", "pk": 1, "fields": { "hostname": "srv-797", "role": "web", "distribution": "debian-12", "capture_started_at": "2025-08-18T21:41:50Z" } }, { "model": "app.host", "pk": 2, "fields": { "hostname": "srv-831", "role": "web", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T23:45:16Z" } }, { "model": "app.host", "pk": 3, "fields": { "hostname": "srv-192", "role": "bastion", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T08:26:47Z" } }, { "model": "app.host", "pk": 4, "fields": { "hostname": "srv-295", "role": "web", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T16:45:24Z" } }, { "model": "app.host", "pk": 5, "fields": { "hostname": "srv-700", "role": "web", "distribution": "debian-12", "capture_started_at": "2025-08-18T23:45:16Z" } }, { "model": "app.host", "pk": 6, "fields": { "hostname": "srv-019", "role": "batch", "distribution": "debian-12", "capture_started_at": "2025-08-18T23:19:25Z" } }, { "model": "app.host", "pk": 7, "fields": { "hostname": "srv-550", "role": "database", "distribution": "debian-12", "capture_started_at": "2025-08-18T06:57:02Z" } }, { "model": "app.host", "pk": 8, "fields": { "hostname": "srv-711", "role": "database", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T17:54:32Z" } }, { "model": "app.host", "pk": 9, "fields": { "hostname": "srv-783", "role": "database", "distribution": "debian-12", "capture_started_at": "2025-08-18T02:34:02Z" } }, { "model": "app.host", "pk": 10, "fields": { "hostname": "srv-867", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T18:04:53Z" } }, { "model": "app.host", "pk": 11, "fields": { "hostname": "srv-715", "role": "cache", "distribution": "rocky-9", "capture_started_at": "2025-08-18T10:02:50Z" } }, { "model": "app.host", "pk": 12, "fields": { "hostname": "srv-382", "role": "cache", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T02:29:06Z" } }, { "model": "app.host", "pk": 13, "fields": { "hostname": "srv-380", "role": "bastion", "distribution": "debian-12", "capture_started_at": "2025-08-18T12:54:02Z" } }, { "model": "app.host", "pk": 14, "fields": { "hostname": "srv-597", "role": "cache", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T01:02:10Z" } }, { "model": "app.host", "pk": 15, "fields": { "hostname": "srv-070", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T20:36:33Z" } }, { "model": "app.host", "pk": 16, "fields": { "hostname": "srv-939", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T16:58:34Z" } }, { "model": "app.host", "pk": 17, "fields": { "hostname": "srv-801", "role": "web", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T03:06:20Z" } }, { "model": "app.host", "pk": 18, "fields": { "hostname": "srv-172", "role": "bastion", "distribution": "debian-12", "capture_started_at": "2025-08-18T09:20:48Z" } }, { "model": "app.host", "pk": 19, "fields": { "hostname": "srv-935", "role": "database", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T04:18:13Z" } }, { "model": "app.host", "pk": 20, "fields": { "hostname": "srv-787", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T13:26:51Z" } }, { "model": "app.host", "pk": 21, "fields": { "hostname": "srv-423", "role": "bastion", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T05:57:50Z" } }, { "model": "app.host", "pk": 22, "fields": { "hostname": "srv-818", "role": "database", "distribution": "rocky-9", "capture_started_at": "2025-08-18T03:26:53Z" } }, { "model": "app.host", "pk": 23, "fields": { "hostname": "srv-278", "role": "web", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T03:40:20Z" } }, { "model": "app.host", "pk": 24, "fields": { "hostname": "srv-079", "role": "web", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T13:31:48Z" } }, { "model": "app.host", "pk": 25, "fields": { "hostname": "srv-396", "role": "batch", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T16:04:23Z" } }, { "model": "app.host", "pk": 26, "fields": { "hostname": "srv-952", "role": "web", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T11:35:21Z" } }, { "model": "app.host", "pk": 27, "fields": { "hostname": "srv-671", "role": "database", "distribution": "rocky-9", "capture_started_at": "2025-08-18T08:15:04Z" } }, { "model": "app.host", "pk": 28, "fields": { "hostname": "srv-630", "role": "web", "distribution": "rocky-9", "capture_started_at": "2025-08-18T12:06:12Z" } }, { "model": "app.host", "pk": 29, "fields": { "hostname": "srv-296", "role": "cache", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18T18:18:26Z" } }, { "model": "app.host", "pk": 30, "fields": { "hostname": "srv-493", "role": "bastion", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18T15:38:43Z" } }, { "model": "app.anomalywindow", "pk": 1, "fields": { "host": 6, "hostname": "srv-019", "anomaly_type": 4, "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "started_at": "2025-08-19T05:53:20Z" } }, { "model": "app.anomalywindow", "pk": 2, "fields": { "host": 17, "hostname": "srv-801", "anomaly_type": 5, "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "started_at": "2025-08-18T03:51:12Z" } }, { "model": "app.anomalywindow", "pk": 3, "fields": { "host": 17, "hostname": "srv-801", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18T16:48:16Z" } }, { "model": "app.anomalywindow", "pk": 4, "fields": { "host": 22, "hostname": "srv-818", "anomaly_type": 6, "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "started_at": "2025-08-18T09:46:33Z" } }, { "model": "app.anomalywindow", "pk": 5, "fields": { "host": 25, "hostname": "srv-396", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18T17:22:54Z" } }, { "model": "app.anomalywindow", "pk": 6, "fields": { "host": 2, "hostname": "srv-831", "anomaly_type": 4, "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "started_at": "2025-08-19T05:59:29Z" } }, { "model": "app.anomalywindow", "pk": 7, "fields": { "host": 25, "hostname": "srv-396", "anomaly_type": 5, "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "started_at": "2025-08-18T19:27:40Z" } }, { "model": "app.anomalywindow", "pk": 8, "fields": { "host": 16, "hostname": "srv-939", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-19T05:49:10Z" } }, { "model": "app.anomalywindow", "pk": 9, "fields": { "host": 11, "hostname": "srv-715", "anomaly_type": 6, "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "started_at": "2025-08-19T02:22:41Z" } }, { "model": "app.anomalywindow", "pk": 10, "fields": { "host": 27, "hostname": "srv-671", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18T09:32:49Z" } }, { "model": "app.anomalywindow", "pk": 11, "fields": { "host": 15, "hostname": "srv-070", "anomaly_type": 2, "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "started_at": "2025-08-19T00:08:50Z" } }, { "model": "app.anomalywindow", "pk": 12, "fields": { "host": 2, "hostname": "srv-831", "anomaly_type": 2, "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "started_at": "2025-08-19T21:47:29Z" } }, { "model": "app.anomalywindow", "pk": 13, "fields": { "host": 5, "hostname": "srv-700", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-19T20:57:22Z" } }, { "model": "app.anomalywindow", "pk": 14, "fields": { "host": 22, "hostname": "srv-818", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18T09:30:00Z" } }, { "model": "app.anomalywindow", "pk": 15, "fields": { "host": 29, "hostname": "srv-296", "anomaly_type": 5, "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "started_at": "2025-08-19T16:12:47Z" } }, { "model": "app.anomalywindow", "pk": 16, "fields": { "host": 10, "hostname": "srv-867", "anomaly_type": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-19T11:20:02Z" } }, { "model": "app.anomalymessage", "pk": 1, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:09:13Z" } }, { "model": "app.anomalymessage", "pk": 2, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:22:54Z" } }, { "model": "app.anomalymessage", "pk": 3, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:48:25Z" } }, { "model": "app.anomalymessage", "pk": 4, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:51:25Z" } }, { "model": "app.anomalymessage", "pk": 5, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:23:03Z" } }, { "model": "app.anomalymessage", "pk": 6, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:57:44Z" } }, { "model": "app.anomalymessage", "pk": 7, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:46:41Z" } }, { "model": "app.anomalymessage", "pk": 8, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:09:24Z" } }, { "model": "app.anomalymessage", "pk": 9, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:27:54Z" } }, { "model": "app.anomalymessage", "pk": 10, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:51:42Z" } }, { "model": "app.anomalymessage", "pk": 11, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:12:58Z" } }, { "model": "app.anomalymessage", "pk": 12, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:09:29Z" } }, { "model": "app.anomalymessage", "pk": 13, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:53:32Z" } }, { "model": "app.anomalymessage", "pk": 14, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:20:06Z" } }, { "model": "app.anomalymessage", "pk": 15, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:53:54Z" } }, { "model": "app.anomalymessage", "pk": 16, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:46:46Z" } }, { "model": "app.anomalymessage", "pk": 17, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:09:53Z" } }, { "model": "app.anomalymessage", "pk": 18, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:48:35Z" } }, { "model": "app.anomalymessage", "pk": 19, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:30:06Z" } }, { "model": "app.anomalymessage", "pk": 20, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:47:01Z" } }, { "model": "app.anomalymessage", "pk": 21, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:23:27Z" } }, { "model": "app.anomalymessage", "pk": 22, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:47:05Z" } }, { "model": "app.anomalymessage", "pk": 23, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:10:07Z" } }, { "model": "app.anomalymessage", "pk": 24, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:47:15Z" } }, { "model": "app.anomalymessage", "pk": 25, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:13:01Z" } }, { "model": "app.anomalymessage", "pk": 26, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:52:08Z" } }, { "model": "app.anomalymessage", "pk": 27, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:52:13Z" } }, { "model": "app.anomalymessage", "pk": 28, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:47:19Z" } }, { "model": "app.anomalymessage", "pk": 29, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:20:29Z" } }, { "model": "app.anomalymessage", "pk": 30, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:52:24Z" } }, { "model": "app.anomalymessage", "pk": 31, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:10:16Z" } }, { "model": "app.anomalymessage", "pk": 32, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:28:01Z" } }, { "model": "app.anomalymessage", "pk": 33, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:23:09Z" } }, { "model": "app.anomalymessage", "pk": 34, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:59:38Z" } }, { "model": "app.anomalymessage", "pk": 35, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:54:19Z" } }, { "model": "app.anomalymessage", "pk": 36, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:20:52Z" } }, { "model": "app.anomalymessage", "pk": 37, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:52:42Z" } }, { "model": "app.anomalymessage", "pk": 38, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:10:30Z" } }, { "model": "app.anomalymessage", "pk": 39, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:48:54Z" } }, { "model": "app.anomalymessage", "pk": 40, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:23:37Z" } }, { "model": "app.anomalymessage", "pk": 41, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:10:35Z" } }, { "model": "app.anomalymessage", "pk": 42, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:10:52Z" } }, { "model": "app.anomalymessage", "pk": 43, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:47:39Z" } }, { "model": "app.anomalymessage", "pk": 44, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:54:34Z" } }, { "model": "app.anomalymessage", "pk": 45, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:28:10Z" } }, { "model": "app.anomalymessage", "pk": 46, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:21:04Z" } }, { "model": "app.anomalymessage", "pk": 47, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:00:03Z" } }, { "model": "app.anomalymessage", "pk": 48, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:00:26Z" } }, { "model": "app.anomalymessage", "pk": 49, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:13:08Z" } }, { "model": "app.anomalymessage", "pk": 50, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:11:08Z" } }, { "model": "app.anomalymessage", "pk": 51, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:28:30Z" } }, { "model": "app.anomalymessage", "pk": 52, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:54:56Z" } }, { "model": "app.anomalymessage", "pk": 53, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:48:01Z" } }, { "model": "app.anomalymessage", "pk": 54, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:23:32Z" } }, { "model": "app.anomalymessage", "pk": 55, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:49:26Z" } }, { "model": "app.anomalymessage", "pk": 56, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:28:56Z" } }, { "model": "app.anomalymessage", "pk": 57, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:29:14Z" } }, { "model": "app.anomalymessage", "pk": 58, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:48:03Z" } }, { "model": "app.anomalymessage", "pk": 59, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:52:47Z" } }, { "model": "app.anomalymessage", "pk": 60, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:48:08Z" } }, { "model": "app.anomalymessage", "pk": 61, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:23:40Z" } }, { "model": "app.anomalymessage", "pk": 62, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:23:58Z" } }, { "model": "app.anomalymessage", "pk": 63, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:24:12Z" } }, { "model": "app.anomalymessage", "pk": 64, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:13:31Z" } }, { "model": "app.anomalymessage", "pk": 65, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:13:54Z" } }, { "model": "app.anomalymessage", "pk": 66, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:55:03Z" } }, { "model": "app.anomalymessage", "pk": 67, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:57:47Z" } }, { "model": "app.anomalymessage", "pk": 68, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:21:08Z" } }, { "model": "app.anomalymessage", "pk": 69, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:11:11Z" } }, { "model": "app.anomalymessage", "pk": 70, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:57:52Z" } }, { "model": "app.anomalymessage", "pk": 71, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:53:05Z" } }, { "model": "app.anomalymessage", "pk": 72, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:47:44Z" } }, { "model": "app.anomalymessage", "pk": 73, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:24:14Z" } }, { "model": "app.anomalymessage", "pk": 74, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:53:21Z" } }, { "model": "app.anomalymessage", "pk": 75, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:55:16Z" } }, { "model": "app.anomalymessage", "pk": 76, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:53:44Z" } }, { "model": "app.anomalymessage", "pk": 77, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:29:25Z" } }, { "model": "app.anomalymessage", "pk": 78, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:48:34Z" } }, { "model": "app.anomalymessage", "pk": 79, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:33:06Z" } }, { "model": "app.anomalymessage", "pk": 80, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:48:04Z" } }, { "model": "app.anomalymessage", "pk": 81, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:21:31Z" } }, { "model": "app.anomalymessage", "pk": 82, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:57:54Z" } }, { "model": "app.anomalymessage", "pk": 83, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:11:22Z" } }, { "model": "app.anomalymessage", "pk": 84, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:58:19Z" } }, { "model": "app.anomalymessage", "pk": 85, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:23:52Z" } }, { "model": "app.anomalymessage", "pk": 86, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:48:18Z" } }, { "model": "app.anomalymessage", "pk": 87, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:48:39Z" } }, { "model": "app.anomalymessage", "pk": 88, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:30:17Z" } }, { "model": "app.anomalymessage", "pk": 89, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:53:51Z" } }, { "model": "app.anomalymessage", "pk": 90, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:24:19Z" } }, { "model": "app.anomalymessage", "pk": 91, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:49:34Z" } }, { "model": "app.anomalymessage", "pk": 92, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:54:04Z" } }, { "model": "app.anomalymessage", "pk": 93, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:29:34Z" } }, { "model": "app.anomalymessage", "pk": 94, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:58:28Z" } }, { "model": "app.anomalymessage", "pk": 95, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:55:35Z" } }, { "model": "app.anomalymessage", "pk": 96, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:29:53Z" } }, { "model": "app.anomalymessage", "pk": 97, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:49:55Z" } }, { "model": "app.anomalymessage", "pk": 98, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:49:57Z" } }, { "model": "app.anomalymessage", "pk": 99, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:24:21Z" } }, { "model": "app.anomalymessage", "pk": 100, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:48:50Z" } }, { "model": "app.anomalymessage", "pk": 101, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:30:30Z" } }, { "model": "app.anomalymessage", "pk": 102, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:29:57Z" } }, { "model": "app.anomalymessage", "pk": 103, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:55:40Z" } }, { "model": "app.anomalymessage", "pk": 104, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:21:50Z" } }, { "model": "app.anomalymessage", "pk": 105, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:33:14Z" } }, { "model": "app.anomalymessage", "pk": 106, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:30:15Z" } }, { "model": "app.anomalymessage", "pk": 107, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:30:38Z" } }, { "model": "app.anomalymessage", "pk": 108, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:00Z" } }, { "model": "app.anomalymessage", "pk": 109, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:24:44Z" } }, { "model": "app.anomalymessage", "pk": 110, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:30:29Z" } }, { "model": "app.anomalymessage", "pk": 111, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:04Z" } }, { "model": "app.anomalymessage", "pk": 112, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:49:14Z" } }, { "model": "app.anomalymessage", "pk": 113, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:13Z" } }, { "model": "app.anomalymessage", "pk": 114, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:48:41Z" } }, { "model": "app.anomalymessage", "pk": 115, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:56:01Z" } }, { "model": "app.anomalymessage", "pk": 116, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:23Z" } }, { "model": "app.anomalymessage", "pk": 117, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:11:37Z" } }, { "model": "app.anomalymessage", "pk": 118, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:24:01Z" } }, { "model": "app.anomalymessage", "pk": 119, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:12:04Z" } }, { "model": "app.anomalymessage", "pk": 120, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:58:50Z" } }, { "model": "app.anomalymessage", "pk": 121, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:56:21Z" } }, { "model": "app.anomalymessage", "pk": 122, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:59:17Z" } }, { "model": "app.anomalymessage", "pk": 123, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:14:05Z" } }, { "model": "app.anomalymessage", "pk": 124, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:26Z" } }, { "model": "app.anomalymessage", "pk": 125, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:12:23Z" } }, { "model": "app.anomalymessage", "pk": 126, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:24:12Z" } }, { "model": "app.anomalymessage", "pk": 127, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:54:23Z" } }, { "model": "app.anomalymessage", "pk": 128, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:34Z" } }, { "model": "app.anomalymessage", "pk": 129, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:50:19Z" } }, { "model": "app.anomalymessage", "pk": 130, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:49:27Z" } }, { "model": "app.anomalymessage", "pk": 131, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:12:36Z" } }, { "model": "app.anomalymessage", "pk": 132, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:49:54Z" } }, { "model": "app.anomalymessage", "pk": 133, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:22:52Z" } }, { "model": "app.anomalymessage", "pk": 134, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:30:46Z" } }, { "model": "app.anomalymessage", "pk": 135, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:00:36Z" } }, { "model": "app.anomalymessage", "pk": 136, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:23:11Z" } }, { "model": "app.anomalymessage", "pk": 137, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:24:34Z" } }, { "model": "app.anomalymessage", "pk": 138, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:56:46Z" } }, { "model": "app.anomalymessage", "pk": 139, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:24:48Z" } }, { "model": "app.anomalymessage", "pk": 140, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:49:13Z" } }, { "model": "app.anomalymessage", "pk": 141, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:25:13Z" } }, { "model": "app.anomalymessage", "pk": 142, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:25:35Z" } }, { "model": "app.anomalymessage", "pk": 143, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:12:47Z" } }, { "model": "app.anomalymessage", "pk": 144, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:33:27Z" } }, { "model": "app.anomalymessage", "pk": 145, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:12:55Z" } }, { "model": "app.anomalymessage", "pk": 146, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:56:57Z" } }, { "model": "app.anomalymessage", "pk": 147, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:49:20Z" } }, { "model": "app.anomalymessage", "pk": 148, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:30:55Z" } }, { "model": "app.anomalymessage", "pk": 149, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:49:47Z" } }, { "model": "app.anomalymessage", "pk": 150, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:23:17Z" } }, { "model": "app.anomalymessage", "pk": 151, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:13:07Z" } }, { "model": "app.anomalymessage", "pk": 152, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:30:49Z" } }, { "model": "app.anomalymessage", "pk": 153, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:23:31Z" } }, { "model": "app.anomalymessage", "pk": 154, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:50:00Z" } }, { "model": "app.anomalymessage", "pk": 155, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:50:44Z" } }, { "model": "app.anomalymessage", "pk": 156, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:33:52Z" } }, { "model": "app.anomalymessage", "pk": 157, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:13:18Z" } }, { "model": "app.anomalymessage", "pk": 158, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:23:49Z" } }, { "model": "app.anomalymessage", "pk": 159, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:30:52Z" } }, { "model": "app.anomalymessage", "pk": 160, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:57:06Z" } }, { "model": "app.anomalymessage", "pk": 161, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:54:25Z" } }, { "model": "app.anomalymessage", "pk": 162, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:24:07Z" } }, { "model": "app.anomalymessage", "pk": 163, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T20:59:38Z" } }, { "model": "app.anomalymessage", "pk": 164, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:57:31Z" } }, { "model": "app.anomalymessage", "pk": 165, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:33:54Z" } }, { "model": "app.anomalymessage", "pk": 166, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:57:44Z" } }, { "model": "app.anomalymessage", "pk": 167, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:24:47Z" } }, { "model": "app.anomalymessage", "pk": 168, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:50:56Z" } }, { "model": "app.anomalymessage", "pk": 169, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:48:51Z" } }, { "model": "app.anomalymessage", "pk": 170, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:49:03Z" } }, { "model": "app.anomalymessage", "pk": 171, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:13:31Z" } }, { "model": "app.anomalymessage", "pk": 172, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:24:29Z" } }, { "model": "app.anomalymessage", "pk": 173, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:31:16Z" } }, { "model": "app.anomalymessage", "pk": 174, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:31:41Z" } }, { "model": "app.anomalymessage", "pk": 175, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:51:18Z" } }, { "model": "app.anomalymessage", "pk": 176, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:49:29Z" } }, { "model": "app.anomalymessage", "pk": 177, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:57:47Z" } }, { "model": "app.anomalymessage", "pk": 178, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:54:44Z" } }, { "model": "app.anomalymessage", "pk": 179, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:24:32Z" } }, { "model": "app.anomalymessage", "pk": 180, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:32:04Z" } }, { "model": "app.anomalymessage", "pk": 181, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:55:06Z" } }, { "model": "app.anomalymessage", "pk": 182, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:55:10Z" } }, { "model": "app.anomalymessage", "pk": 183, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:34:11Z" } }, { "model": "app.anomalymessage", "pk": 184, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:32:20Z" } }, { "model": "app.anomalymessage", "pk": 185, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:49:32Z" } }, { "model": "app.anomalymessage", "pk": 186, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:32:25Z" } }, { "model": "app.anomalymessage", "pk": 187, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:51:31Z" } }, { "model": "app.anomalymessage", "pk": 188, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:24:53Z" } }, { "model": "app.anomalymessage", "pk": 189, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:25:11Z" } }, { "model": "app.anomalymessage", "pk": 190, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:34:34Z" } }, { "model": "app.anomalymessage", "pk": 191, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:50:09Z" } }, { "model": "app.anomalymessage", "pk": 192, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:13:56Z" } }, { "model": "app.anomalymessage", "pk": 193, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:25:44Z" } }, { "model": "app.anomalymessage", "pk": 194, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T21:00:04Z" } }, { "model": "app.anomalymessage", "pk": 195, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T21:00:17Z" } }, { "model": "app.anomalymessage", "pk": 196, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:25:17Z" } }, { "model": "app.anomalymessage", "pk": 197, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:32:42Z" } }, { "model": "app.anomalymessage", "pk": 198, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:50:22Z" } }, { "model": "app.anomalymessage", "pk": 199, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:51:38Z" } }, { "model": "app.anomalymessage", "pk": 200, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:57:52Z" } }, { "model": "app.anomalymessage", "pk": 201, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:55:27Z" } }, { "model": "app.anomalymessage", "pk": 202, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:50:45Z" } }, { "model": "app.anomalymessage", "pk": 203, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:33:08Z" } }, { "model": "app.anomalymessage", "pk": 204, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:57:59Z" } }, { "model": "app.anomalymessage", "pk": 205, "fields": { "window": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19T02:26:11Z" } }, { "model": "app.anomalymessage", "pk": 206, "fields": { "window": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T03:55:45Z" } }, { "model": "app.anomalymessage", "pk": 207, "fields": { "window": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T16:50:22Z" } }, { "model": "app.anomalymessage", "pk": 208, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:25:13Z" } }, { "model": "app.anomalymessage", "pk": 209, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:34:38Z" } }, { "model": "app.anomalymessage", "pk": 210, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:00:38Z" } }, { "model": "app.anomalymessage", "pk": 211, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:25:22Z" } }, { "model": "app.anomalymessage", "pk": 212, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:14:10Z" } }, { "model": "app.anomalymessage", "pk": 213, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T21:00:20Z" } }, { "model": "app.anomalymessage", "pk": 214, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:33:24Z" } }, { "model": "app.anomalymessage", "pk": 215, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:14:29Z" } }, { "model": "app.anomalymessage", "pk": 216, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:31:12Z" } }, { "model": "app.anomalymessage", "pk": 217, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:25:40Z" } }, { "model": "app.anomalymessage", "pk": 218, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:14:26Z" } }, { "model": "app.anomalymessage", "pk": 219, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:51:02Z" } }, { "model": "app.anomalymessage", "pk": 220, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:34:41Z" } }, { "model": "app.anomalymessage", "pk": 221, "fields": { "window": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T17:25:20Z" } }, { "model": "app.anomalymessage", "pk": 222, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:51:13Z" } }, { "model": "app.anomalymessage", "pk": 223, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:33:41Z" } }, { "model": "app.anomalymessage", "pk": 224, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:58:17Z" } }, { "model": "app.anomalymessage", "pk": 225, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:00:52Z" } }, { "model": "app.anomalymessage", "pk": 226, "fields": { "window": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19T16:14:44Z" } }, { "model": "app.anomalymessage", "pk": 227, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:01:10Z" } }, { "model": "app.anomalymessage", "pk": 228, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:58:38Z" } }, { "model": "app.anomalymessage", "pk": 229, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T21:00:22Z" } }, { "model": "app.anomalymessage", "pk": 230, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:58:40Z" } }, { "model": "app.anomalymessage", "pk": 231, "fields": { "window": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T05:51:52Z" } }, { "model": "app.anomalymessage", "pk": 232, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:59:03Z" } }, { "model": "app.anomalymessage", "pk": 233, "fields": { "window": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18T09:51:21Z" } }, { "model": "app.anomalymessage", "pk": 234, "fields": { "window": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T00:14:53Z" } }, { "model": "app.anomalymessage", "pk": 235, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:59:30Z" } }, { "model": "app.anomalymessage", "pk": 236, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:33:53Z" } }, { "model": "app.anomalymessage", "pk": 237, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:25:46Z" } }, { "model": "app.anomalymessage", "pk": 238, "fields": { "window": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T06:01:33Z" } }, { "model": "app.anomalymessage", "pk": 239, "fields": { "window": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T11:26:05Z" } }, { "model": "app.anomalymessage", "pk": 240, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:49:45Z" } }, { "model": "app.anomalymessage", "pk": 241, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:31:14Z" } }, { "model": "app.anomalymessage", "pk": 242, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T21:00:41Z" } }, { "model": "app.anomalymessage", "pk": 243, "fields": { "window": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19T21:50:00Z" } }, { "model": "app.anomalymessage", "pk": 244, "fields": { "window": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:31:41Z" } }, { "model": "app.anomalymessage", "pk": 245, "fields": { "window": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18T09:35:03Z" } }, { "model": "app.anomalymessage", "pk": 246, "fields": { "window": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19T05:59:43Z" } }, { "model": "app.anomalymessage", "pk": 247, "fields": { "window": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18T19:34:11Z" } }, { "model": "app.anomalymessage", "pk": 248, "fields": { "window": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19T21:01:06Z" } }, { "model": "app.messagetemplate", "pk": 1, "fields": { "library": "routine", "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User ." } }, { "model": "app.messagetemplate", "pk": 2, "fields": { "library": "routine", "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities..." } }, { "model": "app.messagetemplate", "pk": 3, "fields": { "library": "routine", "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2" } }, { "model": "app.messagetemplate", "pk": 4, "fields": { "library": "routine", "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user " } }, { "model": "app.messagetemplate", "pk": 5, "fields": { "library": "routine", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)" } }, { "model": "app.messagetemplate", "pk": 6, "fields": { "library": "routine", "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off" } }, { "model": "app.messagetemplate", "pk": 7, "fields": { "library": "routine", "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro" } }, { "model": "app.messagetemplate", "pk": 8, "fields": { "library": "routine", "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from " } }, { "model": "app.messagetemplate", "pk": 9, "fields": { "library": "routine", "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed" } }, { "model": "app.messagetemplate", "pk": 10, "fields": { "library": "routine", "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)" } }, { "model": "app.messagetemplate", "pk": 11, "fields": { "library": "routine", "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully." } }, { "model": "app.messagetemplate", "pk": 12, "fields": { "library": "routine", "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user ." } }, { "model": "app.messagetemplate", "pk": 13, "fields": { "library": "routine", "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime" } }, { "model": "app.messagetemplate", "pk": 14, "fields": { "library": "routine", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)" } }, { "model": "app.syslogmessage", "pk": 1, "fields": { "host": 20, "hostname": "srv-787", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T13:42:57Z" } }, { "model": "app.syslogmessage", "pk": 2, "fields": { "host": 26, "hostname": "srv-952", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T12:21:25Z" } }, { "model": "app.syslogmessage", "pk": 3, "fields": { "host": 12, "hostname": "srv-382", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T03:04:08Z" } }, { "model": "app.syslogmessage", "pk": 4, "fields": { "host": 26, "hostname": "srv-952", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T13:13:48Z" } }, { "model": "app.syslogmessage", "pk": 5, "fields": { "host": 7, "hostname": "srv-550", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T07:06:51Z" } }, { "model": "app.syslogmessage", "pk": 6, "fields": { "host": 11, "hostname": "srv-715", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T10:35:21Z" } }, { "model": "app.syslogmessage", "pk": 7, "fields": { "host": 1, "hostname": "srv-797", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T22:26:36Z" } }, { "model": "app.syslogmessage", "pk": 8, "fields": { "host": 27, "hostname": "srv-671", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T08:27:30Z" } }, { "model": "app.syslogmessage", "pk": 9, "fields": { "host": 8, "hostname": "srv-711", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T18:34:27Z" } }, { "model": "app.syslogmessage", "pk": 10, "fields": { "host": 3, "hostname": "srv-192", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T08:44:48Z" } }, { "model": "app.syslogmessage", "pk": 11, "fields": { "host": 24, "hostname": "srv-079", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T14:24:50Z" } }, { "model": "app.syslogmessage", "pk": 12, "fields": { "host": 20, "hostname": "srv-787", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T14:10:33Z" } }, { "model": "app.syslogmessage", "pk": 13, "fields": { "host": 3, "hostname": "srv-192", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T09:05:30Z" } }, { "model": "app.syslogmessage", "pk": 14, "fields": { "host": 8, "hostname": "srv-711", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:17:26Z" } }, { "model": "app.syslogmessage", "pk": 15, "fields": { "host": 19, "hostname": "srv-935", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T04:40:24Z" } }, { "model": "app.syslogmessage", "pk": 16, "fields": { "host": 11, "hostname": "srv-715", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T10:42:30Z" } }, { "model": "app.syslogmessage", "pk": 17, "fields": { "host": 2, "hostname": "srv-831", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T00:05:00Z" } }, { "model": "app.syslogmessage", "pk": 18, "fields": { "host": 6, "hostname": "srv-019", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T23:48:35Z" } }, { "model": "app.syslogmessage", "pk": 19, "fields": { "host": 15, "hostname": "srv-070", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T21:02:47Z" } }, { "model": "app.syslogmessage", "pk": 20, "fields": { "host": 20, "hostname": "srv-787", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T14:47:27Z" } }, { "model": "app.syslogmessage", "pk": 21, "fields": { "host": 21, "hostname": "srv-423", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T06:07:22Z" } }, { "model": "app.syslogmessage", "pk": 22, "fields": { "host": 25, "hostname": "srv-396", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T16:50:44Z" } }, { "model": "app.syslogmessage", "pk": 23, "fields": { "host": 7, "hostname": "srv-550", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T08:01:11Z" } }, { "model": "app.syslogmessage", "pk": 24, "fields": { "host": 20, "hostname": "srv-787", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T15:12:57Z" } }, { "model": "app.syslogmessage", "pk": 25, "fields": { "host": 10, "hostname": "srv-867", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T18:58:13Z" } }, { "model": "app.syslogmessage", "pk": 26, "fields": { "host": 11, "hostname": "srv-715", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T11:32:42Z" } }, { "model": "app.syslogmessage", "pk": 27, "fields": { "host": 10, "hostname": "srv-867", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T19:44:30Z" } }, { "model": "app.syslogmessage", "pk": 28, "fields": { "host": 27, "hostname": "srv-671", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T08:42:08Z" } }, { "model": "app.syslogmessage", "pk": 29, "fields": { "host": 1, "hostname": "srv-797", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T22:43:26Z" } }, { "model": "app.syslogmessage", "pk": 30, "fields": { "host": 18, "hostname": "srv-172", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T09:29:13Z" } }, { "model": "app.syslogmessage", "pk": 31, "fields": { "host": 28, "hostname": "srv-630", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T12:42:45Z" } }, { "model": "app.syslogmessage", "pk": 32, "fields": { "host": 27, "hostname": "srv-671", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T09:39:55Z" } }, { "model": "app.syslogmessage", "pk": 33, "fields": { "host": 24, "hostname": "srv-079", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T14:48:10Z" } }, { "model": "app.syslogmessage", "pk": 34, "fields": { "host": 22, "hostname": "srv-818", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T04:14:50Z" } }, { "model": "app.syslogmessage", "pk": 35, "fields": { "host": 25, "hostname": "srv-396", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T17:45:56Z" } }, { "model": "app.syslogmessage", "pk": 36, "fields": { "host": 9, "hostname": "srv-783", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T02:49:03Z" } }, { "model": "app.syslogmessage", "pk": 37, "fields": { "host": 23, "hostname": "srv-278", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T04:18:21Z" } }, { "model": "app.syslogmessage", "pk": 38, "fields": { "host": 15, "hostname": "srv-070", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T21:22:11Z" } }, { "model": "app.syslogmessage", "pk": 39, "fields": { "host": 1, "hostname": "srv-797", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T23:09:57Z" } }, { "model": "app.syslogmessage", "pk": 40, "fields": { "host": 10, "hostname": "srv-867", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T20:21:06Z" } }, { "model": "app.syslogmessage", "pk": 41, "fields": { "host": 17, "hostname": "srv-801", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T03:12:40Z" } }, { "model": "app.syslogmessage", "pk": 42, "fields": { "host": 8, "hostname": "srv-711", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T20:07:29Z" } }, { "model": "app.syslogmessage", "pk": 43, "fields": { "host": 19, "hostname": "srv-935", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T05:00:25Z" } }, { "model": "app.syslogmessage", "pk": 44, "fields": { "host": 25, "hostname": "srv-396", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T17:52:29Z" } }, { "model": "app.syslogmessage", "pk": 45, "fields": { "host": 30, "hostname": "srv-493", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:55:22Z" } }, { "model": "app.syslogmessage", "pk": 46, "fields": { "host": 3, "hostname": "srv-192", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T10:00:06Z" } }, { "model": "app.syslogmessage", "pk": 47, "fields": { "host": 24, "hostname": "srv-079", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T15:09:50Z" } }, { "model": "app.syslogmessage", "pk": 48, "fields": { "host": 15, "hostname": "srv-070", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T21:47:22Z" } }, { "model": "app.syslogmessage", "pk": 49, "fields": { "host": 1, "hostname": "srv-797", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T23:31:39Z" } }, { "model": "app.syslogmessage", "pk": 50, "fields": { "host": 6, "hostname": "srv-019", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T00:09:12Z" } }, { "model": "app.syslogmessage", "pk": 51, "fields": { "host": 3, "hostname": "srv-192", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T10:38:21Z" } }, { "model": "app.syslogmessage", "pk": 52, "fields": { "host": 4, "hostname": "srv-295", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T17:28:41Z" } }, { "model": "app.syslogmessage", "pk": 53, "fields": { "host": 3, "hostname": "srv-192", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T11:06:57Z" } }, { "model": "app.syslogmessage", "pk": 54, "fields": { "host": 15, "hostname": "srv-070", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T22:02:08Z" } }, { "model": "app.syslogmessage", "pk": 55, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T12:27:06Z" } }, { "model": "app.syslogmessage", "pk": 56, "fields": { "host": 2, "hostname": "srv-831", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T00:43:14Z" } }, { "model": "app.syslogmessage", "pk": 57, "fields": { "host": 22, "hostname": "srv-818", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T04:52:16Z" } }, { "model": "app.syslogmessage", "pk": 58, "fields": { "host": 30, "hostname": "srv-493", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T16:30:59Z" } }, { "model": "app.syslogmessage", "pk": 59, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T00:18:51Z" } }, { "model": "app.syslogmessage", "pk": 60, "fields": { "host": 23, "hostname": "srv-278", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T04:40:39Z" } }, { "model": "app.syslogmessage", "pk": 61, "fields": { "host": 10, "hostname": "srv-867", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:45:52Z" } }, { "model": "app.syslogmessage", "pk": 62, "fields": { "host": 21, "hostname": "srv-423", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T07:06:30Z" } }, { "model": "app.syslogmessage", "pk": 63, "fields": { "host": 2, "hostname": "srv-831", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T00:53:28Z" } }, { "model": "app.syslogmessage", "pk": 64, "fields": { "host": 10, "hostname": "srv-867", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:57:25Z" } }, { "model": "app.syslogmessage", "pk": 65, "fields": { "host": 8, "hostname": "srv-711", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T20:38:41Z" } }, { "model": "app.syslogmessage", "pk": 66, "fields": { "host": 27, "hostname": "srv-671", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T10:06:02Z" } }, { "model": "app.syslogmessage", "pk": 67, "fields": { "host": 15, "hostname": "srv-070", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T23:00:42Z" } }, { "model": "app.syslogmessage", "pk": 68, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T14:07:52Z" } }, { "model": "app.syslogmessage", "pk": 69, "fields": { "host": 26, "hostname": "srv-952", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T14:26:45Z" } }, { "model": "app.syslogmessage", "pk": 70, "fields": { "host": 11, "hostname": "srv-715", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T12:50:38Z" } }, { "model": "app.syslogmessage", "pk": 71, "fields": { "host": 21, "hostname": "srv-423", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T07:32:25Z" } }, { "model": "app.syslogmessage", "pk": 72, "fields": { "host": 23, "hostname": "srv-278", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T05:04:51Z" } }, { "model": "app.syslogmessage", "pk": 73, "fields": { "host": 18, "hostname": "srv-172", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T10:24:44Z" } }, { "model": "app.syslogmessage", "pk": 74, "fields": { "host": 9, "hostname": "srv-783", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T02:58:04Z" } }, { "model": "app.syslogmessage", "pk": 75, "fields": { "host": 4, "hostname": "srv-295", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T18:00:28Z" } }, { "model": "app.syslogmessage", "pk": 76, "fields": { "host": 30, "hostname": "srv-493", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T17:15:19Z" } }, { "model": "app.syslogmessage", "pk": 77, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T13:11:56Z" } }, { "model": "app.syslogmessage", "pk": 78, "fields": { "host": 16, "hostname": "srv-939", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T17:05:31Z" } }, { "model": "app.syslogmessage", "pk": 79, "fields": { "host": 10, "hostname": "srv-867", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T21:27:35Z" } }, { "model": "app.syslogmessage", "pk": 80, "fields": { "host": 13, "hostname": "srv-380", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T14:05:25Z" } }, { "model": "app.syslogmessage", "pk": 81, "fields": { "host": 1, "hostname": "srv-797", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T23:56:34Z" } }, { "model": "app.syslogmessage", "pk": 82, "fields": { "host": 2, "hostname": "srv-831", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T01:19:31Z" } }, { "model": "app.syslogmessage", "pk": 83, "fields": { "host": 27, "hostname": "srv-671", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T10:54:06Z" } }, { "model": "app.syslogmessage", "pk": 84, "fields": { "host": 7, "hostname": "srv-550", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T08:15:30Z" } }, { "model": "app.syslogmessage", "pk": 85, "fields": { "host": 29, "hostname": "srv-296", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T18:44:48Z" } }, { "model": "app.syslogmessage", "pk": 86, "fields": { "host": 19, "hostname": "srv-935", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T05:36:13Z" } }, { "model": "app.syslogmessage", "pk": 87, "fields": { "host": 26, "hostname": "srv-952", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T14:51:54Z" } }, { "model": "app.syslogmessage", "pk": 88, "fields": { "host": 14, "hostname": "srv-597", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T01:41:35Z" } }, { "model": "app.syslogmessage", "pk": 89, "fields": { "host": 24, "hostname": "srv-079", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:17:26Z" } }, { "model": "app.syslogmessage", "pk": 90, "fields": { "host": 24, "hostname": "srv-079", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:27:12Z" } }, { "model": "app.syslogmessage", "pk": 91, "fields": { "host": 24, "hostname": "srv-079", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T16:03:24Z" } }, { "model": "app.syslogmessage", "pk": 92, "fields": { "host": 18, "hostname": "srv-172", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T10:49:56Z" } }, { "model": "app.syslogmessage", "pk": 93, "fields": { "host": 15, "hostname": "srv-070", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T23:42:11Z" } }, { "model": "app.syslogmessage", "pk": 94, "fields": { "host": 3, "hostname": "srv-192", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T11:17:49Z" } }, { "model": "app.syslogmessage", "pk": 95, "fields": { "host": 25, "hostname": "srv-396", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T18:50:28Z" } }, { "model": "app.syslogmessage", "pk": 96, "fields": { "host": 27, "hostname": "srv-671", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T11:18:47Z" } }, { "model": "app.syslogmessage", "pk": 97, "fields": { "host": 23, "hostname": "srv-278", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T05:37:14Z" } }, { "model": "app.syslogmessage", "pk": 98, "fields": { "host": 13, "hostname": "srv-380", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T14:24:07Z" } }, { "model": "app.syslogmessage", "pk": 99, "fields": { "host": 13, "hostname": "srv-380", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T14:52:00Z" } }, { "model": "app.syslogmessage", "pk": 100, "fields": { "host": 26, "hostname": "srv-952", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T15:37:44Z" } }, { "model": "app.syslogmessage", "pk": 101, "fields": { "host": 8, "hostname": "srv-711", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T20:51:15Z" } }, { "model": "app.syslogmessage", "pk": 102, "fields": { "host": 26, "hostname": "srv-952", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T16:18:24Z" } }, { "model": "app.syslogmessage", "pk": 103, "fields": { "host": 4, "hostname": "srv-295", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T18:30:59Z" } }, { "model": "app.syslogmessage", "pk": 104, "fields": { "host": 25, "hostname": "srv-396", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T19:29:43Z" } }, { "model": "app.syslogmessage", "pk": 105, "fields": { "host": 13, "hostname": "srv-380", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T15:03:41Z" } }, { "model": "app.syslogmessage", "pk": 106, "fields": { "host": 12, "hostname": "srv-382", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T03:35:25Z" } }, { "model": "app.syslogmessage", "pk": 107, "fields": { "host": 12, "hostname": "srv-382", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T04:21:26Z" } }, { "model": "app.syslogmessage", "pk": 108, "fields": { "host": 24, "hostname": "srv-079", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T16:14:36Z" } }, { "model": "app.syslogmessage", "pk": 109, "fields": { "host": 16, "hostname": "srv-939", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T17:41:30Z" } }, { "model": "app.syslogmessage", "pk": 110, "fields": { "host": 20, "hostname": "srv-787", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:32:27Z" } }, { "model": "app.syslogmessage", "pk": 111, "fields": { "host": 11, "hostname": "srv-715", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T13:13:45Z" } }, { "model": "app.syslogmessage", "pk": 112, "fields": { "host": 27, "hostname": "srv-671", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T11:51:29Z" } }, { "model": "app.syslogmessage", "pk": 113, "fields": { "host": 20, "hostname": "srv-787", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T15:54:15Z" } }, { "model": "app.syslogmessage", "pk": 114, "fields": { "host": 9, "hostname": "srv-783", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T03:44:23Z" } }, { "model": "app.syslogmessage", "pk": 115, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:14:10Z" } }, { "model": "app.syslogmessage", "pk": 116, "fields": { "host": 1, "hostname": "srv-797", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T00:48:01Z" } }, { "model": "app.syslogmessage", "pk": 117, "fields": { "host": 3, "hostname": "srv-192", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T11:33:37Z" } }, { "model": "app.syslogmessage", "pk": 118, "fields": { "host": 6, "hostname": "srv-019", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T01:04:34Z" } }, { "model": "app.syslogmessage", "pk": 119, "fields": { "host": 18, "hostname": "srv-172", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T11:45:04Z" } }, { "model": "app.syslogmessage", "pk": 120, "fields": { "host": 14, "hostname": "srv-597", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T02:24:10Z" } }, { "model": "app.syslogmessage", "pk": 121, "fields": { "host": 12, "hostname": "srv-382", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T05:16:50Z" } }, { "model": "app.syslogmessage", "pk": 122, "fields": { "host": 12, "hostname": "srv-382", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T06:07:20Z" } }, { "model": "app.syslogmessage", "pk": 123, "fields": { "host": 19, "hostname": "srv-935", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T06:35:04Z" } }, { "model": "app.syslogmessage", "pk": 124, "fields": { "host": 3, "hostname": "srv-192", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T12:15:31Z" } }, { "model": "app.syslogmessage", "pk": 125, "fields": { "host": 26, "hostname": "srv-952", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T16:49:02Z" } }, { "model": "app.syslogmessage", "pk": 126, "fields": { "host": 25, "hostname": "srv-396", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T19:37:53Z" } }, { "model": "app.syslogmessage", "pk": 127, "fields": { "host": 22, "hostname": "srv-818", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T05:03:48Z" } }, { "model": "app.syslogmessage", "pk": 128, "fields": { "host": 23, "hostname": "srv-278", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T06:16:28Z" } }, { "model": "app.syslogmessage", "pk": 129, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T15:38:41Z" } }, { "model": "app.syslogmessage", "pk": 130, "fields": { "host": 12, "hostname": "srv-382", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T06:14:06Z" } }, { "model": "app.syslogmessage", "pk": 131, "fields": { "host": 15, "hostname": "srv-070", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T23:50:04Z" } }, { "model": "app.syslogmessage", "pk": 132, "fields": { "host": 3, "hostname": "srv-192", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T13:05:24Z" } }, { "model": "app.syslogmessage", "pk": 133, "fields": { "host": 17, "hostname": "srv-801", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T03:20:05Z" } }, { "model": "app.syslogmessage", "pk": 134, "fields": { "host": 16, "hostname": "srv-939", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T17:52:58Z" } }, { "model": "app.syslogmessage", "pk": 135, "fields": { "host": 29, "hostname": "srv-296", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T19:40:38Z" } }, { "model": "app.syslogmessage", "pk": 136, "fields": { "host": 19, "hostname": "srv-935", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T07:24:14Z" } }, { "model": "app.syslogmessage", "pk": 137, "fields": { "host": 20, "hostname": "srv-787", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T16:31:13Z" } }, { "model": "app.syslogmessage", "pk": 138, "fields": { "host": 9, "hostname": "srv-783", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T04:09:11Z" } }, { "model": "app.syslogmessage", "pk": 139, "fields": { "host": 8, "hostname": "srv-711", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T21:02:40Z" } }, { "model": "app.syslogmessage", "pk": 140, "fields": { "host": 24, "hostname": "srv-079", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T16:59:44Z" } }, { "model": "app.syslogmessage", "pk": 141, "fields": { "host": 26, "hostname": "srv-952", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T17:17:47Z" } }, { "model": "app.syslogmessage", "pk": 142, "fields": { "host": 30, "hostname": "srv-493", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T18:07:39Z" } }, { "model": "app.syslogmessage", "pk": 143, "fields": { "host": 12, "hostname": "srv-382", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T06:47:37Z" } }, { "model": "app.syslogmessage", "pk": 144, "fields": { "host": 25, "hostname": "srv-396", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:20:04Z" } }, { "model": "app.syslogmessage", "pk": 145, "fields": { "host": 12, "hostname": "srv-382", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T07:14:33Z" } }, { "model": "app.syslogmessage", "pk": 146, "fields": { "host": 13, "hostname": "srv-380", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T16:32:50Z" } }, { "model": "app.syslogmessage", "pk": 147, "fields": { "host": 9, "hostname": "srv-783", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T04:19:02Z" } }, { "model": "app.syslogmessage", "pk": 148, "fields": { "host": 23, "hostname": "srv-278", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T07:13:56Z" } }, { "model": "app.syslogmessage", "pk": 149, "fields": { "host": 28, "hostname": "srv-630", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T13:02:24Z" } }, { "model": "app.syslogmessage", "pk": 150, "fields": { "host": 7, "hostname": "srv-550", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T08:38:05Z" } }, { "model": "app.syslogmessage", "pk": 151, "fields": { "host": 24, "hostname": "srv-079", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T17:41:37Z" } }, { "model": "app.syslogmessage", "pk": 152, "fields": { "host": 14, "hostname": "srv-597", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T03:04:22Z" } }, { "model": "app.syslogmessage", "pk": 153, "fields": { "host": 22, "hostname": "srv-818", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T06:00:53Z" } }, { "model": "app.syslogmessage", "pk": 154, "fields": { "host": 24, "hostname": "srv-079", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T17:49:23Z" } }, { "model": "app.syslogmessage", "pk": 155, "fields": { "host": 9, "hostname": "srv-783", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T05:14:39Z" } }, { "model": "app.syslogmessage", "pk": 156, "fields": { "host": 28, "hostname": "srv-630", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T13:54:52Z" } }, { "model": "app.syslogmessage", "pk": 157, "fields": { "host": 17, "hostname": "srv-801", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T03:52:58Z" } }, { "model": "app.syslogmessage", "pk": 158, "fields": { "host": 5, "hostname": "srv-700", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T00:22:40Z" } }, { "model": "app.syslogmessage", "pk": 159, "fields": { "host": 18, "hostname": "srv-172", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T12:37:31Z" } }, { "model": "app.syslogmessage", "pk": 160, "fields": { "host": 20, "hostname": "srv-787", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T17:23:44Z" } }, { "model": "app.syslogmessage", "pk": 161, "fields": { "host": 27, "hostname": "srv-671", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T12:07:39Z" } }, { "model": "app.syslogmessage", "pk": 162, "fields": { "host": 17, "hostname": "srv-801", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T04:12:14Z" } }, { "model": "app.syslogmessage", "pk": 163, "fields": { "host": 25, "hostname": "srv-396", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T21:04:27Z" } }, { "model": "app.syslogmessage", "pk": 164, "fields": { "host": 12, "hostname": "srv-382", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T07:58:07Z" } }, { "model": "app.syslogmessage", "pk": 165, "fields": { "host": 12, "hostname": "srv-382", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T08:30:51Z" } }, { "model": "app.syslogmessage", "pk": 166, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T17:58:27Z" } }, { "model": "app.syslogmessage", "pk": 167, "fields": { "host": 16, "hostname": "srv-939", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T18:43:19Z" } }, { "model": "app.syslogmessage", "pk": 168, "fields": { "host": 24, "hostname": "srv-079", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T18:09:45Z" } }, { "model": "app.syslogmessage", "pk": 169, "fields": { "host": 12, "hostname": "srv-382", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T09:11:25Z" } }, { "model": "app.syslogmessage", "pk": 170, "fields": { "host": 14, "hostname": "srv-597", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T03:40:37Z" } }, { "model": "app.syslogmessage", "pk": 171, "fields": { "host": 6, "hostname": "srv-019", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T01:56:15Z" } }, { "model": "app.syslogmessage", "pk": 172, "fields": { "host": 6, "hostname": "srv-019", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T02:28:51Z" } }, { "model": "app.syslogmessage", "pk": 173, "fields": { "host": 13, "hostname": "srv-380", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T17:19:55Z" } }, { "model": "app.syslogmessage", "pk": 174, "fields": { "host": 1, "hostname": "srv-797", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T01:14:36Z" } }, { "model": "app.syslogmessage", "pk": 175, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T17:44:00Z" } }, { "model": "app.syslogmessage", "pk": 176, "fields": { "host": 24, "hostname": "srv-079", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T18:45:48Z" } }, { "model": "app.syslogmessage", "pk": 177, "fields": { "host": 10, "hostname": "srv-867", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T21:58:08Z" } }, { "model": "app.syslogmessage", "pk": 178, "fields": { "host": 20, "hostname": "srv-787", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T17:47:44Z" } }, { "model": "app.syslogmessage", "pk": 179, "fields": { "host": 19, "hostname": "srv-935", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T08:07:15Z" } }, { "model": "app.syslogmessage", "pk": 180, "fields": { "host": 19, "hostname": "srv-935", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18T08:14:45Z" } }, { "model": "app.syslogmessage", "pk": 181, "fields": { "host": 7, "hostname": "srv-550", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T09:27:06Z" } }, { "model": "app.syslogmessage", "pk": 182, "fields": { "host": 10, "hostname": "srv-867", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T22:10:58Z" } }, { "model": "app.syslogmessage", "pk": 183, "fields": { "host": 16, "hostname": "srv-939", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T18:51:48Z" } }, { "model": "app.syslogmessage", "pk": 184, "fields": { "host": 7, "hostname": "srv-550", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T09:54:02Z" } }, { "model": "app.syslogmessage", "pk": 185, "fields": { "host": 7, "hostname": "srv-550", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T10:00:09Z" } }, { "model": "app.syslogmessage", "pk": 186, "fields": { "host": 23, "hostname": "srv-278", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T08:13:54Z" } }, { "model": "app.syslogmessage", "pk": 187, "fields": { "host": 16, "hostname": "srv-939", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T19:46:08Z" } }, { "model": "app.syslogmessage", "pk": 188, "fields": { "host": 12, "hostname": "srv-382", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T10:02:57Z" } }, { "model": "app.syslogmessage", "pk": 189, "fields": { "host": 25, "hostname": "srv-396", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T21:13:56Z" } }, { "model": "app.syslogmessage", "pk": 190, "fields": { "host": 27, "hostname": "srv-671", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T12:54:16Z" } }, { "model": "app.syslogmessage", "pk": 191, "fields": { "host": 25, "hostname": "srv-396", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:56:07Z" } }, { "model": "app.syslogmessage", "pk": 192, "fields": { "host": 14, "hostname": "srv-597", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T03:50:01Z" } }, { "model": "app.syslogmessage", "pk": 193, "fields": { "host": 11, "hostname": "srv-715", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T13:29:56Z" } }, { "model": "app.syslogmessage", "pk": 194, "fields": { "host": 21, "hostname": "srv-423", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T08:13:53Z" } }, { "model": "app.syslogmessage", "pk": 195, "fields": { "host": 11, "hostname": "srv-715", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T13:55:02Z" } }, { "model": "app.syslogmessage", "pk": 196, "fields": { "host": 19, "hostname": "srv-935", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T08:51:50Z" } }, { "model": "app.syslogmessage", "pk": 197, "fields": { "host": 20, "hostname": "srv-787", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T18:37:17Z" } }, { "model": "app.syslogmessage", "pk": 198, "fields": { "host": 10, "hostname": "srv-867", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T23:01:00Z" } }, { "model": "app.syslogmessage", "pk": 199, "fields": { "host": 12, "hostname": "srv-382", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T10:46:01Z" } }, { "model": "app.syslogmessage", "pk": 200, "fields": { "host": 28, "hostname": "srv-630", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T14:05:17Z" } }, { "model": "app.syslogmessage", "pk": 201, "fields": { "host": 3, "hostname": "srv-192", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T14:00:41Z" } }, { "model": "app.syslogmessage", "pk": 202, "fields": { "host": 5, "hostname": "srv-700", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T00:43:32Z" } }, { "model": "app.syslogmessage", "pk": 203, "fields": { "host": 11, "hostname": "srv-715", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T14:27:00Z" } }, { "model": "app.syslogmessage", "pk": 204, "fields": { "host": 15, "hostname": "srv-070", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T00:49:41Z" } }, { "model": "app.syslogmessage", "pk": 205, "fields": { "host": 29, "hostname": "srv-296", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T19:55:14Z" } }, { "model": "app.syslogmessage", "pk": 206, "fields": { "host": 19, "hostname": "srv-935", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T09:14:42Z" } }, { "model": "app.syslogmessage", "pk": 207, "fields": { "host": 8, "hostname": "srv-711", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:13:29Z" } }, { "model": "app.syslogmessage", "pk": 208, "fields": { "host": 2, "hostname": "srv-831", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T02:17:45Z" } }, { "model": "app.syslogmessage", "pk": 209, "fields": { "host": 15, "hostname": "srv-070", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T01:22:57Z" } }, { "model": "app.syslogmessage", "pk": 210, "fields": { "host": 3, "hostname": "srv-192", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T14:28:16Z" } }, { "model": "app.syslogmessage", "pk": 211, "fields": { "host": 2, "hostname": "srv-831", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T02:45:29Z" } }, { "model": "app.syslogmessage", "pk": 212, "fields": { "host": 1, "hostname": "srv-797", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T01:19:40Z" } }, { "model": "app.syslogmessage", "pk": 213, "fields": { "host": 13, "hostname": "srv-380", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T18:12:21Z" } }, { "model": "app.syslogmessage", "pk": 214, "fields": { "host": 27, "hostname": "srv-671", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T13:01:28Z" } }, { "model": "app.syslogmessage", "pk": 215, "fields": { "host": 27, "hostname": "srv-671", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T13:49:28Z" } }, { "model": "app.syslogmessage", "pk": 216, "fields": { "host": 27, "hostname": "srv-671", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T14:09:00Z" } }, { "model": "app.syslogmessage", "pk": 217, "fields": { "host": 22, "hostname": "srv-818", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T06:16:52Z" } }, { "model": "app.syslogmessage", "pk": 218, "fields": { "host": 13, "hostname": "srv-380", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T19:10:06Z" } }, { "model": "app.syslogmessage", "pk": 219, "fields": { "host": 22, "hostname": "srv-818", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T06:53:12Z" } }, { "model": "app.syslogmessage", "pk": 220, "fields": { "host": 6, "hostname": "srv-019", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T03:19:50Z" } }, { "model": "app.syslogmessage", "pk": 221, "fields": { "host": 27, "hostname": "srv-671", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T14:19:05Z" } }, { "model": "app.syslogmessage", "pk": 222, "fields": { "host": 30, "hostname": "srv-493", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T18:28:41Z" } }, { "model": "app.syslogmessage", "pk": 223, "fields": { "host": 14, "hostname": "srv-597", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T04:46:27Z" } }, { "model": "app.syslogmessage", "pk": 224, "fields": { "host": 17, "hostname": "srv-801", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T04:22:08Z" } }, { "model": "app.syslogmessage", "pk": 225, "fields": { "host": 23, "hostname": "srv-278", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T08:46:25Z" } }, { "model": "app.syslogmessage", "pk": 226, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T15:19:09Z" } }, { "model": "app.syslogmessage", "pk": 227, "fields": { "host": 3, "hostname": "srv-192", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T15:09:08Z" } }, { "model": "app.syslogmessage", "pk": 228, "fields": { "host": 16, "hostname": "srv-939", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T20:39:22Z" } }, { "model": "app.syslogmessage", "pk": 229, "fields": { "host": 3, "hostname": "srv-192", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T16:08:15Z" } }, { "model": "app.syslogmessage", "pk": 230, "fields": { "host": 11, "hostname": "srv-715", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T15:44:51Z" } }, { "model": "app.syslogmessage", "pk": 231, "fields": { "host": 21, "hostname": "srv-423", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T08:58:58Z" } }, { "model": "app.syslogmessage", "pk": 232, "fields": { "host": 30, "hostname": "srv-493", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T19:13:29Z" } }, { "model": "app.syslogmessage", "pk": 233, "fields": { "host": 22, "hostname": "srv-818", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T07:48:47Z" } }, { "model": "app.syslogmessage", "pk": 234, "fields": { "host": 16, "hostname": "srv-939", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:13:40Z" } }, { "model": "app.syslogmessage", "pk": 235, "fields": { "host": 18, "hostname": "srv-172", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T12:57:57Z" } }, { "model": "app.syslogmessage", "pk": 236, "fields": { "host": 11, "hostname": "srv-715", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:49:57Z" } }, { "model": "app.syslogmessage", "pk": 237, "fields": { "host": 30, "hostname": "srv-493", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:35:13Z" } }, { "model": "app.syslogmessage", "pk": 238, "fields": { "host": 26, "hostname": "srv-952", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T18:18:51Z" } }, { "model": "app.syslogmessage", "pk": 239, "fields": { "host": 8, "hostname": "srv-711", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T21:18:40Z" } }, { "model": "app.syslogmessage", "pk": 240, "fields": { "host": 22, "hostname": "srv-818", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T08:06:36Z" } }, { "model": "app.syslogmessage", "pk": 241, "fields": { "host": 4, "hostname": "srv-295", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T19:30:21Z" } }, { "model": "app.syslogmessage", "pk": 242, "fields": { "host": 28, "hostname": "srv-630", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:03:21Z" } }, { "model": "app.syslogmessage", "pk": 243, "fields": { "host": 30, "hostname": "srv-493", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18T19:57:55Z" } }, { "model": "app.syslogmessage", "pk": 244, "fields": { "host": 16, "hostname": "srv-939", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T21:20:54Z" } }, { "model": "app.syslogmessage", "pk": 245, "fields": { "host": 3, "hostname": "srv-192", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T16:37:20Z" } }, { "model": "app.syslogmessage", "pk": 246, "fields": { "host": 12, "hostname": "srv-382", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T11:07:49Z" } }, { "model": "app.syslogmessage", "pk": 247, "fields": { "host": 29, "hostname": "srv-296", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T20:36:01Z" } }, { "model": "app.syslogmessage", "pk": 248, "fields": { "host": 27, "hostname": "srv-671", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T14:44:52Z" } }, { "model": "app.syslogmessage", "pk": 249, "fields": { "host": 25, "hostname": "srv-396", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T22:36:47Z" } }, { "model": "app.syslogmessage", "pk": 250, "fields": { "host": 5, "hostname": "srv-700", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T01:37:09Z" } }, { "model": "app.syslogmessage", "pk": 251, "fields": { "host": 21, "hostname": "srv-423", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T09:58:25Z" } }, { "model": "app.syslogmessage", "pk": 252, "fields": { "host": 30, "hostname": "srv-493", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T20:49:32Z" } }, { "model": "app.syslogmessage", "pk": 253, "fields": { "host": 8, "hostname": "srv-711", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T21:25:54Z" } }, { "model": "app.syslogmessage", "pk": 254, "fields": { "host": 20, "hostname": "srv-787", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T19:09:56Z" } }, { "model": "app.syslogmessage", "pk": 255, "fields": { "host": 24, "hostname": "srv-079", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:31:02Z" } }, { "model": "app.syslogmessage", "pk": 256, "fields": { "host": 11, "hostname": "srv-715", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T16:38:38Z" } }, { "model": "app.syslogmessage", "pk": 257, "fields": { "host": 24, "hostname": "srv-079", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T19:54:21Z" } }, { "model": "app.syslogmessage", "pk": 258, "fields": { "host": 13, "hostname": "srv-380", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T19:32:50Z" } }, { "model": "app.syslogmessage", "pk": 259, "fields": { "host": 4, "hostname": "srv-295", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T19:36:54Z" } }, { "model": "app.syslogmessage", "pk": 260, "fields": { "host": 24, "hostname": "srv-079", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:15:03Z" } }, { "model": "app.syslogmessage", "pk": 261, "fields": { "host": 14, "hostname": "srv-597", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T05:00:40Z" } }, { "model": "app.syslogmessage", "pk": 262, "fields": { "host": 1, "hostname": "srv-797", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T02:05:41Z" } }, { "model": "app.syslogmessage", "pk": 263, "fields": { "host": 13, "hostname": "srv-380", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T19:38:53Z" } }, { "model": "app.syslogmessage", "pk": 264, "fields": { "host": 21, "hostname": "srv-423", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T10:28:32Z" } }, { "model": "app.syslogmessage", "pk": 265, "fields": { "host": 9, "hostname": "srv-783", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T06:05:54Z" } }, { "model": "app.syslogmessage", "pk": 266, "fields": { "host": 5, "hostname": "srv-700", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T02:36:09Z" } }, { "model": "app.syslogmessage", "pk": 267, "fields": { "host": 10, "hostname": "srv-867", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T23:44:34Z" } }, { "model": "app.syslogmessage", "pk": 268, "fields": { "host": 12, "hostname": "srv-382", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T11:14:58Z" } }, { "model": "app.syslogmessage", "pk": 269, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T18:59:39Z" } }, { "model": "app.syslogmessage", "pk": 270, "fields": { "host": 24, "hostname": "srv-079", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T20:33:35Z" } }, { "model": "app.syslogmessage", "pk": 271, "fields": { "host": 7, "hostname": "srv-550", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T10:29:10Z" } }, { "model": "app.syslogmessage", "pk": 272, "fields": { "host": 3, "hostname": "srv-192", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T16:53:55Z" } }, { "model": "app.syslogmessage", "pk": 273, "fields": { "host": 29, "hostname": "srv-296", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T21:24:36Z" } }, { "model": "app.syslogmessage", "pk": 274, "fields": { "host": 19, "hostname": "srv-935", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T09:30:48Z" } }, { "model": "app.syslogmessage", "pk": 275, "fields": { "host": 8, "hostname": "srv-711", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T21:32:36Z" } }, { "model": "app.syslogmessage", "pk": 276, "fields": { "host": 9, "hostname": "srv-783", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T06:25:11Z" } }, { "model": "app.syslogmessage", "pk": 277, "fields": { "host": 24, "hostname": "srv-079", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T20:54:14Z" } }, { "model": "app.syslogmessage", "pk": 278, "fields": { "host": 28, "hostname": "srv-630", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T15:45:56Z" } }, { "model": "app.syslogmessage", "pk": 279, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T20:17:13Z" } }, { "model": "app.syslogmessage", "pk": 280, "fields": { "host": 23, "hostname": "srv-278", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T09:23:04Z" } }, { "model": "app.syslogmessage", "pk": 281, "fields": { "host": 1, "hostname": "srv-797", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T02:54:21Z" } }, { "model": "app.syslogmessage", "pk": 282, "fields": { "host": 10, "hostname": "srv-867", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T00:14:26Z" } }, { "model": "app.syslogmessage", "pk": 283, "fields": { "host": 12, "hostname": "srv-382", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T11:37:57Z" } }, { "model": "app.syslogmessage", "pk": 284, "fields": { "host": 20, "hostname": "srv-787", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T19:16:08Z" } }, { "model": "app.syslogmessage", "pk": 285, "fields": { "host": 21, "hostname": "srv-423", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T11:11:19Z" } }, { "model": "app.syslogmessage", "pk": 286, "fields": { "host": 5, "hostname": "srv-700", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T03:22:20Z" } }, { "model": "app.syslogmessage", "pk": 287, "fields": { "host": 1, "hostname": "srv-797", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T03:39:02Z" } }, { "model": "app.syslogmessage", "pk": 288, "fields": { "host": 6, "hostname": "srv-019", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T03:28:14Z" } }, { "model": "app.syslogmessage", "pk": 289, "fields": { "host": 15, "hostname": "srv-070", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T02:07:53Z" } }, { "model": "app.syslogmessage", "pk": 290, "fields": { "host": 26, "hostname": "srv-952", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T19:13:12Z" } }, { "model": "app.syslogmessage", "pk": 291, "fields": { "host": 20, "hostname": "srv-787", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:34:06Z" } }, { "model": "app.syslogmessage", "pk": 292, "fields": { "host": 21, "hostname": "srv-423", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T12:07:54Z" } }, { "model": "app.syslogmessage", "pk": 293, "fields": { "host": 18, "hostname": "srv-172", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T13:40:00Z" } }, { "model": "app.syslogmessage", "pk": 294, "fields": { "host": 25, "hostname": "srv-396", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T23:05:18Z" } }, { "model": "app.syslogmessage", "pk": 295, "fields": { "host": 30, "hostname": "srv-493", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T21:09:20Z" } }, { "model": "app.syslogmessage", "pk": 296, "fields": { "host": 3, "hostname": "srv-192", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T17:00:42Z" } }, { "model": "app.syslogmessage", "pk": 297, "fields": { "host": 10, "hostname": "srv-867", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T00:31:57Z" } }, { "model": "app.syslogmessage", "pk": 298, "fields": { "host": 19, "hostname": "srv-935", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T10:01:02Z" } }, { "model": "app.syslogmessage", "pk": 299, "fields": { "host": 27, "hostname": "srv-671", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T15:19:39Z" } }, { "model": "app.syslogmessage", "pk": 300, "fields": { "host": 23, "hostname": "srv-278", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T10:12:09Z" } }, { "model": "app.syslogmessage", "pk": 301, "fields": { "host": 20, "hostname": "srv-787", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T19:47:48Z" } }, { "model": "app.syslogmessage", "pk": 302, "fields": { "host": 29, "hostname": "srv-296", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T22:05:57Z" } }, { "model": "app.syslogmessage", "pk": 303, "fields": { "host": 3, "hostname": "srv-192", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T17:53:50Z" } }, { "model": "app.syslogmessage", "pk": 304, "fields": { "host": 27, "hostname": "srv-671", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T16:13:56Z" } }, { "model": "app.syslogmessage", "pk": 305, "fields": { "host": 25, "hostname": "srv-396", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T23:41:36Z" } }, { "model": "app.syslogmessage", "pk": 306, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:12:51Z" } }, { "model": "app.syslogmessage", "pk": 307, "fields": { "host": 14, "hostname": "srv-597", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T05:36:09Z" } }, { "model": "app.syslogmessage", "pk": 308, "fields": { "host": 1, "hostname": "srv-797", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T04:08:29Z" } }, { "model": "app.syslogmessage", "pk": 309, "fields": { "host": 16, "hostname": "srv-939", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T21:42:24Z" } }, { "model": "app.syslogmessage", "pk": 310, "fields": { "host": 29, "hostname": "srv-296", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T22:15:15Z" } }, { "model": "app.syslogmessage", "pk": 311, "fields": { "host": 17, "hostname": "srv-801", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T05:14:27Z" } }, { "model": "app.syslogmessage", "pk": 312, "fields": { "host": 2, "hostname": "srv-831", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T03:05:38Z" } }, { "model": "app.syslogmessage", "pk": 313, "fields": { "host": 4, "hostname": "srv-295", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:13:04Z" } }, { "model": "app.syslogmessage", "pk": 314, "fields": { "host": 23, "hostname": "srv-278", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T10:29:05Z" } }, { "model": "app.syslogmessage", "pk": 315, "fields": { "host": 11, "hostname": "srv-715", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T17:21:38Z" } }, { "model": "app.syslogmessage", "pk": 316, "fields": { "host": 3, "hostname": "srv-192", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T18:49:03Z" } }, { "model": "app.syslogmessage", "pk": 317, "fields": { "host": 24, "hostname": "srv-079", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T21:05:08Z" } }, { "model": "app.syslogmessage", "pk": 318, "fields": { "host": 25, "hostname": "srv-396", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T23:56:13Z" } }, { "model": "app.syslogmessage", "pk": 319, "fields": { "host": 24, "hostname": "srv-079", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:18:51Z" } }, { "model": "app.syslogmessage", "pk": 320, "fields": { "host": 23, "hostname": "srv-278", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T11:19:17Z" } }, { "model": "app.syslogmessage", "pk": 321, "fields": { "host": 24, "hostname": "srv-079", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:33:48Z" } }, { "model": "app.syslogmessage", "pk": 322, "fields": { "host": 10, "hostname": "srv-867", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T00:43:07Z" } }, { "model": "app.syslogmessage", "pk": 323, "fields": { "host": 17, "hostname": "srv-801", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T05:59:38Z" } }, { "model": "app.syslogmessage", "pk": 324, "fields": { "host": 3, "hostname": "srv-192", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T19:00:32Z" } }, { "model": "app.syslogmessage", "pk": 325, "fields": { "host": 20, "hostname": "srv-787", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T20:42:24Z" } }, { "model": "app.syslogmessage", "pk": 326, "fields": { "host": 13, "hostname": "srv-380", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T21:08:44Z" } }, { "model": "app.syslogmessage", "pk": 327, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T21:50:17Z" } }, { "model": "app.syslogmessage", "pk": 328, "fields": { "host": 18, "hostname": "srv-172", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T14:00:29Z" } }, { "model": "app.syslogmessage", "pk": 329, "fields": { "host": 25, "hostname": "srv-396", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T00:52:37Z" } }, { "model": "app.syslogmessage", "pk": 330, "fields": { "host": 24, "hostname": "srv-079", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T22:29:55Z" } }, { "model": "app.syslogmessage", "pk": 331, "fields": { "host": 23, "hostname": "srv-278", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T12:09:45Z" } }, { "model": "app.syslogmessage", "pk": 332, "fields": { "host": 10, "hostname": "srv-867", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T01:03:39Z" } }, { "model": "app.syslogmessage", "pk": 333, "fields": { "host": 28, "hostname": "srv-630", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18T16:24:22Z" } }, { "model": "app.syslogmessage", "pk": 334, "fields": { "host": 12, "hostname": "srv-382", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T12:11:57Z" } }, { "model": "app.syslogmessage", "pk": 335, "fields": { "host": 24, "hostname": "srv-079", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T23:28:24Z" } }, { "model": "app.syslogmessage", "pk": 336, "fields": { "host": 23, "hostname": "srv-278", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T12:37:11Z" } }, { "model": "app.syslogmessage", "pk": 337, "fields": { "host": 13, "hostname": "srv-380", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T22:09:48Z" } }, { "model": "app.syslogmessage", "pk": 338, "fields": { "host": 20, "hostname": "srv-787", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:36:43Z" } }, { "model": "app.syslogmessage", "pk": 339, "fields": { "host": 11, "hostname": "srv-715", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T18:04:18Z" } }, { "model": "app.syslogmessage", "pk": 340, "fields": { "host": 24, "hostname": "srv-079", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T00:12:05Z" } }, { "model": "app.syslogmessage", "pk": 341, "fields": { "host": 26, "hostname": "srv-952", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T20:58:37Z" } }, { "model": "app.syslogmessage", "pk": 342, "fields": { "host": 17, "hostname": "srv-801", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T06:49:03Z" } }, { "model": "app.syslogmessage", "pk": 343, "fields": { "host": 18, "hostname": "srv-172", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T14:50:01Z" } }, { "model": "app.syslogmessage", "pk": 344, "fields": { "host": 11, "hostname": "srv-715", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T18:21:29Z" } }, { "model": "app.syslogmessage", "pk": 345, "fields": { "host": 11, "hostname": "srv-715", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T18:46:06Z" } }, { "model": "app.syslogmessage", "pk": 346, "fields": { "host": 27, "hostname": "srv-671", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T16:51:45Z" } }, { "model": "app.syslogmessage", "pk": 347, "fields": { "host": 24, "hostname": "srv-079", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T00:23:17Z" } }, { "model": "app.syslogmessage", "pk": 348, "fields": { "host": 10, "hostname": "srv-867", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T01:18:42Z" } }, { "model": "app.syslogmessage", "pk": 349, "fields": { "host": 24, "hostname": "srv-079", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T01:12:50Z" } }, { "model": "app.syslogmessage", "pk": 350, "fields": { "host": 7, "hostname": "srv-550", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T11:18:09Z" } }, { "model": "app.syslogmessage", "pk": 351, "fields": { "host": 20, "hostname": "srv-787", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T22:03:47Z" } }, { "model": "app.syslogmessage", "pk": 352, "fields": { "host": 3, "hostname": "srv-192", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T19:41:06Z" } }, { "model": "app.syslogmessage", "pk": 353, "fields": { "host": 20, "hostname": "srv-787", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T22:33:24Z" } }, { "model": "app.syslogmessage", "pk": 354, "fields": { "host": 3, "hostname": "srv-192", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T20:20:56Z" } }, { "model": "app.syslogmessage", "pk": 355, "fields": { "host": 10, "hostname": "srv-867", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T02:02:31Z" } }, { "model": "app.syslogmessage", "pk": 356, "fields": { "host": 22, "hostname": "srv-818", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T08:58:40Z" } }, { "model": "app.syslogmessage", "pk": 357, "fields": { "host": 29, "hostname": "srv-296", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T22:51:25Z" } }, { "model": "app.syslogmessage", "pk": 358, "fields": { "host": 2, "hostname": "srv-831", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T03:15:08Z" } }, { "model": "app.syslogmessage", "pk": 359, "fields": { "host": 30, "hostname": "srv-493", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T21:17:42Z" } }, { "model": "app.syslogmessage", "pk": 360, "fields": { "host": 13, "hostname": "srv-380", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T22:39:13Z" } }, { "model": "app.syslogmessage", "pk": 361, "fields": { "host": 7, "hostname": "srv-550", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T12:10:21Z" } }, { "model": "app.syslogmessage", "pk": 362, "fields": { "host": 7, "hostname": "srv-550", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T12:50:58Z" } }, { "model": "app.syslogmessage", "pk": 363, "fields": { "host": 21, "hostname": "srv-423", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T13:00:08Z" } }, { "model": "app.syslogmessage", "pk": 364, "fields": { "host": 14, "hostname": "srv-597", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T06:00:44Z" } }, { "model": "app.syslogmessage", "pk": 365, "fields": { "host": 14, "hostname": "srv-597", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T06:37:38Z" } }, { "model": "app.syslogmessage", "pk": 366, "fields": { "host": 29, "hostname": "srv-296", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T23:01:40Z" } }, { "model": "app.syslogmessage", "pk": 367, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T23:36:21Z" } }, { "model": "app.syslogmessage", "pk": 368, "fields": { "host": 6, "hostname": "srv-019", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T04:11:04Z" } }, { "model": "app.syslogmessage", "pk": 369, "fields": { "host": 26, "hostname": "srv-952", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T21:38:44Z" } }, { "model": "app.syslogmessage", "pk": 370, "fields": { "host": 4, "hostname": "srv-295", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T20:48:15Z" } }, { "model": "app.syslogmessage", "pk": 371, "fields": { "host": 3, "hostname": "srv-192", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T20:46:15Z" } }, { "model": "app.syslogmessage", "pk": 372, "fields": { "host": 3, "hostname": "srv-192", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T21:07:46Z" } }, { "model": "app.syslogmessage", "pk": 373, "fields": { "host": 6, "hostname": "srv-019", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T04:57:39Z" } }, { "model": "app.syslogmessage", "pk": 374, "fields": { "host": 28, "hostname": "srv-630", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T17:23:10Z" } }, { "model": "app.syslogmessage", "pk": 375, "fields": { "host": 6, "hostname": "srv-019", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T05:45:59Z" } }, { "model": "app.syslogmessage", "pk": 376, "fields": { "host": 16, "hostname": "srv-939", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T22:19:36Z" } }, { "model": "app.syslogmessage", "pk": 377, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T06:41:48Z" } }, { "model": "app.syslogmessage", "pk": 378, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T23:59:40Z" } }, { "model": "app.syslogmessage", "pk": 379, "fields": { "host": 21, "hostname": "srv-423", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T13:28:22Z" } }, { "model": "app.syslogmessage", "pk": 380, "fields": { "host": 8, "hostname": "srv-711", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T22:22:32Z" } }, { "model": "app.syslogmessage", "pk": 381, "fields": { "host": 23, "hostname": "srv-278", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T13:15:51Z" } }, { "model": "app.syslogmessage", "pk": 382, "fields": { "host": 25, "hostname": "srv-396", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T01:02:00Z" } }, { "model": "app.syslogmessage", "pk": 383, "fields": { "host": 11, "hostname": "srv-715", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:07:01Z" } }, { "model": "app.syslogmessage", "pk": 384, "fields": { "host": 3, "hostname": "srv-192", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T21:17:35Z" } }, { "model": "app.syslogmessage", "pk": 385, "fields": { "host": 24, "hostname": "srv-079", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T01:18:46Z" } }, { "model": "app.syslogmessage", "pk": 386, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T00:28:55Z" } }, { "model": "app.syslogmessage", "pk": 387, "fields": { "host": 7, "hostname": "srv-550", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T13:08:51Z" } }, { "model": "app.syslogmessage", "pk": 388, "fields": { "host": 25, "hostname": "srv-396", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-19T01:37:24Z" } }, { "model": "app.syslogmessage", "pk": 389, "fields": { "host": 13, "hostname": "srv-380", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T01:24:38Z" } }, { "model": "app.syslogmessage", "pk": 390, "fields": { "host": 7, "hostname": "srv-550", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18T13:26:32Z" } }, { "model": "app.syslogmessage", "pk": 391, "fields": { "host": 1, "hostname": "srv-797", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T04:16:13Z" } }, { "model": "app.syslogmessage", "pk": 392, "fields": { "host": 30, "hostname": "srv-493", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T21:36:44Z" } }, { "model": "app.syslogmessage", "pk": 393, "fields": { "host": 22, "hostname": "srv-818", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T09:49:04Z" } }, { "model": "app.syslogmessage", "pk": 394, "fields": { "host": 7, "hostname": "srv-550", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T14:19:08Z" } }, { "model": "app.syslogmessage", "pk": 395, "fields": { "host": 19, "hostname": "srv-935", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T10:44:24Z" } }, { "model": "app.syslogmessage", "pk": 396, "fields": { "host": 14, "hostname": "srv-597", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T06:43:02Z" } }, { "model": "app.syslogmessage", "pk": 397, "fields": { "host": 12, "hostname": "srv-382", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T12:53:36Z" } }, { "model": "app.syslogmessage", "pk": 398, "fields": { "host": 17, "hostname": "srv-801", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T07:33:43Z" } }, { "model": "app.syslogmessage", "pk": 399, "fields": { "host": 3, "hostname": "srv-192", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T21:52:27Z" } }, { "model": "app.syslogmessage", "pk": 400, "fields": { "host": 14, "hostname": "srv-597", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T07:25:10Z" } }, { "model": "app.syslogmessage", "pk": 401, "fields": { "host": 1, "hostname": "srv-797", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T05:08:56Z" } }, { "model": "app.syslogmessage", "pk": 402, "fields": { "host": 29, "hostname": "srv-296", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T23:24:17Z" } }, { "model": "app.syslogmessage", "pk": 403, "fields": { "host": 20, "hostname": "srv-787", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T23:04:19Z" } }, { "model": "app.syslogmessage", "pk": 404, "fields": { "host": 12, "hostname": "srv-382", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T13:40:14Z" } }, { "model": "app.syslogmessage", "pk": 405, "fields": { "host": 25, "hostname": "srv-396", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T01:50:38Z" } }, { "model": "app.syslogmessage", "pk": 406, "fields": { "host": 6, "hostname": "srv-019", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T07:33:08Z" } }, { "model": "app.syslogmessage", "pk": 407, "fields": { "host": 13, "hostname": "srv-380", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T01:37:25Z" } }, { "model": "app.syslogmessage", "pk": 408, "fields": { "host": 1, "hostname": "srv-797", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T05:16:15Z" } }, { "model": "app.syslogmessage", "pk": 409, "fields": { "host": 7, "hostname": "srv-550", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T15:07:17Z" } }, { "model": "app.syslogmessage", "pk": 410, "fields": { "host": 7, "hostname": "srv-550", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T15:38:34Z" } }, { "model": "app.syslogmessage", "pk": 411, "fields": { "host": 2, "hostname": "srv-831", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T04:08:41Z" } }, { "model": "app.syslogmessage", "pk": 412, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T08:10:23Z" } }, { "model": "app.syslogmessage", "pk": 413, "fields": { "host": 21, "hostname": "srv-423", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T14:14:28Z" } }, { "model": "app.syslogmessage", "pk": 414, "fields": { "host": 10, "hostname": "srv-867", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T03:00:28Z" } }, { "model": "app.syslogmessage", "pk": 415, "fields": { "host": 5, "hostname": "srv-700", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T04:01:10Z" } }, { "model": "app.syslogmessage", "pk": 416, "fields": { "host": 1, "hostname": "srv-797", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T05:23:31Z" } }, { "model": "app.syslogmessage", "pk": 417, "fields": { "host": 6, "hostname": "srv-019", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T09:03:12Z" } }, { "model": "app.syslogmessage", "pk": 418, "fields": { "host": 27, "hostname": "srv-671", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T17:28:45Z" } }, { "model": "app.syslogmessage", "pk": 419, "fields": { "host": 22, "hostname": "srv-818", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T10:19:06Z" } }, { "model": "app.syslogmessage", "pk": 420, "fields": { "host": 21, "hostname": "srv-423", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T14:19:45Z" } }, { "model": "app.syslogmessage", "pk": 421, "fields": { "host": 14, "hostname": "srv-597", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T08:17:37Z" } }, { "model": "app.syslogmessage", "pk": 422, "fields": { "host": 27, "hostname": "srv-671", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T17:46:44Z" } }, { "model": "app.syslogmessage", "pk": 423, "fields": { "host": 20, "hostname": "srv-787", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T00:01:35Z" } }, { "model": "app.syslogmessage", "pk": 424, "fields": { "host": 3, "hostname": "srv-192", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T22:19:52Z" } }, { "model": "app.syslogmessage", "pk": 425, "fields": { "host": 9, "hostname": "srv-783", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T06:43:54Z" } }, { "model": "app.syslogmessage", "pk": 426, "fields": { "host": 25, "hostname": "srv-396", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T02:39:50Z" } }, { "model": "app.syslogmessage", "pk": 427, "fields": { "host": 13, "hostname": "srv-380", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T01:54:46Z" } }, { "model": "app.syslogmessage", "pk": 428, "fields": { "host": 8, "hostname": "srv-711", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T22:40:33Z" } }, { "model": "app.syslogmessage", "pk": 429, "fields": { "host": 7, "hostname": "srv-550", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T15:46:26Z" } }, { "model": "app.syslogmessage", "pk": 430, "fields": { "host": 23, "hostname": "srv-278", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T13:33:39Z" } }, { "model": "app.syslogmessage", "pk": 431, "fields": { "host": 14, "hostname": "srv-597", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T09:16:31Z" } }, { "model": "app.syslogmessage", "pk": 432, "fields": { "host": 4, "hostname": "srv-295", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T21:44:58Z" } }, { "model": "app.syslogmessage", "pk": 433, "fields": { "host": 18, "hostname": "srv-172", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T15:36:26Z" } }, { "model": "app.syslogmessage", "pk": 434, "fields": { "host": 25, "hostname": "srv-396", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T02:48:35Z" } }, { "model": "app.syslogmessage", "pk": 435, "fields": { "host": 27, "hostname": "srv-671", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T18:40:43Z" } }, { "model": "app.syslogmessage", "pk": 436, "fields": { "host": 13, "hostname": "srv-380", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T02:38:24Z" } }, { "model": "app.syslogmessage", "pk": 437, "fields": { "host": 1, "hostname": "srv-797", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T05:29:48Z" } }, { "model": "app.syslogmessage", "pk": 438, "fields": { "host": 11, "hostname": "srv-715", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T19:33:24Z" } }, { "model": "app.syslogmessage", "pk": 439, "fields": { "host": 8, "hostname": "srv-711", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T22:59:58Z" } }, { "model": "app.syslogmessage", "pk": 440, "fields": { "host": 24, "hostname": "srv-079", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T02:10:49Z" } }, { "model": "app.syslogmessage", "pk": 441, "fields": { "host": 2, "hostname": "srv-831", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T05:04:35Z" } }, { "model": "app.syslogmessage", "pk": 442, "fields": { "host": 8, "hostname": "srv-711", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T23:53:42Z" } }, { "model": "app.syslogmessage", "pk": 443, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T09:50:13Z" } }, { "model": "app.syslogmessage", "pk": 444, "fields": { "host": 26, "hostname": "srv-952", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T22:27:03Z" } }, { "model": "app.syslogmessage", "pk": 445, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T20:22:33Z" } }, { "model": "app.syslogmessage", "pk": 446, "fields": { "host": 22, "hostname": "srv-818", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T10:56:28Z" } }, { "model": "app.syslogmessage", "pk": 447, "fields": { "host": 8, "hostname": "srv-711", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-19T00:28:45Z" } }, { "model": "app.syslogmessage", "pk": 448, "fields": { "host": 7, "hostname": "srv-550", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T16:25:45Z" } }, { "model": "app.syslogmessage", "pk": 449, "fields": { "host": 10, "hostname": "srv-867", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T03:24:04Z" } }, { "model": "app.syslogmessage", "pk": 450, "fields": { "host": 15, "hostname": "srv-070", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T02:15:00Z" } }, { "model": "app.syslogmessage", "pk": 451, "fields": { "host": 13, "hostname": "srv-380", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T03:19:27Z" } }, { "model": "app.syslogmessage", "pk": 452, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T03:40:19Z" } }, { "model": "app.syslogmessage", "pk": 453, "fields": { "host": 15, "hostname": "srv-070", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T02:22:53Z" } }, { "model": "app.syslogmessage", "pk": 454, "fields": { "host": 22, "hostname": "srv-818", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T11:03:48Z" } }, { "model": "app.syslogmessage", "pk": 455, "fields": { "host": 24, "hostname": "srv-079", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T02:26:06Z" } }, { "model": "app.syslogmessage", "pk": 456, "fields": { "host": 28, "hostname": "srv-630", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T17:35:00Z" } }, { "model": "app.syslogmessage", "pk": 457, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T20:35:46Z" } }, { "model": "app.syslogmessage", "pk": 458, "fields": { "host": 25, "hostname": "srv-396", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T03:04:47Z" } }, { "model": "app.syslogmessage", "pk": 459, "fields": { "host": 21, "hostname": "srv-423", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T15:03:02Z" } }, { "model": "app.syslogmessage", "pk": 460, "fields": { "host": 7, "hostname": "srv-550", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T16:44:56Z" } }, { "model": "app.syslogmessage", "pk": 461, "fields": { "host": 10, "hostname": "srv-867", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T03:33:25Z" } }, { "model": "app.syslogmessage", "pk": 462, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T03:56:19Z" } }, { "model": "app.syslogmessage", "pk": 463, "fields": { "host": 19, "hostname": "srv-935", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T11:12:16Z" } }, { "model": "app.syslogmessage", "pk": 464, "fields": { "host": 25, "hostname": "srv-396", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T03:44:28Z" } }, { "model": "app.syslogmessage", "pk": 465, "fields": { "host": 16, "hostname": "srv-939", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T23:07:48Z" } }, { "model": "app.syslogmessage", "pk": 466, "fields": { "host": 9, "hostname": "srv-783", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T07:18:28Z" } }, { "model": "app.syslogmessage", "pk": 467, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T23:14:46Z" } }, { "model": "app.syslogmessage", "pk": 468, "fields": { "host": 14, "hostname": "srv-597", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T09:30:54Z" } }, { "model": "app.syslogmessage", "pk": 469, "fields": { "host": 16, "hostname": "srv-939", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18T23:42:20Z" } }, { "model": "app.syslogmessage", "pk": 470, "fields": { "host": 7, "hostname": "srv-550", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T17:43:08Z" } }, { "model": "app.syslogmessage", "pk": 471, "fields": { "host": 28, "hostname": "srv-630", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T17:57:25Z" } }, { "model": "app.syslogmessage", "pk": 472, "fields": { "host": 25, "hostname": "srv-396", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T04:44:11Z" } }, { "model": "app.syslogmessage", "pk": 473, "fields": { "host": 24, "hostname": "srv-079", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T02:53:53Z" } }, { "model": "app.syslogmessage", "pk": 474, "fields": { "host": 12, "hostname": "srv-382", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T14:39:06Z" } }, { "model": "app.syslogmessage", "pk": 475, "fields": { "host": 25, "hostname": "srv-396", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T05:37:35Z" } }, { "model": "app.syslogmessage", "pk": 476, "fields": { "host": 6, "hostname": "srv-019", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T10:41:49Z" } }, { "model": "app.syslogmessage", "pk": 477, "fields": { "host": 30, "hostname": "srv-493", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T21:59:02Z" } }, { "model": "app.syslogmessage", "pk": 478, "fields": { "host": 1, "hostname": "srv-797", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T05:54:18Z" } }, { "model": "app.syslogmessage", "pk": 479, "fields": { "host": 11, "hostname": "srv-715", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18T20:47:08Z" } }, { "model": "app.syslogmessage", "pk": 480, "fields": { "host": 22, "hostname": "srv-818", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T11:10:37Z" } }, { "model": "app.syslogmessage", "pk": 481, "fields": { "host": 21, "hostname": "srv-423", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T15:53:46Z" } }, { "model": "app.syslogmessage", "pk": 482, "fields": { "host": 15, "hostname": "srv-070", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T02:49:26Z" } }, { "model": "app.syslogmessage", "pk": 483, "fields": { "host": 20, "hostname": "srv-787", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T00:24:30Z" } }, { "model": "app.syslogmessage", "pk": 484, "fields": { "host": 1, "hostname": "srv-797", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T06:33:36Z" } }, { "model": "app.syslogmessage", "pk": 485, "fields": { "host": 11, "hostname": "srv-715", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T21:22:14Z" } }, { "model": "app.syslogmessage", "pk": 486, "fields": { "host": 5, "hostname": "srv-700", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T04:47:23Z" } }, { "model": "app.syslogmessage", "pk": 487, "fields": { "host": 2, "hostname": "srv-831", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T05:37:35Z" } }, { "model": "app.syslogmessage", "pk": 488, "fields": { "host": 25, "hostname": "srv-396", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T06:02:43Z" } }, { "model": "app.syslogmessage", "pk": 489, "fields": { "host": 16, "hostname": "srv-939", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T00:16:19Z" } }, { "model": "app.syslogmessage", "pk": 490, "fields": { "host": 6, "hostname": "srv-019", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T10:59:12Z" } }, { "model": "app.syslogmessage", "pk": 491, "fields": { "host": 21, "hostname": "srv-423", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T16:22:50Z" } }, { "model": "app.syslogmessage", "pk": 492, "fields": { "host": 21, "hostname": "srv-423", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18T16:32:42Z" } }, { "model": "app.syslogmessage", "pk": 493, "fields": { "host": 21, "hostname": "srv-423", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T17:29:30Z" } }, { "model": "app.syslogmessage", "pk": 494, "fields": { "host": 23, "hostname": "srv-278", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T13:55:03Z" } }, { "model": "app.syslogmessage", "pk": 495, "fields": { "host": 12, "hostname": "srv-382", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T14:49:27Z" } }, { "model": "app.syslogmessage", "pk": 496, "fields": { "host": 21, "hostname": "srv-423", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T18:01:21Z" } }, { "model": "app.syslogmessage", "pk": 497, "fields": { "host": 10, "hostname": "srv-867", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T03:47:27Z" } }, { "model": "app.syslogmessage", "pk": 498, "fields": { "host": 24, "hostname": "srv-079", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T03:40:07Z" } }, { "model": "app.syslogmessage", "pk": 499, "fields": { "host": 1, "hostname": "srv-797", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T06:42:19Z" } }, { "model": "app.syslogmessage", "pk": 500, "fields": { "host": 25, "hostname": "srv-396", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T06:31:11Z" } }, { "model": "app.syslogmessage", "pk": 501, "fields": { "host": 28, "hostname": "srv-630", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T18:31:06Z" } }, { "model": "app.syslogmessage", "pk": 502, "fields": { "host": 16, "hostname": "srv-939", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T00:48:59Z" } }, { "model": "app.syslogmessage", "pk": 503, "fields": { "host": 19, "hostname": "srv-935", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T11:30:43Z" } }, { "model": "app.syslogmessage", "pk": 504, "fields": { "host": 4, "hostname": "srv-295", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T22:16:28Z" } }, { "model": "app.syslogmessage", "pk": 505, "fields": { "host": 18, "hostname": "srv-172", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T16:15:06Z" } }, { "model": "app.syslogmessage", "pk": 506, "fields": { "host": 2, "hostname": "srv-831", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T06:05:28Z" } }, { "model": "app.syslogmessage", "pk": 507, "fields": { "host": 3, "hostname": "srv-192", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T23:13:56Z" } }, { "model": "app.syslogmessage", "pk": 508, "fields": { "host": 24, "hostname": "srv-079", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T04:22:56Z" } }, { "model": "app.syslogmessage", "pk": 509, "fields": { "host": 5, "hostname": "srv-700", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T05:21:59Z" } }, { "model": "app.syslogmessage", "pk": 510, "fields": { "host": 25, "hostname": "srv-396", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T06:51:03Z" } }, { "model": "app.syslogmessage", "pk": 511, "fields": { "host": 11, "hostname": "srv-715", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T21:41:03Z" } }, { "model": "app.syslogmessage", "pk": 512, "fields": { "host": 21, "hostname": "srv-423", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T18:39:46Z" } }, { "model": "app.syslogmessage", "pk": 513, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T22:08:36Z" } }, { "model": "app.syslogmessage", "pk": 514, "fields": { "host": 3, "hostname": "srv-192", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T00:00:23Z" } }, { "model": "app.syslogmessage", "pk": 515, "fields": { "host": 6, "hostname": "srv-019", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T11:12:49Z" } }, { "model": "app.syslogmessage", "pk": 516, "fields": { "host": 23, "hostname": "srv-278", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T14:14:35Z" } }, { "model": "app.syslogmessage", "pk": 517, "fields": { "host": 25, "hostname": "srv-396", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T06:56:10Z" } }, { "model": "app.syslogmessage", "pk": 518, "fields": { "host": 12, "hostname": "srv-382", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T15:32:10Z" } }, { "model": "app.syslogmessage", "pk": 519, "fields": { "host": 15, "hostname": "srv-070", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T03:38:01Z" } }, { "model": "app.syslogmessage", "pk": 520, "fields": { "host": 17, "hostname": "srv-801", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T07:49:11Z" } }, { "model": "app.syslogmessage", "pk": 521, "fields": { "host": 14, "hostname": "srv-597", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T09:59:42Z" } }, { "model": "app.syslogmessage", "pk": 522, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T04:24:39Z" } }, { "model": "app.syslogmessage", "pk": 523, "fields": { "host": 12, "hostname": "srv-382", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T15:49:23Z" } }, { "model": "app.syslogmessage", "pk": 524, "fields": { "host": 22, "hostname": "srv-818", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T11:34:46Z" } }, { "model": "app.syslogmessage", "pk": 525, "fields": { "host": 22, "hostname": "srv-818", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T12:13:43Z" } }, { "model": "app.syslogmessage", "pk": 526, "fields": { "host": 26, "hostname": "srv-952", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T23:38:10Z" } }, { "model": "app.syslogmessage", "pk": 527, "fields": { "host": 28, "hostname": "srv-630", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18T18:43:51Z" } }, { "model": "app.syslogmessage", "pk": 528, "fields": { "host": 29, "hostname": "srv-296", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T00:22:56Z" } }, { "model": "app.syslogmessage", "pk": 529, "fields": { "host": 7, "hostname": "srv-550", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T18:05:03Z" } }, { "model": "app.syslogmessage", "pk": 530, "fields": { "host": 20, "hostname": "srv-787", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T01:16:51Z" } }, { "model": "app.syslogmessage", "pk": 531, "fields": { "host": 3, "hostname": "srv-192", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T00:18:44Z" } }, { "model": "app.syslogmessage", "pk": 532, "fields": { "host": 19, "hostname": "srv-935", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T12:00:13Z" } }, { "model": "app.syslogmessage", "pk": 533, "fields": { "host": 8, "hostname": "srv-711", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T01:28:14Z" } }, { "model": "app.syslogmessage", "pk": 534, "fields": { "host": 5, "hostname": "srv-700", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T06:18:23Z" } }, { "model": "app.syslogmessage", "pk": 535, "fields": { "host": 22, "hostname": "srv-818", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T12:30:35Z" } }, { "model": "app.syslogmessage", "pk": 536, "fields": { "host": 11, "hostname": "srv-715", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T22:51:10Z" } }, { "model": "app.syslogmessage", "pk": 537, "fields": { "host": 12, "hostname": "srv-382", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T16:41:45Z" } }, { "model": "app.syslogmessage", "pk": 538, "fields": { "host": 17, "hostname": "srv-801", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T08:16:42Z" } }, { "model": "app.syslogmessage", "pk": 539, "fields": { "host": 27, "hostname": "srv-671", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T19:09:50Z" } }, { "model": "app.syslogmessage", "pk": 540, "fields": { "host": 26, "hostname": "srv-952", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T00:25:26Z" } }, { "model": "app.syslogmessage", "pk": 541, "fields": { "host": 26, "hostname": "srv-952", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T01:00:00Z" } }, { "model": "app.syslogmessage", "pk": 542, "fields": { "host": 10, "hostname": "srv-867", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T04:22:33Z" } }, { "model": "app.syslogmessage", "pk": 543, "fields": { "host": 6, "hostname": "srv-019", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T11:40:40Z" } }, { "model": "app.syslogmessage", "pk": 544, "fields": { "host": 10, "hostname": "srv-867", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T04:57:18Z" } }, { "model": "app.syslogmessage", "pk": 545, "fields": { "host": 18, "hostname": "srv-172", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T16:32:34Z" } }, { "model": "app.syslogmessage", "pk": 546, "fields": { "host": 3, "hostname": "srv-192", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T00:49:22Z" } }, { "model": "app.syslogmessage", "pk": 547, "fields": { "host": 4, "hostname": "srv-295", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T22:36:11Z" } }, { "model": "app.syslogmessage", "pk": 548, "fields": { "host": 23, "hostname": "srv-278", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T14:36:50Z" } }, { "model": "app.syslogmessage", "pk": 549, "fields": { "host": 25, "hostname": "srv-396", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T07:16:47Z" } }, { "model": "app.syslogmessage", "pk": 550, "fields": { "host": 3, "hostname": "srv-192", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T01:23:57Z" } }, { "model": "app.syslogmessage", "pk": 551, "fields": { "host": 24, "hostname": "srv-079", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T05:09:02Z" } }, { "model": "app.syslogmessage", "pk": 552, "fields": { "host": 12, "hostname": "srv-382", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T17:18:43Z" } }, { "model": "app.syslogmessage", "pk": 553, "fields": { "host": 3, "hostname": "srv-192", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T02:23:42Z" } }, { "model": "app.syslogmessage", "pk": 554, "fields": { "host": 13, "hostname": "srv-380", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T05:07:15Z" } }, { "model": "app.syslogmessage", "pk": 555, "fields": { "host": 14, "hostname": "srv-597", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T10:56:55Z" } }, { "model": "app.syslogmessage", "pk": 556, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T01:34:34Z" } }, { "model": "app.syslogmessage", "pk": 557, "fields": { "host": 25, "hostname": "srv-396", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T07:38:24Z" } }, { "model": "app.syslogmessage", "pk": 558, "fields": { "host": 20, "hostname": "srv-787", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T01:43:10Z" } }, { "model": "app.syslogmessage", "pk": 559, "fields": { "host": 10, "hostname": "srv-867", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T05:49:16Z" } }, { "model": "app.syslogmessage", "pk": 560, "fields": { "host": 15, "hostname": "srv-070", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T04:27:21Z" } }, { "model": "app.syslogmessage", "pk": 561, "fields": { "host": 12, "hostname": "srv-382", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T17:52:24Z" } }, { "model": "app.syslogmessage", "pk": 562, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T05:18:24Z" } }, { "model": "app.syslogmessage", "pk": 563, "fields": { "host": 9, "hostname": "srv-783", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T08:01:27Z" } }, { "model": "app.syslogmessage", "pk": 564, "fields": { "host": 12, "hostname": "srv-382", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T18:20:29Z" } }, { "model": "app.syslogmessage", "pk": 565, "fields": { "host": 23, "hostname": "srv-278", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T14:48:33Z" } }, { "model": "app.syslogmessage", "pk": 566, "fields": { "host": 24, "hostname": "srv-079", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T05:23:53Z" } }, { "model": "app.syslogmessage", "pk": 567, "fields": { "host": 19, "hostname": "srv-935", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T12:59:56Z" } }, { "model": "app.syslogmessage", "pk": 568, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T02:16:08Z" } }, { "model": "app.syslogmessage", "pk": 569, "fields": { "host": 25, "hostname": "srv-396", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T08:32:01Z" } }, { "model": "app.syslogmessage", "pk": 570, "fields": { "host": 10, "hostname": "srv-867", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T06:28:10Z" } }, { "model": "app.syslogmessage", "pk": 571, "fields": { "host": 28, "hostname": "srv-630", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T18:55:29Z" } }, { "model": "app.syslogmessage", "pk": 572, "fields": { "host": 6, "hostname": "srv-019", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T12:23:22Z" } }, { "model": "app.syslogmessage", "pk": 573, "fields": { "host": 9, "hostname": "srv-783", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T08:21:21Z" } }, { "model": "app.syslogmessage", "pk": 574, "fields": { "host": 16, "hostname": "srv-939", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T01:41:28Z" } }, { "model": "app.syslogmessage", "pk": 575, "fields": { "host": 26, "hostname": "srv-952", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T02:40:47Z" } }, { "model": "app.syslogmessage", "pk": 576, "fields": { "host": 23, "hostname": "srv-278", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18T15:36:04Z" } }, { "model": "app.syslogmessage", "pk": 577, "fields": { "host": 1, "hostname": "srv-797", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T07:08:32Z" } }, { "model": "app.syslogmessage", "pk": 578, "fields": { "host": 17, "hostname": "srv-801", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T09:01:41Z" } }, { "model": "app.syslogmessage", "pk": 579, "fields": { "host": 2, "hostname": "srv-831", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T06:31:48Z" } }, { "model": "app.syslogmessage", "pk": 580, "fields": { "host": 12, "hostname": "srv-382", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18T18:34:40Z" } }, { "model": "app.syslogmessage", "pk": 581, "fields": { "host": 17, "hostname": "srv-801", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T09:38:02Z" } }, { "model": "app.syslogmessage", "pk": 582, "fields": { "host": 3, "hostname": "srv-192", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T03:23:07Z" } }, { "model": "app.syslogmessage", "pk": 583, "fields": { "host": 4, "hostname": "srv-295", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T22:48:33Z" } }, { "model": "app.syslogmessage", "pk": 584, "fields": { "host": 25, "hostname": "srv-396", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T08:44:55Z" } }, { "model": "app.syslogmessage", "pk": 585, "fields": { "host": 3, "hostname": "srv-192", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T04:06:20Z" } }, { "model": "app.syslogmessage", "pk": 586, "fields": { "host": 22, "hostname": "srv-818", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T12:55:13Z" } }, { "model": "app.syslogmessage", "pk": 587, "fields": { "host": 15, "hostname": "srv-070", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T05:11:07Z" } }, { "model": "app.syslogmessage", "pk": 588, "fields": { "host": 2, "hostname": "srv-831", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T06:57:41Z" } }, { "model": "app.syslogmessage", "pk": 589, "fields": { "host": 15, "hostname": "srv-070", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T05:59:15Z" } }, { "model": "app.syslogmessage", "pk": 590, "fields": { "host": 3, "hostname": "srv-192", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T04:50:25Z" } }, { "model": "app.syslogmessage", "pk": 591, "fields": { "host": 2, "hostname": "srv-831", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T07:23:51Z" } }, { "model": "app.syslogmessage", "pk": 592, "fields": { "host": 26, "hostname": "srv-952", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T03:06:56Z" } }, { "model": "app.syslogmessage", "pk": 593, "fields": { "host": 14, "hostname": "srv-597", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T11:16:32Z" } }, { "model": "app.syslogmessage", "pk": 594, "fields": { "host": 30, "hostname": "srv-493", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T22:57:28Z" } }, { "model": "app.syslogmessage", "pk": 595, "fields": { "host": 2, "hostname": "srv-831", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T08:14:29Z" } }, { "model": "app.syslogmessage", "pk": 596, "fields": { "host": 20, "hostname": "srv-787", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T02:34:42Z" } }, { "model": "app.syslogmessage", "pk": 597, "fields": { "host": 8, "hostname": "srv-711", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T01:40:31Z" } }, { "model": "app.syslogmessage", "pk": 598, "fields": { "host": 2, "hostname": "srv-831", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T08:19:35Z" } }, { "model": "app.syslogmessage", "pk": 599, "fields": { "host": 2, "hostname": "srv-831", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19T08:55:44Z" } }, { "model": "app.syslogmessage", "pk": 600, "fields": { "host": 15, "hostname": "srv-070", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T06:34:45Z" } }, { "model": "app.syslogmessage", "pk": 601, "fields": { "host": 26, "hostname": "srv-952", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T03:26:36Z" } }, { "model": "app.syslogmessage", "pk": 602, "fields": { "host": 6, "hostname": "srv-019", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T12:50:44Z" } }, { "model": "app.syslogmessage", "pk": 603, "fields": { "host": 7, "hostname": "srv-550", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T18:22:39Z" } }, { "model": "app.syslogmessage", "pk": 604, "fields": { "host": 23, "hostname": "srv-278", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T15:47:12Z" } }, { "model": "app.syslogmessage", "pk": 605, "fields": { "host": 26, "hostname": "srv-952", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T03:57:28Z" } }, { "model": "app.syslogmessage", "pk": 606, "fields": { "host": 24, "hostname": "srv-079", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T05:46:27Z" } }, { "model": "app.syslogmessage", "pk": 607, "fields": { "host": 16, "hostname": "srv-939", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T02:23:29Z" } }, { "model": "app.syslogmessage", "pk": 608, "fields": { "host": 17, "hostname": "srv-801", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T10:03:01Z" } }, { "model": "app.syslogmessage", "pk": 609, "fields": { "host": 15, "hostname": "srv-070", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T07:17:51Z" } }, { "model": "app.syslogmessage", "pk": 610, "fields": { "host": 28, "hostname": "srv-630", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:21:05Z" } }, { "model": "app.syslogmessage", "pk": 611, "fields": { "host": 22, "hostname": "srv-818", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T13:45:24Z" } }, { "model": "app.syslogmessage", "pk": 612, "fields": { "host": 19, "hostname": "srv-935", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T13:48:07Z" } }, { "model": "app.syslogmessage", "pk": 613, "fields": { "host": 15, "hostname": "srv-070", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-19T07:24:43Z" } }, { "model": "app.syslogmessage", "pk": 614, "fields": { "host": 25, "hostname": "srv-396", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T08:51:18Z" } }, { "model": "app.syslogmessage", "pk": 615, "fields": { "host": 28, "hostname": "srv-630", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T20:12:24Z" } }, { "model": "app.syslogmessage", "pk": 616, "fields": { "host": 1, "hostname": "srv-797", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T08:01:18Z" } }, { "model": "app.syslogmessage", "pk": 617, "fields": { "host": 10, "hostname": "srv-867", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T06:48:42Z" } }, { "model": "app.syslogmessage", "pk": 618, "fields": { "host": 8, "hostname": "srv-711", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T02:32:52Z" } }, { "model": "app.syslogmessage", "pk": 619, "fields": { "host": 13, "hostname": "srv-380", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T05:39:07Z" } }, { "model": "app.syslogmessage", "pk": 620, "fields": { "host": 26, "hostname": "srv-952", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T04:14:09Z" } }, { "model": "app.syslogmessage", "pk": 621, "fields": { "host": 14, "hostname": "srv-597", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T12:03:19Z" } }, { "model": "app.syslogmessage", "pk": 622, "fields": { "host": 23, "hostname": "srv-278", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T16:10:04Z" } }, { "model": "app.syslogmessage", "pk": 623, "fields": { "host": 14, "hostname": "srv-597", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T12:50:27Z" } }, { "model": "app.syslogmessage", "pk": 624, "fields": { "host": 4, "hostname": "srv-295", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T23:42:22Z" } }, { "model": "app.syslogmessage", "pk": 625, "fields": { "host": 28, "hostname": "srv-630", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T21:03:53Z" } }, { "model": "app.syslogmessage", "pk": 626, "fields": { "host": 26, "hostname": "srv-952", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T04:56:07Z" } }, { "model": "app.syslogmessage", "pk": 627, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T13:29:28Z" } }, { "model": "app.syslogmessage", "pk": 628, "fields": { "host": 24, "hostname": "srv-079", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T06:19:40Z" } }, { "model": "app.syslogmessage", "pk": 629, "fields": { "host": 12, "hostname": "srv-382", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T19:19:27Z" } }, { "model": "app.syslogmessage", "pk": 630, "fields": { "host": 7, "hostname": "srv-550", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T19:00:35Z" } }, { "model": "app.syslogmessage", "pk": 631, "fields": { "host": 12, "hostname": "srv-382", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T19:56:32Z" } }, { "model": "app.syslogmessage", "pk": 632, "fields": { "host": 28, "hostname": "srv-630", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T21:08:53Z" } }, { "model": "app.syslogmessage", "pk": 633, "fields": { "host": 15, "hostname": "srv-070", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T08:00:43Z" } }, { "model": "app.syslogmessage", "pk": 634, "fields": { "host": 23, "hostname": "srv-278", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T16:26:20Z" } }, { "model": "app.syslogmessage", "pk": 635, "fields": { "host": 14, "hostname": "srv-597", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T13:10:52Z" } }, { "model": "app.syslogmessage", "pk": 636, "fields": { "host": 8, "hostname": "srv-711", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T03:23:53Z" } }, { "model": "app.syslogmessage", "pk": 637, "fields": { "host": 14, "hostname": "srv-597", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T13:27:14Z" } }, { "model": "app.syslogmessage", "pk": 638, "fields": { "host": 13, "hostname": "srv-380", "template": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-19T06:28:37Z" } }, { "model": "app.syslogmessage", "pk": 639, "fields": { "host": 26, "hostname": "srv-952", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T05:05:22Z" } }, { "model": "app.syslogmessage", "pk": 640, "fields": { "host": 24, "hostname": "srv-079", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T06:52:38Z" } }, { "model": "app.syslogmessage", "pk": 641, "fields": { "host": 26, "hostname": "srv-952", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T05:58:43Z" } }, { "model": "app.syslogmessage", "pk": 642, "fields": { "host": 8, "hostname": "srv-711", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T04:08:15Z" } }, { "model": "app.syslogmessage", "pk": 643, "fields": { "host": 27, "hostname": "srv-671", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T19:15:19Z" } }, { "model": "app.syslogmessage", "pk": 644, "fields": { "host": 8, "hostname": "srv-711", "template": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-19T05:01:41Z" } }, { "model": "app.syslogmessage", "pk": 645, "fields": { "host": 27, "hostname": "srv-671", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T19:26:01Z" } }, { "model": "app.syslogmessage", "pk": 646, "fields": { "host": 11, "hostname": "srv-715", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18T23:44:09Z" } }, { "model": "app.syslogmessage", "pk": 647, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T00:15:33Z" } }, { "model": "app.syslogmessage", "pk": 648, "fields": { "host": 25, "hostname": "srv-396", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T08:57:00Z" } }, { "model": "app.syslogmessage", "pk": 649, "fields": { "host": 23, "hostname": "srv-278", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T16:42:17Z" } }, { "model": "app.syslogmessage", "pk": 650, "fields": { "host": 6, "hostname": "srv-019", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T13:59:19Z" } }, { "model": "app.syslogmessage", "pk": 651, "fields": { "host": 15, "hostname": "srv-070", "template": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19T08:52:13Z" } }, { "model": "app.syslogmessage", "pk": 652, "fields": { "host": 6, "hostname": "srv-019", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T14:37:32Z" } }, { "model": "app.syslogmessage", "pk": 653, "fields": { "host": 5, "hostname": "srv-700", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T07:11:41Z" } }, { "model": "app.syslogmessage", "pk": 654, "fields": { "host": 29, "hostname": "srv-296", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T00:44:21Z" } }, { "model": "app.syslogmessage", "pk": 655, "fields": { "host": 24, "hostname": "srv-079", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T07:19:53Z" } }, { "model": "app.syslogmessage", "pk": 656, "fields": { "host": 28, "hostname": "srv-630", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T22:00:33Z" } }, { "model": "app.syslogmessage", "pk": 657, "fields": { "host": 17, "hostname": "srv-801", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T10:36:23Z" } }, { "model": "app.syslogmessage", "pk": 658, "fields": { "host": 11, "hostname": "srv-715", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T00:35:16Z" } }, { "model": "app.syslogmessage", "pk": 659, "fields": { "host": 15, "hostname": "srv-070", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T09:33:03Z" } }, { "model": "app.syslogmessage", "pk": 660, "fields": { "host": 22, "hostname": "srv-818", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T14:26:40Z" } }, { "model": "app.syslogmessage", "pk": 661, "fields": { "host": 28, "hostname": "srv-630", "template": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18T22:47:13Z" } }, { "model": "app.syslogmessage", "pk": 662, "fields": { "host": 6, "hostname": "srv-019", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T15:01:46Z" } }, { "model": "app.syslogmessage", "pk": 663, "fields": { "host": 26, "hostname": "srv-952", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T06:58:06Z" } }, { "model": "app.syslogmessage", "pk": 664, "fields": { "host": 5, "hostname": "srv-700", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T07:52:39Z" } }, { "model": "app.syslogmessage", "pk": 665, "fields": { "host": 17, "hostname": "srv-801", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T11:01:31Z" } }, { "model": "app.syslogmessage", "pk": 666, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T15:29:20Z" } }, { "model": "app.syslogmessage", "pk": 667, "fields": { "host": 20, "hostname": "srv-787", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T03:02:19Z" } }, { "model": "app.syslogmessage", "pk": 668, "fields": { "host": 29, "hostname": "srv-296", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T01:38:36Z" } }, { "model": "app.syslogmessage", "pk": 669, "fields": { "host": 12, "hostname": "srv-382", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18T20:19:58Z" } }, { "model": "app.syslogmessage", "pk": 670, "fields": { "host": 11, "hostname": "srv-715", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T01:29:40Z" } }, { "model": "app.syslogmessage", "pk": 671, "fields": { "host": 26, "hostname": "srv-952", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T07:11:46Z" } }, { "model": "app.syslogmessage", "pk": 672, "fields": { "host": 25, "hostname": "srv-396", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T09:22:48Z" } }, { "model": "app.syslogmessage", "pk": 673, "fields": { "host": 18, "hostname": "srv-172", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18T17:32:05Z" } }, { "model": "app.syslogmessage", "pk": 674, "fields": { "host": 1, "hostname": "srv-797", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T08:22:17Z" } }, { "model": "app.syslogmessage", "pk": 675, "fields": { "host": 11, "hostname": "srv-715", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T01:59:05Z" } }, { "model": "app.syslogmessage", "pk": 676, "fields": { "host": 11, "hostname": "srv-715", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T02:08:22Z" } }, { "model": "app.syslogmessage", "pk": 677, "fields": { "host": 26, "hostname": "srv-952", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19T07:34:33Z" } }, { "model": "app.syslogmessage", "pk": 678, "fields": { "host": 20, "hostname": "srv-787", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T03:34:30Z" } }, { "model": "app.syslogmessage", "pk": 679, "fields": { "host": 10, "hostname": "srv-867", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T07:17:08Z" } }, { "model": "app.syslogmessage", "pk": 680, "fields": { "host": 20, "hostname": "srv-787", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T04:12:54Z" } }, { "model": "app.syslogmessage", "pk": 681, "fields": { "host": 11, "hostname": "srv-715", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T02:56:34Z" } }, { "model": "app.syslogmessage", "pk": 682, "fields": { "host": 16, "hostname": "srv-939", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19T03:09:16Z" } }, { "model": "app.syslogmessage", "pk": 683, "fields": { "host": 14, "hostname": "srv-597", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T14:21:09Z" } }, { "model": "app.syslogmessage", "pk": 684, "fields": { "host": 29, "hostname": "srv-296", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T01:49:11Z" } }, { "model": "app.syslogmessage", "pk": 685, "fields": { "host": 8, "hostname": "srv-711", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T05:22:45Z" } }, { "model": "app.syslogmessage", "pk": 686, "fields": { "host": 6, "hostname": "srv-019", "template": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19T15:39:23Z" } }, { "model": "app.syslogmessage", "pk": 687, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T16:23:11Z" } }, { "model": "app.syslogmessage", "pk": 688, "fields": { "host": 6, "hostname": "srv-019", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T16:46:37Z" } }, { "model": "app.syslogmessage", "pk": 689, "fields": { "host": 12, "hostname": "srv-382", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T20:29:31Z" } }, { "model": "app.syslogmessage", "pk": 690, "fields": { "host": 6, "hostname": "srv-019", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T17:18:52Z" } }, { "model": "app.syslogmessage", "pk": 691, "fields": { "host": 23, "hostname": "srv-278", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T17:34:42Z" } }, { "model": "app.syslogmessage", "pk": 692, "fields": { "host": 13, "hostname": "srv-380", "template": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19T07:01:52Z" } }, { "model": "app.syslogmessage", "pk": 693, "fields": { "host": 8, "hostname": "srv-711", "template": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19T05:31:01Z" } }, { "model": "app.syslogmessage", "pk": 694, "fields": { "host": 14, "hostname": "srv-597", "template": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18T15:09:12Z" } }, { "model": "app.syslogmessage", "pk": 695, "fields": { "host": 16, "hostname": "srv-939", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19T03:18:55Z" } }, { "model": "app.syslogmessage", "pk": 696, "fields": { "host": 13, "hostname": "srv-380", "template": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19T08:00:28Z" } }, { "model": "app.syslogmessage", "pk": 697, "fields": { "host": 15, "hostname": "srv-070", "template": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19T10:27:33Z" } }, { "model": "app.syslogmessage", "pk": 698, "fields": { "host": 27, "hostname": "srv-671", "template": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18T19:52:44Z" } }, { "model": "app.syslogmessage", "pk": 699, "fields": { "host": 18, "hostname": "srv-172", "template": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18T18:23:20Z" } }, { "model": "app.syslogmessage", "pk": 700, "fields": { "host": 21, "hostname": "srv-423", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18T19:17:49Z" } }, { "model": "app.syslogmessage", "pk": 701, "fields": { "host": 16, "hostname": "srv-939", "template": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19T03:55:30Z" } }, { "model": "app.syslogmessage", "pk": 702, "fields": { "host": 16, "hostname": "srv-939", "template": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19T04:23:48Z" } } ]