{ "anomaly_types": [ { "id": 1, "library": "injected", "name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from " }, { "id": 2, "library": "injected", "name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB" }, { "id": 3, "library": "injected", "name": "disk_full", "program": "systemd-journald", "facility": "daemon", "severity": "crit", "message_text": "Failed to write entry, ignoring: No space left on device" }, { "id": 4, "library": "injected", "name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6" }, { "id": 5, "library": "injected", "name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)" }, { "id": 6, "library": "injected", "name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash" } ], "hosts": [ { "id": 1, "hostname": "srv-797", "role": "web", "distribution": "debian-12", "capture_started_at": "2025-08-18 21:41:50" }, { "id": 2, "hostname": "srv-831", "role": "web", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 23:45:16" }, { "id": 3, "hostname": "srv-192", "role": "bastion", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 08:26:47" }, { "id": 4, "hostname": "srv-295", "role": "web", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 16:45:24" }, { "id": 5, "hostname": "srv-700", "role": "web", "distribution": "debian-12", "capture_started_at": "2025-08-18 23:45:16" }, { "id": 6, "hostname": "srv-019", "role": "batch", "distribution": "debian-12", "capture_started_at": "2025-08-18 23:19:25" }, { "id": 7, "hostname": "srv-550", "role": "database", "distribution": "debian-12", "capture_started_at": "2025-08-18 06:57:02" }, { "id": 8, "hostname": "srv-711", "role": "database", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 17:54:32" }, { "id": 9, "hostname": "srv-783", "role": "database", "distribution": "debian-12", "capture_started_at": "2025-08-18 02:34:02" }, { "id": 10, "hostname": "srv-867", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 18:04:53" }, { "id": 11, "hostname": "srv-715", "role": "cache", "distribution": "rocky-9", "capture_started_at": "2025-08-18 10:02:50" }, { "id": 12, "hostname": "srv-382", "role": "cache", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 02:29:06" }, { "id": 13, "hostname": "srv-380", "role": "bastion", "distribution": "debian-12", "capture_started_at": "2025-08-18 12:54:02" }, { "id": 14, "hostname": "srv-597", "role": "cache", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 01:02:10" }, { "id": 15, "hostname": "srv-070", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 20:36:33" }, { "id": 16, "hostname": "srv-939", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 16:58:34" }, { "id": 17, "hostname": "srv-801", "role": "web", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 03:06:20" }, { "id": 18, "hostname": "srv-172", "role": "bastion", "distribution": "debian-12", "capture_started_at": "2025-08-18 09:20:48" }, { "id": 19, "hostname": "srv-935", "role": "database", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 04:18:13" }, { "id": 20, "hostname": "srv-787", "role": "batch", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 13:26:51" }, { "id": 21, "hostname": "srv-423", "role": "bastion", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 05:57:50" }, { "id": 22, "hostname": "srv-818", "role": "database", "distribution": "rocky-9", "capture_started_at": "2025-08-18 03:26:53" }, { "id": 23, "hostname": "srv-278", "role": "web", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 03:40:20" }, { "id": 24, "hostname": "srv-079", "role": "web", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 13:31:48" }, { "id": 25, "hostname": "srv-396", "role": "batch", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 16:04:23" }, { "id": 26, "hostname": "srv-952", "role": "web", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 11:35:21" }, { "id": 27, "hostname": "srv-671", "role": "database", "distribution": "rocky-9", "capture_started_at": "2025-08-18 08:15:04" }, { "id": 28, "hostname": "srv-630", "role": "web", "distribution": "rocky-9", "capture_started_at": "2025-08-18 12:06:12" }, { "id": 29, "hostname": "srv-296", "role": "cache", "distribution": "ubuntu-22.04", "capture_started_at": "2025-08-18 18:18:26" }, { "id": 30, "hostname": "srv-493", "role": "bastion", "distribution": "ubuntu-24.04", "capture_started_at": "2025-08-18 15:38:43" } ], "anomaly_windows": [ { "id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_type_id": 4, "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "started_at": "2025-08-19 05:53:20" }, { "id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_type_id": 5, "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "started_at": "2025-08-18 03:51:12" }, { "id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18 16:48:16" }, { "id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_type_id": 6, "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "started_at": "2025-08-18 09:46:33" }, { "id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18 17:22:54" }, { "id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_type_id": 4, "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "started_at": "2025-08-19 05:59:29" }, { "id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_type_id": 5, "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "started_at": "2025-08-18 19:27:40" }, { "id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-19 05:49:10" }, { "id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_type_id": 6, "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "started_at": "2025-08-19 02:22:41" }, { "id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18 09:32:49" }, { "id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_type_id": 2, "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "started_at": "2025-08-19 00:08:50" }, { "id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_type_id": 2, "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "started_at": "2025-08-19 21:47:29" }, { "id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-19 20:57:22" }, { "id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-18 09:30:00" }, { "id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_type_id": 5, "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "started_at": "2025-08-19 16:12:47" }, { "id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_type_id": 1, "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "started_at": "2025-08-19 11:20:02" } ], "anomaly_messages": [ { "id": 1, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:09:13" }, { "id": 2, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:22:54" }, { "id": 3, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:48:25" }, { "id": 4, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:51:25" }, { "id": 5, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:23:03" }, { "id": 6, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:57:44" }, { "id": 7, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:46:41" }, { "id": 8, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:09:24" }, { "id": 9, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:27:54" }, { "id": 10, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:51:42" }, { "id": 11, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:12:58" }, { "id": 12, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:09:29" }, { "id": 13, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:53:32" }, { "id": 14, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:20:06" }, { "id": 15, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:53:54" }, { "id": 16, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:46:46" }, { "id": 17, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:09:53" }, { "id": 18, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:48:35" }, { "id": 19, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:30:06" }, { "id": 20, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:47:01" }, { "id": 21, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:23:27" }, { "id": 22, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:47:05" }, { "id": 23, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:10:07" }, { "id": 24, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:47:15" }, { "id": 25, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:13:01" }, { "id": 26, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:52:08" }, { "id": 27, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:52:13" }, { "id": 28, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:47:19" }, { "id": 29, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:20:29" }, { "id": 30, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:52:24" }, { "id": 31, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:10:16" }, { "id": 32, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:28:01" }, { "id": 33, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:23:09" }, { "id": 34, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:59:38" }, { "id": 35, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:54:19" }, { "id": 36, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:20:52" }, { "id": 37, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:52:42" }, { "id": 38, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:10:30" }, { "id": 39, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:48:54" }, { "id": 40, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:23:37" }, { "id": 41, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:10:35" }, { "id": 42, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:10:52" }, { "id": 43, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:47:39" }, { "id": 44, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:54:34" }, { "id": 45, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:28:10" }, { "id": 46, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:21:04" }, { "id": 47, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:00:03" }, { "id": 48, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:00:26" }, { "id": 49, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:13:08" }, { "id": 50, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:11:08" }, { "id": 51, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:28:30" }, { "id": 52, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:54:56" }, { "id": 53, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:48:01" }, { "id": 54, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:23:32" }, { "id": 55, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:49:26" }, { "id": 56, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:28:56" }, { "id": 57, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:29:14" }, { "id": 58, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:48:03" }, { "id": 59, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:52:47" }, { "id": 60, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:48:08" }, { "id": 61, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:23:40" }, { "id": 62, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:23:58" }, { "id": 63, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:24:12" }, { "id": 64, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:13:31" }, { "id": 65, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:13:54" }, { "id": 66, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:55:03" }, { "id": 67, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:57:47" }, { "id": 68, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:21:08" }, { "id": 69, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:11:11" }, { "id": 70, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:57:52" }, { "id": 71, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:53:05" }, { "id": 72, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:47:44" }, { "id": 73, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:24:14" }, { "id": 74, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:53:21" }, { "id": 75, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:55:16" }, { "id": 76, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:53:44" }, { "id": 77, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:29:25" }, { "id": 78, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:48:34" }, { "id": 79, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:33:06" }, { "id": 80, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:48:04" }, { "id": 81, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:21:31" }, { "id": 82, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:57:54" }, { "id": 83, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:11:22" }, { "id": 84, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:58:19" }, { "id": 85, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:23:52" }, { "id": 86, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:48:18" }, { "id": 87, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:48:39" }, { "id": 88, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:30:17" }, { "id": 89, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:53:51" }, { "id": 90, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:24:19" }, { "id": 91, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:49:34" }, { "id": 92, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:54:04" }, { "id": 93, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:29:34" }, { "id": 94, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:58:28" }, { "id": 95, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:55:35" }, { "id": 96, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:29:53" }, { "id": 97, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:49:55" }, { "id": 98, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:49:57" }, { "id": 99, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:24:21" }, { "id": 100, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:48:50" }, { "id": 101, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:30:30" }, { "id": 102, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:29:57" }, { "id": 103, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:55:40" }, { "id": 104, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:21:50" }, { "id": 105, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:33:14" }, { "id": 106, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:30:15" }, { "id": 107, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:30:38" }, { "id": 108, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:00" }, { "id": 109, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:24:44" }, { "id": 110, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:30:29" }, { "id": 111, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:04" }, { "id": 112, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:49:14" }, { "id": 113, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:13" }, { "id": 114, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:48:41" }, { "id": 115, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:56:01" }, { "id": 116, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:23" }, { "id": 117, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:11:37" }, { "id": 118, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:24:01" }, { "id": 119, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:12:04" }, { "id": 120, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:58:50" }, { "id": 121, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:56:21" }, { "id": 122, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:59:17" }, { "id": 123, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:14:05" }, { "id": 124, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:26" }, { "id": 125, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:12:23" }, { "id": 126, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:24:12" }, { "id": 127, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:54:23" }, { "id": 128, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:34" }, { "id": 129, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:50:19" }, { "id": 130, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:49:27" }, { "id": 131, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:12:36" }, { "id": 132, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:49:54" }, { "id": 133, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:22:52" }, { "id": 134, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:30:46" }, { "id": 135, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:00:36" }, { "id": 136, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:23:11" }, { "id": 137, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:24:34" }, { "id": 138, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:56:46" }, { "id": 139, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:24:48" }, { "id": 140, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:49:13" }, { "id": 141, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:25:13" }, { "id": 142, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:25:35" }, { "id": 143, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:12:47" }, { "id": 144, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:33:27" }, { "id": 145, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:12:55" }, { "id": 146, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:56:57" }, { "id": 147, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:49:20" }, { "id": 148, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:30:55" }, { "id": 149, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:49:47" }, { "id": 150, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:23:17" }, { "id": 151, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:13:07" }, { "id": 152, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:30:49" }, { "id": 153, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:23:31" }, { "id": 154, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:50:00" }, { "id": 155, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:50:44" }, { "id": 156, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:33:52" }, { "id": 157, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:13:18" }, { "id": 158, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:23:49" }, { "id": 159, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:30:52" }, { "id": 160, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:57:06" }, { "id": 161, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:54:25" }, { "id": 162, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:24:07" }, { "id": 163, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 20:59:38" }, { "id": 164, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:57:31" }, { "id": 165, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:33:54" }, { "id": 166, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:57:44" }, { "id": 167, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:24:47" }, { "id": 168, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:50:56" }, { "id": 169, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:48:51" }, { "id": 170, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:49:03" }, { "id": 171, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:13:31" }, { "id": 172, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:24:29" }, { "id": 173, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:31:16" }, { "id": 174, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:31:41" }, { "id": 175, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:51:18" }, { "id": 176, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:49:29" }, { "id": 177, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:57:47" }, { "id": 178, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:54:44" }, { "id": 179, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:24:32" }, { "id": 180, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:32:04" }, { "id": 181, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:55:06" }, { "id": 182, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:55:10" }, { "id": 183, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:34:11" }, { "id": 184, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:32:20" }, { "id": 185, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:49:32" }, { "id": 186, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:32:25" }, { "id": 187, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:51:31" }, { "id": 188, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:24:53" }, { "id": 189, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:25:11" }, { "id": 190, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:34:34" }, { "id": 191, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:50:09" }, { "id": 192, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:13:56" }, { "id": 193, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:25:44" }, { "id": 194, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 21:00:04" }, { "id": 195, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 21:00:17" }, { "id": 196, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:25:17" }, { "id": 197, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:32:42" }, { "id": 198, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:50:22" }, { "id": 199, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:51:38" }, { "id": 200, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:57:52" }, { "id": 201, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:55:27" }, { "id": 202, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:50:45" }, { "id": 203, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:33:08" }, { "id": 204, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:57:59" }, { "id": 205, "window_id": 9, "host_id": 11, "hostname": "srv-715", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-19 02:26:11" }, { "id": 206, "window_id": 2, "host_id": 17, "hostname": "srv-801", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 03:55:45" }, { "id": 207, "window_id": 3, "host_id": 17, "hostname": "srv-801", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 16:50:22" }, { "id": 208, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:25:13" }, { "id": 209, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:34:38" }, { "id": 210, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:00:38" }, { "id": 211, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:25:22" }, { "id": 212, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:14:10" }, { "id": 213, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 21:00:20" }, { "id": 214, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:33:24" }, { "id": 215, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:14:29" }, { "id": 216, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:31:12" }, { "id": 217, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:25:40" }, { "id": 218, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:14:26" }, { "id": 219, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:51:02" }, { "id": 220, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:34:41" }, { "id": 221, "window_id": 5, "host_id": 25, "hostname": "srv-396", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 17:25:20" }, { "id": 222, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:51:13" }, { "id": 223, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:33:41" }, { "id": 224, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:58:17" }, { "id": 225, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:00:52" }, { "id": 226, "window_id": 15, "host_id": 29, "hostname": "srv-296", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-19 16:14:44" }, { "id": 227, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:01:10" }, { "id": 228, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:58:38" }, { "id": 229, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 21:00:22" }, { "id": 230, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:58:40" }, { "id": 231, "window_id": 8, "host_id": 16, "hostname": "srv-939", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 05:51:52" }, { "id": 232, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:59:03" }, { "id": 233, "window_id": 4, "host_id": 22, "hostname": "srv-818", "anomaly_name": "sudo_denied", "program": "sudo", "facility": "authpriv", "severity": "alert", "message_text": "www-data : user NOT in sudoers ; COMMAND=/bin/bash", "logged_at": "2025-08-18 09:51:21" }, { "id": 234, "window_id": 11, "host_id": 15, "hostname": "srv-070", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 00:14:53" }, { "id": 235, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:59:30" }, { "id": 236, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:33:53" }, { "id": 237, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:25:46" }, { "id": 238, "window_id": 6, "host_id": 2, "hostname": "srv-831", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 06:01:33" }, { "id": 239, "window_id": 16, "host_id": 10, "hostname": "srv-867", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 11:26:05" }, { "id": 240, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:49:45" }, { "id": 241, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:31:14" }, { "id": 242, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 21:00:41" }, { "id": 243, "window_id": 12, "host_id": 2, "hostname": "srv-831", "anomaly_name": "oom_kill", "program": "kernel", "facility": "kern", "severity": "err", "message_text": "Out of memory: Killed process () total-vm:kB", "logged_at": "2025-08-19 21:50:00" }, { "id": 244, "window_id": 14, "host_id": 22, "hostname": "srv-818", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:31:41" }, { "id": 245, "window_id": 10, "host_id": 27, "hostname": "srv-671", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-18 09:35:03" }, { "id": 246, "window_id": 1, "host_id": 6, "hostname": "srv-019", "anomaly_name": "segfault_loop", "program": "kernel", "facility": "kern", "severity": "warning", "message_text": "[]: segfault at 0 ip error 4 in libc.so.6", "logged_at": "2025-08-19 05:59:43" }, { "id": 247, "window_id": 7, "host_id": 25, "hostname": "srv-396", "anomaly_name": "cron_misfire", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (/opt/jobs/sync-inventory.sh)", "logged_at": "2025-08-18 19:34:11" }, { "id": 248, "window_id": 13, "host_id": 5, "hostname": "srv-700", "anomaly_name": "ssh_password_guessing", "program": "sshd", "facility": "auth", "severity": "warning", "message_text": "Failed password for invalid user from ", "logged_at": "2025-08-19 21:01:06" } ], "message_templates": [ { "id": 1, "library": "routine", "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User ." }, { "id": 2, "library": "routine", "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities..." }, { "id": 3, "library": "routine", "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2" }, { "id": 4, "library": "routine", "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user " }, { "id": 5, "library": "routine", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)" }, { "id": 6, "library": "routine", "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off" }, { "id": 7, "library": "routine", "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro" }, { "id": 8, "library": "routine", "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from " }, { "id": 9, "library": "routine", "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed" }, { "id": 10, "library": "routine", "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)" }, { "id": 11, "library": "routine", "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully." }, { "id": 12, "library": "routine", "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user ." }, { "id": 13, "library": "routine", "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime" }, { "id": 14, "library": "routine", "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)" } ], "syslog_messages": [ { "id": 1, "host_id": 20, "hostname": "srv-787", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 13:42:57" }, { "id": 2, "host_id": 26, "hostname": "srv-952", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 12:21:25" }, { "id": 3, "host_id": 12, "hostname": "srv-382", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 03:04:08" }, { "id": 4, "host_id": 26, "hostname": "srv-952", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 13:13:48" }, { "id": 5, "host_id": 7, "hostname": "srv-550", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 07:06:51" }, { "id": 6, "host_id": 11, "hostname": "srv-715", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 10:35:21" }, { "id": 7, "host_id": 1, "hostname": "srv-797", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 22:26:36" }, { "id": 8, "host_id": 27, "hostname": "srv-671", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 08:27:30" }, { "id": 9, "host_id": 8, "hostname": "srv-711", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 18:34:27" }, { "id": 10, "host_id": 3, "hostname": "srv-192", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 08:44:48" }, { "id": 11, "host_id": 24, "hostname": "srv-079", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 14:24:50" }, { "id": 12, "host_id": 20, "hostname": "srv-787", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 14:10:33" }, { "id": 13, "host_id": 3, "hostname": "srv-192", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 09:05:30" }, { "id": 14, "host_id": 8, "hostname": "srv-711", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:17:26" }, { "id": 15, "host_id": 19, "hostname": "srv-935", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 04:40:24" }, { "id": 16, "host_id": 11, "hostname": "srv-715", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 10:42:30" }, { "id": 17, "host_id": 2, "hostname": "srv-831", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 00:05:00" }, { "id": 18, "host_id": 6, "hostname": "srv-019", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 23:48:35" }, { "id": 19, "host_id": 15, "hostname": "srv-070", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 21:02:47" }, { "id": 20, "host_id": 20, "hostname": "srv-787", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 14:47:27" }, { "id": 21, "host_id": 21, "hostname": "srv-423", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 06:07:22" }, { "id": 22, "host_id": 25, "hostname": "srv-396", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 16:50:44" }, { "id": 23, "host_id": 7, "hostname": "srv-550", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 08:01:11" }, { "id": 24, "host_id": 20, "hostname": "srv-787", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 15:12:57" }, { "id": 25, "host_id": 10, "hostname": "srv-867", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 18:58:13" }, { "id": 26, "host_id": 11, "hostname": "srv-715", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 11:32:42" }, { "id": 27, "host_id": 10, "hostname": "srv-867", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 19:44:30" }, { "id": 28, "host_id": 27, "hostname": "srv-671", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 08:42:08" }, { "id": 29, "host_id": 1, "hostname": "srv-797", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 22:43:26" }, { "id": 30, "host_id": 18, "hostname": "srv-172", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 09:29:13" }, { "id": 31, "host_id": 28, "hostname": "srv-630", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 12:42:45" }, { "id": 32, "host_id": 27, "hostname": "srv-671", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 09:39:55" }, { "id": 33, "host_id": 24, "hostname": "srv-079", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 14:48:10" }, { "id": 34, "host_id": 22, "hostname": "srv-818", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 04:14:50" }, { "id": 35, "host_id": 25, "hostname": "srv-396", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 17:45:56" }, { "id": 36, "host_id": 9, "hostname": "srv-783", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 02:49:03" }, { "id": 37, "host_id": 23, "hostname": "srv-278", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 04:18:21" }, { "id": 38, "host_id": 15, "hostname": "srv-070", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 21:22:11" }, { "id": 39, "host_id": 1, "hostname": "srv-797", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 23:09:57" }, { "id": 40, "host_id": 10, "hostname": "srv-867", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 20:21:06" }, { "id": 41, "host_id": 17, "hostname": "srv-801", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 03:12:40" }, { "id": 42, "host_id": 8, "hostname": "srv-711", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 20:07:29" }, { "id": 43, "host_id": 19, "hostname": "srv-935", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 05:00:25" }, { "id": 44, "host_id": 25, "hostname": "srv-396", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 17:52:29" }, { "id": 45, "host_id": 30, "hostname": "srv-493", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:55:22" }, { "id": 46, "host_id": 3, "hostname": "srv-192", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 10:00:06" }, { "id": 47, "host_id": 24, "hostname": "srv-079", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 15:09:50" }, { "id": 48, "host_id": 15, "hostname": "srv-070", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 21:47:22" }, { "id": 49, "host_id": 1, "hostname": "srv-797", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 23:31:39" }, { "id": 50, "host_id": 6, "hostname": "srv-019", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 00:09:12" }, { "id": 51, "host_id": 3, "hostname": "srv-192", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 10:38:21" }, { "id": 52, "host_id": 4, "hostname": "srv-295", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 17:28:41" }, { "id": 53, "host_id": 3, "hostname": "srv-192", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 11:06:57" }, { "id": 54, "host_id": 15, "hostname": "srv-070", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 22:02:08" }, { "id": 55, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 12:27:06" }, { "id": 56, "host_id": 2, "hostname": "srv-831", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 00:43:14" }, { "id": 57, "host_id": 22, "hostname": "srv-818", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 04:52:16" }, { "id": 58, "host_id": 30, "hostname": "srv-493", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 16:30:59" }, { "id": 59, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 00:18:51" }, { "id": 60, "host_id": 23, "hostname": "srv-278", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 04:40:39" }, { "id": 61, "host_id": 10, "hostname": "srv-867", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:45:52" }, { "id": 62, "host_id": 21, "hostname": "srv-423", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 07:06:30" }, { "id": 63, "host_id": 2, "hostname": "srv-831", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 00:53:28" }, { "id": 64, "host_id": 10, "hostname": "srv-867", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:57:25" }, { "id": 65, "host_id": 8, "hostname": "srv-711", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 20:38:41" }, { "id": 66, "host_id": 27, "hostname": "srv-671", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 10:06:02" }, { "id": 67, "host_id": 15, "hostname": "srv-070", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 23:00:42" }, { "id": 68, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 14:07:52" }, { "id": 69, "host_id": 26, "hostname": "srv-952", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 14:26:45" }, { "id": 70, "host_id": 11, "hostname": "srv-715", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 12:50:38" }, { "id": 71, "host_id": 21, "hostname": "srv-423", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 07:32:25" }, { "id": 72, "host_id": 23, "hostname": "srv-278", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 05:04:51" }, { "id": 73, "host_id": 18, "hostname": "srv-172", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 10:24:44" }, { "id": 74, "host_id": 9, "hostname": "srv-783", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 02:58:04" }, { "id": 75, "host_id": 4, "hostname": "srv-295", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 18:00:28" }, { "id": 76, "host_id": 30, "hostname": "srv-493", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 17:15:19" }, { "id": 77, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 13:11:56" }, { "id": 78, "host_id": 16, "hostname": "srv-939", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 17:05:31" }, { "id": 79, "host_id": 10, "hostname": "srv-867", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 21:27:35" }, { "id": 80, "host_id": 13, "hostname": "srv-380", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 14:05:25" }, { "id": 81, "host_id": 1, "hostname": "srv-797", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 23:56:34" }, { "id": 82, "host_id": 2, "hostname": "srv-831", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 01:19:31" }, { "id": 83, "host_id": 27, "hostname": "srv-671", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 10:54:06" }, { "id": 84, "host_id": 7, "hostname": "srv-550", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 08:15:30" }, { "id": 85, "host_id": 29, "hostname": "srv-296", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 18:44:48" }, { "id": 86, "host_id": 19, "hostname": "srv-935", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 05:36:13" }, { "id": 87, "host_id": 26, "hostname": "srv-952", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 14:51:54" }, { "id": 88, "host_id": 14, "hostname": "srv-597", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 01:41:35" }, { "id": 89, "host_id": 24, "hostname": "srv-079", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:17:26" }, { "id": 90, "host_id": 24, "hostname": "srv-079", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:27:12" }, { "id": 91, "host_id": 24, "hostname": "srv-079", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 16:03:24" }, { "id": 92, "host_id": 18, "hostname": "srv-172", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 10:49:56" }, { "id": 93, "host_id": 15, "hostname": "srv-070", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 23:42:11" }, { "id": 94, "host_id": 3, "hostname": "srv-192", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 11:17:49" }, { "id": 95, "host_id": 25, "hostname": "srv-396", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 18:50:28" }, { "id": 96, "host_id": 27, "hostname": "srv-671", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 11:18:47" }, { "id": 97, "host_id": 23, "hostname": "srv-278", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 05:37:14" }, { "id": 98, "host_id": 13, "hostname": "srv-380", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 14:24:07" }, { "id": 99, "host_id": 13, "hostname": "srv-380", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 14:52:00" }, { "id": 100, "host_id": 26, "hostname": "srv-952", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 15:37:44" }, { "id": 101, "host_id": 8, "hostname": "srv-711", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 20:51:15" }, { "id": 102, "host_id": 26, "hostname": "srv-952", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 16:18:24" }, { "id": 103, "host_id": 4, "hostname": "srv-295", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 18:30:59" }, { "id": 104, "host_id": 25, "hostname": "srv-396", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 19:29:43" }, { "id": 105, "host_id": 13, "hostname": "srv-380", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 15:03:41" }, { "id": 106, "host_id": 12, "hostname": "srv-382", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 03:35:25" }, { "id": 107, "host_id": 12, "hostname": "srv-382", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 04:21:26" }, { "id": 108, "host_id": 24, "hostname": "srv-079", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 16:14:36" }, { "id": 109, "host_id": 16, "hostname": "srv-939", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 17:41:30" }, { "id": 110, "host_id": 20, "hostname": "srv-787", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:32:27" }, { "id": 111, "host_id": 11, "hostname": "srv-715", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 13:13:45" }, { "id": 112, "host_id": 27, "hostname": "srv-671", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 11:51:29" }, { "id": 113, "host_id": 20, "hostname": "srv-787", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 15:54:15" }, { "id": 114, "host_id": 9, "hostname": "srv-783", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 03:44:23" }, { "id": 115, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:14:10" }, { "id": 116, "host_id": 1, "hostname": "srv-797", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 00:48:01" }, { "id": 117, "host_id": 3, "hostname": "srv-192", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 11:33:37" }, { "id": 118, "host_id": 6, "hostname": "srv-019", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 01:04:34" }, { "id": 119, "host_id": 18, "hostname": "srv-172", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 11:45:04" }, { "id": 120, "host_id": 14, "hostname": "srv-597", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 02:24:10" }, { "id": 121, "host_id": 12, "hostname": "srv-382", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 05:16:50" }, { "id": 122, "host_id": 12, "hostname": "srv-382", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 06:07:20" }, { "id": 123, "host_id": 19, "hostname": "srv-935", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 06:35:04" }, { "id": 124, "host_id": 3, "hostname": "srv-192", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 12:15:31" }, { "id": 125, "host_id": 26, "hostname": "srv-952", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 16:49:02" }, { "id": 126, "host_id": 25, "hostname": "srv-396", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 19:37:53" }, { "id": 127, "host_id": 22, "hostname": "srv-818", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 05:03:48" }, { "id": 128, "host_id": 23, "hostname": "srv-278", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 06:16:28" }, { "id": 129, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 15:38:41" }, { "id": 130, "host_id": 12, "hostname": "srv-382", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 06:14:06" }, { "id": 131, "host_id": 15, "hostname": "srv-070", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 23:50:04" }, { "id": 132, "host_id": 3, "hostname": "srv-192", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 13:05:24" }, { "id": 133, "host_id": 17, "hostname": "srv-801", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 03:20:05" }, { "id": 134, "host_id": 16, "hostname": "srv-939", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 17:52:58" }, { "id": 135, "host_id": 29, "hostname": "srv-296", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 19:40:38" }, { "id": 136, "host_id": 19, "hostname": "srv-935", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 07:24:14" }, { "id": 137, "host_id": 20, "hostname": "srv-787", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 16:31:13" }, { "id": 138, "host_id": 9, "hostname": "srv-783", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 04:09:11" }, { "id": 139, "host_id": 8, "hostname": "srv-711", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 21:02:40" }, { "id": 140, "host_id": 24, "hostname": "srv-079", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 16:59:44" }, { "id": 141, "host_id": 26, "hostname": "srv-952", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 17:17:47" }, { "id": 142, "host_id": 30, "hostname": "srv-493", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 18:07:39" }, { "id": 143, "host_id": 12, "hostname": "srv-382", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 06:47:37" }, { "id": 144, "host_id": 25, "hostname": "srv-396", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:20:04" }, { "id": 145, "host_id": 12, "hostname": "srv-382", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 07:14:33" }, { "id": 146, "host_id": 13, "hostname": "srv-380", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 16:32:50" }, { "id": 147, "host_id": 9, "hostname": "srv-783", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 04:19:02" }, { "id": 148, "host_id": 23, "hostname": "srv-278", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 07:13:56" }, { "id": 149, "host_id": 28, "hostname": "srv-630", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 13:02:24" }, { "id": 150, "host_id": 7, "hostname": "srv-550", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 08:38:05" }, { "id": 151, "host_id": 24, "hostname": "srv-079", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 17:41:37" }, { "id": 152, "host_id": 14, "hostname": "srv-597", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 03:04:22" }, { "id": 153, "host_id": 22, "hostname": "srv-818", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 06:00:53" }, { "id": 154, "host_id": 24, "hostname": "srv-079", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 17:49:23" }, { "id": 155, "host_id": 9, "hostname": "srv-783", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 05:14:39" }, { "id": 156, "host_id": 28, "hostname": "srv-630", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 13:54:52" }, { "id": 157, "host_id": 17, "hostname": "srv-801", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 03:52:58" }, { "id": 158, "host_id": 5, "hostname": "srv-700", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 00:22:40" }, { "id": 159, "host_id": 18, "hostname": "srv-172", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 12:37:31" }, { "id": 160, "host_id": 20, "hostname": "srv-787", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 17:23:44" }, { "id": 161, "host_id": 27, "hostname": "srv-671", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 12:07:39" }, { "id": 162, "host_id": 17, "hostname": "srv-801", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 04:12:14" }, { "id": 163, "host_id": 25, "hostname": "srv-396", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 21:04:27" }, { "id": 164, "host_id": 12, "hostname": "srv-382", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 07:58:07" }, { "id": 165, "host_id": 12, "hostname": "srv-382", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 08:30:51" }, { "id": 166, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 17:58:27" }, { "id": 167, "host_id": 16, "hostname": "srv-939", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 18:43:19" }, { "id": 168, "host_id": 24, "hostname": "srv-079", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 18:09:45" }, { "id": 169, "host_id": 12, "hostname": "srv-382", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 09:11:25" }, { "id": 170, "host_id": 14, "hostname": "srv-597", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 03:40:37" }, { "id": 171, "host_id": 6, "hostname": "srv-019", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 01:56:15" }, { "id": 172, "host_id": 6, "hostname": "srv-019", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 02:28:51" }, { "id": 173, "host_id": 13, "hostname": "srv-380", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 17:19:55" }, { "id": 174, "host_id": 1, "hostname": "srv-797", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 01:14:36" }, { "id": 175, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 17:44:00" }, { "id": 176, "host_id": 24, "hostname": "srv-079", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 18:45:48" }, { "id": 177, "host_id": 10, "hostname": "srv-867", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 21:58:08" }, { "id": 178, "host_id": 20, "hostname": "srv-787", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 17:47:44" }, { "id": 179, "host_id": 19, "hostname": "srv-935", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 08:07:15" }, { "id": 180, "host_id": 19, "hostname": "srv-935", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18 08:14:45" }, { "id": 181, "host_id": 7, "hostname": "srv-550", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 09:27:06" }, { "id": 182, "host_id": 10, "hostname": "srv-867", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 22:10:58" }, { "id": 183, "host_id": 16, "hostname": "srv-939", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 18:51:48" }, { "id": 184, "host_id": 7, "hostname": "srv-550", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 09:54:02" }, { "id": 185, "host_id": 7, "hostname": "srv-550", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 10:00:09" }, { "id": 186, "host_id": 23, "hostname": "srv-278", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 08:13:54" }, { "id": 187, "host_id": 16, "hostname": "srv-939", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 19:46:08" }, { "id": 188, "host_id": 12, "hostname": "srv-382", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 10:02:57" }, { "id": 189, "host_id": 25, "hostname": "srv-396", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 21:13:56" }, { "id": 190, "host_id": 27, "hostname": "srv-671", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 12:54:16" }, { "id": 191, "host_id": 25, "hostname": "srv-396", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:56:07" }, { "id": 192, "host_id": 14, "hostname": "srv-597", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 03:50:01" }, { "id": 193, "host_id": 11, "hostname": "srv-715", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 13:29:56" }, { "id": 194, "host_id": 21, "hostname": "srv-423", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 08:13:53" }, { "id": 195, "host_id": 11, "hostname": "srv-715", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 13:55:02" }, { "id": 196, "host_id": 19, "hostname": "srv-935", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 08:51:50" }, { "id": 197, "host_id": 20, "hostname": "srv-787", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 18:37:17" }, { "id": 198, "host_id": 10, "hostname": "srv-867", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 23:01:00" }, { "id": 199, "host_id": 12, "hostname": "srv-382", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 10:46:01" }, { "id": 200, "host_id": 28, "hostname": "srv-630", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 14:05:17" }, { "id": 201, "host_id": 3, "hostname": "srv-192", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 14:00:41" }, { "id": 202, "host_id": 5, "hostname": "srv-700", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 00:43:32" }, { "id": 203, "host_id": 11, "hostname": "srv-715", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 14:27:00" }, { "id": 204, "host_id": 15, "hostname": "srv-070", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 00:49:41" }, { "id": 205, "host_id": 29, "hostname": "srv-296", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 19:55:14" }, { "id": 206, "host_id": 19, "hostname": "srv-935", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 09:14:42" }, { "id": 207, "host_id": 8, "hostname": "srv-711", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:13:29" }, { "id": 208, "host_id": 2, "hostname": "srv-831", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 02:17:45" }, { "id": 209, "host_id": 15, "hostname": "srv-070", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 01:22:57" }, { "id": 210, "host_id": 3, "hostname": "srv-192", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 14:28:16" }, { "id": 211, "host_id": 2, "hostname": "srv-831", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 02:45:29" }, { "id": 212, "host_id": 1, "hostname": "srv-797", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 01:19:40" }, { "id": 213, "host_id": 13, "hostname": "srv-380", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 18:12:21" }, { "id": 214, "host_id": 27, "hostname": "srv-671", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 13:01:28" }, { "id": 215, "host_id": 27, "hostname": "srv-671", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 13:49:28" }, { "id": 216, "host_id": 27, "hostname": "srv-671", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 14:09:00" }, { "id": 217, "host_id": 22, "hostname": "srv-818", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 06:16:52" }, { "id": 218, "host_id": 13, "hostname": "srv-380", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 19:10:06" }, { "id": 219, "host_id": 22, "hostname": "srv-818", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 06:53:12" }, { "id": 220, "host_id": 6, "hostname": "srv-019", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 03:19:50" }, { "id": 221, "host_id": 27, "hostname": "srv-671", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 14:19:05" }, { "id": 222, "host_id": 30, "hostname": "srv-493", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 18:28:41" }, { "id": 223, "host_id": 14, "hostname": "srv-597", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 04:46:27" }, { "id": 224, "host_id": 17, "hostname": "srv-801", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 04:22:08" }, { "id": 225, "host_id": 23, "hostname": "srv-278", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 08:46:25" }, { "id": 226, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 15:19:09" }, { "id": 227, "host_id": 3, "hostname": "srv-192", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 15:09:08" }, { "id": 228, "host_id": 16, "hostname": "srv-939", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 20:39:22" }, { "id": 229, "host_id": 3, "hostname": "srv-192", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 16:08:15" }, { "id": 230, "host_id": 11, "hostname": "srv-715", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 15:44:51" }, { "id": 231, "host_id": 21, "hostname": "srv-423", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 08:58:58" }, { "id": 232, "host_id": 30, "hostname": "srv-493", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 19:13:29" }, { "id": 233, "host_id": 22, "hostname": "srv-818", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 07:48:47" }, { "id": 234, "host_id": 16, "hostname": "srv-939", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:13:40" }, { "id": 235, "host_id": 18, "hostname": "srv-172", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 12:57:57" }, { "id": 236, "host_id": 11, "hostname": "srv-715", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:49:57" }, { "id": 237, "host_id": 30, "hostname": "srv-493", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:35:13" }, { "id": 238, "host_id": 26, "hostname": "srv-952", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 18:18:51" }, { "id": 239, "host_id": 8, "hostname": "srv-711", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 21:18:40" }, { "id": 240, "host_id": 22, "hostname": "srv-818", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 08:06:36" }, { "id": 241, "host_id": 4, "hostname": "srv-295", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 19:30:21" }, { "id": 242, "host_id": 28, "hostname": "srv-630", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:03:21" }, { "id": 243, "host_id": 30, "hostname": "srv-493", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18 19:57:55" }, { "id": 244, "host_id": 16, "hostname": "srv-939", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 21:20:54" }, { "id": 245, "host_id": 3, "hostname": "srv-192", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 16:37:20" }, { "id": 246, "host_id": 12, "hostname": "srv-382", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 11:07:49" }, { "id": 247, "host_id": 29, "hostname": "srv-296", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 20:36:01" }, { "id": 248, "host_id": 27, "hostname": "srv-671", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 14:44:52" }, { "id": 249, "host_id": 25, "hostname": "srv-396", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 22:36:47" }, { "id": 250, "host_id": 5, "hostname": "srv-700", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 01:37:09" }, { "id": 251, "host_id": 21, "hostname": "srv-423", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 09:58:25" }, { "id": 252, "host_id": 30, "hostname": "srv-493", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 20:49:32" }, { "id": 253, "host_id": 8, "hostname": "srv-711", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 21:25:54" }, { "id": 254, "host_id": 20, "hostname": "srv-787", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 19:09:56" }, { "id": 255, "host_id": 24, "hostname": "srv-079", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:31:02" }, { "id": 256, "host_id": 11, "hostname": "srv-715", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 16:38:38" }, { "id": 257, "host_id": 24, "hostname": "srv-079", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 19:54:21" }, { "id": 258, "host_id": 13, "hostname": "srv-380", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 19:32:50" }, { "id": 259, "host_id": 4, "hostname": "srv-295", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 19:36:54" }, { "id": 260, "host_id": 24, "hostname": "srv-079", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:15:03" }, { "id": 261, "host_id": 14, "hostname": "srv-597", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 05:00:40" }, { "id": 262, "host_id": 1, "hostname": "srv-797", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 02:05:41" }, { "id": 263, "host_id": 13, "hostname": "srv-380", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 19:38:53" }, { "id": 264, "host_id": 21, "hostname": "srv-423", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 10:28:32" }, { "id": 265, "host_id": 9, "hostname": "srv-783", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 06:05:54" }, { "id": 266, "host_id": 5, "hostname": "srv-700", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 02:36:09" }, { "id": 267, "host_id": 10, "hostname": "srv-867", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 23:44:34" }, { "id": 268, "host_id": 12, "hostname": "srv-382", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 11:14:58" }, { "id": 269, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 18:59:39" }, { "id": 270, "host_id": 24, "hostname": "srv-079", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 20:33:35" }, { "id": 271, "host_id": 7, "hostname": "srv-550", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 10:29:10" }, { "id": 272, "host_id": 3, "hostname": "srv-192", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 16:53:55" }, { "id": 273, "host_id": 29, "hostname": "srv-296", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 21:24:36" }, { "id": 274, "host_id": 19, "hostname": "srv-935", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 09:30:48" }, { "id": 275, "host_id": 8, "hostname": "srv-711", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 21:32:36" }, { "id": 276, "host_id": 9, "hostname": "srv-783", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 06:25:11" }, { "id": 277, "host_id": 24, "hostname": "srv-079", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 20:54:14" }, { "id": 278, "host_id": 28, "hostname": "srv-630", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 15:45:56" }, { "id": 279, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 20:17:13" }, { "id": 280, "host_id": 23, "hostname": "srv-278", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 09:23:04" }, { "id": 281, "host_id": 1, "hostname": "srv-797", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 02:54:21" }, { "id": 282, "host_id": 10, "hostname": "srv-867", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 00:14:26" }, { "id": 283, "host_id": 12, "hostname": "srv-382", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 11:37:57" }, { "id": 284, "host_id": 20, "hostname": "srv-787", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 19:16:08" }, { "id": 285, "host_id": 21, "hostname": "srv-423", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 11:11:19" }, { "id": 286, "host_id": 5, "hostname": "srv-700", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 03:22:20" }, { "id": 287, "host_id": 1, "hostname": "srv-797", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 03:39:02" }, { "id": 288, "host_id": 6, "hostname": "srv-019", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 03:28:14" }, { "id": 289, "host_id": 15, "hostname": "srv-070", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 02:07:53" }, { "id": 290, "host_id": 26, "hostname": "srv-952", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 19:13:12" }, { "id": 291, "host_id": 20, "hostname": "srv-787", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:34:06" }, { "id": 292, "host_id": 21, "hostname": "srv-423", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 12:07:54" }, { "id": 293, "host_id": 18, "hostname": "srv-172", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 13:40:00" }, { "id": 294, "host_id": 25, "hostname": "srv-396", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 23:05:18" }, { "id": 295, "host_id": 30, "hostname": "srv-493", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 21:09:20" }, { "id": 296, "host_id": 3, "hostname": "srv-192", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 17:00:42" }, { "id": 297, "host_id": 10, "hostname": "srv-867", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 00:31:57" }, { "id": 298, "host_id": 19, "hostname": "srv-935", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 10:01:02" }, { "id": 299, "host_id": 27, "hostname": "srv-671", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 15:19:39" }, { "id": 300, "host_id": 23, "hostname": "srv-278", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 10:12:09" }, { "id": 301, "host_id": 20, "hostname": "srv-787", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 19:47:48" }, { "id": 302, "host_id": 29, "hostname": "srv-296", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 22:05:57" }, { "id": 303, "host_id": 3, "hostname": "srv-192", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 17:53:50" }, { "id": 304, "host_id": 27, "hostname": "srv-671", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 16:13:56" }, { "id": 305, "host_id": 25, "hostname": "srv-396", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 23:41:36" }, { "id": 306, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:12:51" }, { "id": 307, "host_id": 14, "hostname": "srv-597", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 05:36:09" }, { "id": 308, "host_id": 1, "hostname": "srv-797", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 04:08:29" }, { "id": 309, "host_id": 16, "hostname": "srv-939", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 21:42:24" }, { "id": 310, "host_id": 29, "hostname": "srv-296", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 22:15:15" }, { "id": 311, "host_id": 17, "hostname": "srv-801", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 05:14:27" }, { "id": 312, "host_id": 2, "hostname": "srv-831", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 03:05:38" }, { "id": 313, "host_id": 4, "hostname": "srv-295", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:13:04" }, { "id": 314, "host_id": 23, "hostname": "srv-278", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 10:29:05" }, { "id": 315, "host_id": 11, "hostname": "srv-715", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 17:21:38" }, { "id": 316, "host_id": 3, "hostname": "srv-192", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 18:49:03" }, { "id": 317, "host_id": 24, "hostname": "srv-079", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 21:05:08" }, { "id": 318, "host_id": 25, "hostname": "srv-396", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 23:56:13" }, { "id": 319, "host_id": 24, "hostname": "srv-079", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:18:51" }, { "id": 320, "host_id": 23, "hostname": "srv-278", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 11:19:17" }, { "id": 321, "host_id": 24, "hostname": "srv-079", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:33:48" }, { "id": 322, "host_id": 10, "hostname": "srv-867", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 00:43:07" }, { "id": 323, "host_id": 17, "hostname": "srv-801", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 05:59:38" }, { "id": 324, "host_id": 3, "hostname": "srv-192", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 19:00:32" }, { "id": 325, "host_id": 20, "hostname": "srv-787", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 20:42:24" }, { "id": 326, "host_id": 13, "hostname": "srv-380", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 21:08:44" }, { "id": 327, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 21:50:17" }, { "id": 328, "host_id": 18, "hostname": "srv-172", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 14:00:29" }, { "id": 329, "host_id": 25, "hostname": "srv-396", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 00:52:37" }, { "id": 330, "host_id": 24, "hostname": "srv-079", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 22:29:55" }, { "id": 331, "host_id": 23, "hostname": "srv-278", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 12:09:45" }, { "id": 332, "host_id": 10, "hostname": "srv-867", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 01:03:39" }, { "id": 333, "host_id": 28, "hostname": "srv-630", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18 16:24:22" }, { "id": 334, "host_id": 12, "hostname": "srv-382", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 12:11:57" }, { "id": 335, "host_id": 24, "hostname": "srv-079", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 23:28:24" }, { "id": 336, "host_id": 23, "hostname": "srv-278", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 12:37:11" }, { "id": 337, "host_id": 13, "hostname": "srv-380", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 22:09:48" }, { "id": 338, "host_id": 20, "hostname": "srv-787", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:36:43" }, { "id": 339, "host_id": 11, "hostname": "srv-715", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 18:04:18" }, { "id": 340, "host_id": 24, "hostname": "srv-079", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 00:12:05" }, { "id": 341, "host_id": 26, "hostname": "srv-952", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 20:58:37" }, { "id": 342, "host_id": 17, "hostname": "srv-801", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 06:49:03" }, { "id": 343, "host_id": 18, "hostname": "srv-172", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 14:50:01" }, { "id": 344, "host_id": 11, "hostname": "srv-715", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 18:21:29" }, { "id": 345, "host_id": 11, "hostname": "srv-715", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 18:46:06" }, { "id": 346, "host_id": 27, "hostname": "srv-671", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 16:51:45" }, { "id": 347, "host_id": 24, "hostname": "srv-079", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 00:23:17" }, { "id": 348, "host_id": 10, "hostname": "srv-867", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 01:18:42" }, { "id": 349, "host_id": 24, "hostname": "srv-079", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 01:12:50" }, { "id": 350, "host_id": 7, "hostname": "srv-550", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 11:18:09" }, { "id": 351, "host_id": 20, "hostname": "srv-787", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 22:03:47" }, { "id": 352, "host_id": 3, "hostname": "srv-192", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 19:41:06" }, { "id": 353, "host_id": 20, "hostname": "srv-787", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 22:33:24" }, { "id": 354, "host_id": 3, "hostname": "srv-192", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 20:20:56" }, { "id": 355, "host_id": 10, "hostname": "srv-867", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 02:02:31" }, { "id": 356, "host_id": 22, "hostname": "srv-818", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 08:58:40" }, { "id": 357, "host_id": 29, "hostname": "srv-296", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 22:51:25" }, { "id": 358, "host_id": 2, "hostname": "srv-831", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 03:15:08" }, { "id": 359, "host_id": 30, "hostname": "srv-493", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 21:17:42" }, { "id": 360, "host_id": 13, "hostname": "srv-380", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 22:39:13" }, { "id": 361, "host_id": 7, "hostname": "srv-550", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 12:10:21" }, { "id": 362, "host_id": 7, "hostname": "srv-550", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 12:50:58" }, { "id": 363, "host_id": 21, "hostname": "srv-423", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 13:00:08" }, { "id": 364, "host_id": 14, "hostname": "srv-597", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 06:00:44" }, { "id": 365, "host_id": 14, "hostname": "srv-597", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 06:37:38" }, { "id": 366, "host_id": 29, "hostname": "srv-296", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 23:01:40" }, { "id": 367, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 23:36:21" }, { "id": 368, "host_id": 6, "hostname": "srv-019", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 04:11:04" }, { "id": 369, "host_id": 26, "hostname": "srv-952", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 21:38:44" }, { "id": 370, "host_id": 4, "hostname": "srv-295", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 20:48:15" }, { "id": 371, "host_id": 3, "hostname": "srv-192", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 20:46:15" }, { "id": 372, "host_id": 3, "hostname": "srv-192", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 21:07:46" }, { "id": 373, "host_id": 6, "hostname": "srv-019", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 04:57:39" }, { "id": 374, "host_id": 28, "hostname": "srv-630", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 17:23:10" }, { "id": 375, "host_id": 6, "hostname": "srv-019", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 05:45:59" }, { "id": 376, "host_id": 16, "hostname": "srv-939", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 22:19:36" }, { "id": 377, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 06:41:48" }, { "id": 378, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 23:59:40" }, { "id": 379, "host_id": 21, "hostname": "srv-423", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 13:28:22" }, { "id": 380, "host_id": 8, "hostname": "srv-711", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 22:22:32" }, { "id": 381, "host_id": 23, "hostname": "srv-278", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 13:15:51" }, { "id": 382, "host_id": 25, "hostname": "srv-396", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 01:02:00" }, { "id": 383, "host_id": 11, "hostname": "srv-715", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:07:01" }, { "id": 384, "host_id": 3, "hostname": "srv-192", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 21:17:35" }, { "id": 385, "host_id": 24, "hostname": "srv-079", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 01:18:46" }, { "id": 386, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 00:28:55" }, { "id": 387, "host_id": 7, "hostname": "srv-550", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 13:08:51" }, { "id": 388, "host_id": 25, "hostname": "srv-396", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-19 01:37:24" }, { "id": 389, "host_id": 13, "hostname": "srv-380", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 01:24:38" }, { "id": 390, "host_id": 7, "hostname": "srv-550", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-18 13:26:32" }, { "id": 391, "host_id": 1, "hostname": "srv-797", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 04:16:13" }, { "id": 392, "host_id": 30, "hostname": "srv-493", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 21:36:44" }, { "id": 393, "host_id": 22, "hostname": "srv-818", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 09:49:04" }, { "id": 394, "host_id": 7, "hostname": "srv-550", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 14:19:08" }, { "id": 395, "host_id": 19, "hostname": "srv-935", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 10:44:24" }, { "id": 396, "host_id": 14, "hostname": "srv-597", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 06:43:02" }, { "id": 397, "host_id": 12, "hostname": "srv-382", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 12:53:36" }, { "id": 398, "host_id": 17, "hostname": "srv-801", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 07:33:43" }, { "id": 399, "host_id": 3, "hostname": "srv-192", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 21:52:27" }, { "id": 400, "host_id": 14, "hostname": "srv-597", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 07:25:10" }, { "id": 401, "host_id": 1, "hostname": "srv-797", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 05:08:56" }, { "id": 402, "host_id": 29, "hostname": "srv-296", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 23:24:17" }, { "id": 403, "host_id": 20, "hostname": "srv-787", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 23:04:19" }, { "id": 404, "host_id": 12, "hostname": "srv-382", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 13:40:14" }, { "id": 405, "host_id": 25, "hostname": "srv-396", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 01:50:38" }, { "id": 406, "host_id": 6, "hostname": "srv-019", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 07:33:08" }, { "id": 407, "host_id": 13, "hostname": "srv-380", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 01:37:25" }, { "id": 408, "host_id": 1, "hostname": "srv-797", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 05:16:15" }, { "id": 409, "host_id": 7, "hostname": "srv-550", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 15:07:17" }, { "id": 410, "host_id": 7, "hostname": "srv-550", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 15:38:34" }, { "id": 411, "host_id": 2, "hostname": "srv-831", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 04:08:41" }, { "id": 412, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 08:10:23" }, { "id": 413, "host_id": 21, "hostname": "srv-423", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 14:14:28" }, { "id": 414, "host_id": 10, "hostname": "srv-867", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 03:00:28" }, { "id": 415, "host_id": 5, "hostname": "srv-700", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 04:01:10" }, { "id": 416, "host_id": 1, "hostname": "srv-797", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 05:23:31" }, { "id": 417, "host_id": 6, "hostname": "srv-019", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 09:03:12" }, { "id": 418, "host_id": 27, "hostname": "srv-671", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 17:28:45" }, { "id": 419, "host_id": 22, "hostname": "srv-818", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 10:19:06" }, { "id": 420, "host_id": 21, "hostname": "srv-423", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 14:19:45" }, { "id": 421, "host_id": 14, "hostname": "srv-597", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 08:17:37" }, { "id": 422, "host_id": 27, "hostname": "srv-671", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 17:46:44" }, { "id": 423, "host_id": 20, "hostname": "srv-787", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 00:01:35" }, { "id": 424, "host_id": 3, "hostname": "srv-192", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 22:19:52" }, { "id": 425, "host_id": 9, "hostname": "srv-783", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 06:43:54" }, { "id": 426, "host_id": 25, "hostname": "srv-396", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 02:39:50" }, { "id": 427, "host_id": 13, "hostname": "srv-380", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 01:54:46" }, { "id": 428, "host_id": 8, "hostname": "srv-711", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 22:40:33" }, { "id": 429, "host_id": 7, "hostname": "srv-550", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 15:46:26" }, { "id": 430, "host_id": 23, "hostname": "srv-278", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 13:33:39" }, { "id": 431, "host_id": 14, "hostname": "srv-597", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 09:16:31" }, { "id": 432, "host_id": 4, "hostname": "srv-295", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 21:44:58" }, { "id": 433, "host_id": 18, "hostname": "srv-172", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 15:36:26" }, { "id": 434, "host_id": 25, "hostname": "srv-396", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 02:48:35" }, { "id": 435, "host_id": 27, "hostname": "srv-671", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 18:40:43" }, { "id": 436, "host_id": 13, "hostname": "srv-380", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 02:38:24" }, { "id": 437, "host_id": 1, "hostname": "srv-797", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 05:29:48" }, { "id": 438, "host_id": 11, "hostname": "srv-715", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 19:33:24" }, { "id": 439, "host_id": 8, "hostname": "srv-711", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 22:59:58" }, { "id": 440, "host_id": 24, "hostname": "srv-079", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 02:10:49" }, { "id": 441, "host_id": 2, "hostname": "srv-831", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 05:04:35" }, { "id": 442, "host_id": 8, "hostname": "srv-711", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 23:53:42" }, { "id": 443, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 09:50:13" }, { "id": 444, "host_id": 26, "hostname": "srv-952", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 22:27:03" }, { "id": 445, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 20:22:33" }, { "id": 446, "host_id": 22, "hostname": "srv-818", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 10:56:28" }, { "id": 447, "host_id": 8, "hostname": "srv-711", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-19 00:28:45" }, { "id": 448, "host_id": 7, "hostname": "srv-550", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 16:25:45" }, { "id": 449, "host_id": 10, "hostname": "srv-867", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 03:24:04" }, { "id": 450, "host_id": 15, "hostname": "srv-070", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 02:15:00" }, { "id": 451, "host_id": 13, "hostname": "srv-380", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 03:19:27" }, { "id": 452, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 03:40:19" }, { "id": 453, "host_id": 15, "hostname": "srv-070", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 02:22:53" }, { "id": 454, "host_id": 22, "hostname": "srv-818", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 11:03:48" }, { "id": 455, "host_id": 24, "hostname": "srv-079", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 02:26:06" }, { "id": 456, "host_id": 28, "hostname": "srv-630", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 17:35:00" }, { "id": 457, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 20:35:46" }, { "id": 458, "host_id": 25, "hostname": "srv-396", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 03:04:47" }, { "id": 459, "host_id": 21, "hostname": "srv-423", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 15:03:02" }, { "id": 460, "host_id": 7, "hostname": "srv-550", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 16:44:56" }, { "id": 461, "host_id": 10, "hostname": "srv-867", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 03:33:25" }, { "id": 462, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 03:56:19" }, { "id": 463, "host_id": 19, "hostname": "srv-935", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 11:12:16" }, { "id": 464, "host_id": 25, "hostname": "srv-396", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 03:44:28" }, { "id": 465, "host_id": 16, "hostname": "srv-939", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 23:07:48" }, { "id": 466, "host_id": 9, "hostname": "srv-783", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 07:18:28" }, { "id": 467, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 23:14:46" }, { "id": 468, "host_id": 14, "hostname": "srv-597", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 09:30:54" }, { "id": 469, "host_id": 16, "hostname": "srv-939", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-18 23:42:20" }, { "id": 470, "host_id": 7, "hostname": "srv-550", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 17:43:08" }, { "id": 471, "host_id": 28, "hostname": "srv-630", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 17:57:25" }, { "id": 472, "host_id": 25, "hostname": "srv-396", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 04:44:11" }, { "id": 473, "host_id": 24, "hostname": "srv-079", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 02:53:53" }, { "id": 474, "host_id": 12, "hostname": "srv-382", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 14:39:06" }, { "id": 475, "host_id": 25, "hostname": "srv-396", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 05:37:35" }, { "id": 476, "host_id": 6, "hostname": "srv-019", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 10:41:49" }, { "id": 477, "host_id": 30, "hostname": "srv-493", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 21:59:02" }, { "id": 478, "host_id": 1, "hostname": "srv-797", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 05:54:18" }, { "id": 479, "host_id": 11, "hostname": "srv-715", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18 20:47:08" }, { "id": 480, "host_id": 22, "hostname": "srv-818", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 11:10:37" }, { "id": 481, "host_id": 21, "hostname": "srv-423", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 15:53:46" }, { "id": 482, "host_id": 15, "hostname": "srv-070", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 02:49:26" }, { "id": 483, "host_id": 20, "hostname": "srv-787", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 00:24:30" }, { "id": 484, "host_id": 1, "hostname": "srv-797", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 06:33:36" }, { "id": 485, "host_id": 11, "hostname": "srv-715", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 21:22:14" }, { "id": 486, "host_id": 5, "hostname": "srv-700", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 04:47:23" }, { "id": 487, "host_id": 2, "hostname": "srv-831", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 05:37:35" }, { "id": 488, "host_id": 25, "hostname": "srv-396", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 06:02:43" }, { "id": 489, "host_id": 16, "hostname": "srv-939", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 00:16:19" }, { "id": 490, "host_id": 6, "hostname": "srv-019", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 10:59:12" }, { "id": 491, "host_id": 21, "hostname": "srv-423", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 16:22:50" }, { "id": 492, "host_id": 21, "hostname": "srv-423", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-18 16:32:42" }, { "id": 493, "host_id": 21, "hostname": "srv-423", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 17:29:30" }, { "id": 494, "host_id": 23, "hostname": "srv-278", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 13:55:03" }, { "id": 495, "host_id": 12, "hostname": "srv-382", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 14:49:27" }, { "id": 496, "host_id": 21, "hostname": "srv-423", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 18:01:21" }, { "id": 497, "host_id": 10, "hostname": "srv-867", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 03:47:27" }, { "id": 498, "host_id": 24, "hostname": "srv-079", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 03:40:07" }, { "id": 499, "host_id": 1, "hostname": "srv-797", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 06:42:19" }, { "id": 500, "host_id": 25, "hostname": "srv-396", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 06:31:11" }, { "id": 501, "host_id": 28, "hostname": "srv-630", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 18:31:06" }, { "id": 502, "host_id": 16, "hostname": "srv-939", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 00:48:59" }, { "id": 503, "host_id": 19, "hostname": "srv-935", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 11:30:43" }, { "id": 504, "host_id": 4, "hostname": "srv-295", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 22:16:28" }, { "id": 505, "host_id": 18, "hostname": "srv-172", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 16:15:06" }, { "id": 506, "host_id": 2, "hostname": "srv-831", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 06:05:28" }, { "id": 507, "host_id": 3, "hostname": "srv-192", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 23:13:56" }, { "id": 508, "host_id": 24, "hostname": "srv-079", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 04:22:56" }, { "id": 509, "host_id": 5, "hostname": "srv-700", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 05:21:59" }, { "id": 510, "host_id": 25, "hostname": "srv-396", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 06:51:03" }, { "id": 511, "host_id": 11, "hostname": "srv-715", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 21:41:03" }, { "id": 512, "host_id": 21, "hostname": "srv-423", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 18:39:46" }, { "id": 513, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 22:08:36" }, { "id": 514, "host_id": 3, "hostname": "srv-192", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 00:00:23" }, { "id": 515, "host_id": 6, "hostname": "srv-019", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 11:12:49" }, { "id": 516, "host_id": 23, "hostname": "srv-278", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 14:14:35" }, { "id": 517, "host_id": 25, "hostname": "srv-396", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 06:56:10" }, { "id": 518, "host_id": 12, "hostname": "srv-382", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 15:32:10" }, { "id": 519, "host_id": 15, "hostname": "srv-070", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 03:38:01" }, { "id": 520, "host_id": 17, "hostname": "srv-801", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 07:49:11" }, { "id": 521, "host_id": 14, "hostname": "srv-597", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 09:59:42" }, { "id": 522, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 04:24:39" }, { "id": 523, "host_id": 12, "hostname": "srv-382", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 15:49:23" }, { "id": 524, "host_id": 22, "hostname": "srv-818", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 11:34:46" }, { "id": 525, "host_id": 22, "hostname": "srv-818", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 12:13:43" }, { "id": 526, "host_id": 26, "hostname": "srv-952", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 23:38:10" }, { "id": 527, "host_id": 28, "hostname": "srv-630", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-18 18:43:51" }, { "id": 528, "host_id": 29, "hostname": "srv-296", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 00:22:56" }, { "id": 529, "host_id": 7, "hostname": "srv-550", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 18:05:03" }, { "id": 530, "host_id": 20, "hostname": "srv-787", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 01:16:51" }, { "id": 531, "host_id": 3, "hostname": "srv-192", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 00:18:44" }, { "id": 532, "host_id": 19, "hostname": "srv-935", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 12:00:13" }, { "id": 533, "host_id": 8, "hostname": "srv-711", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 01:28:14" }, { "id": 534, "host_id": 5, "hostname": "srv-700", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 06:18:23" }, { "id": 535, "host_id": 22, "hostname": "srv-818", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 12:30:35" }, { "id": 536, "host_id": 11, "hostname": "srv-715", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 22:51:10" }, { "id": 537, "host_id": 12, "hostname": "srv-382", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 16:41:45" }, { "id": 538, "host_id": 17, "hostname": "srv-801", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 08:16:42" }, { "id": 539, "host_id": 27, "hostname": "srv-671", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 19:09:50" }, { "id": 540, "host_id": 26, "hostname": "srv-952", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 00:25:26" }, { "id": 541, "host_id": 26, "hostname": "srv-952", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 01:00:00" }, { "id": 542, "host_id": 10, "hostname": "srv-867", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 04:22:33" }, { "id": 543, "host_id": 6, "hostname": "srv-019", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 11:40:40" }, { "id": 544, "host_id": 10, "hostname": "srv-867", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 04:57:18" }, { "id": 545, "host_id": 18, "hostname": "srv-172", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 16:32:34" }, { "id": 546, "host_id": 3, "hostname": "srv-192", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 00:49:22" }, { "id": 547, "host_id": 4, "hostname": "srv-295", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 22:36:11" }, { "id": 548, "host_id": 23, "hostname": "srv-278", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 14:36:50" }, { "id": 549, "host_id": 25, "hostname": "srv-396", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 07:16:47" }, { "id": 550, "host_id": 3, "hostname": "srv-192", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 01:23:57" }, { "id": 551, "host_id": 24, "hostname": "srv-079", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 05:09:02" }, { "id": 552, "host_id": 12, "hostname": "srv-382", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 17:18:43" }, { "id": 553, "host_id": 3, "hostname": "srv-192", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 02:23:42" }, { "id": 554, "host_id": 13, "hostname": "srv-380", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 05:07:15" }, { "id": 555, "host_id": 14, "hostname": "srv-597", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 10:56:55" }, { "id": 556, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 01:34:34" }, { "id": 557, "host_id": 25, "hostname": "srv-396", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 07:38:24" }, { "id": 558, "host_id": 20, "hostname": "srv-787", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 01:43:10" }, { "id": 559, "host_id": 10, "hostname": "srv-867", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 05:49:16" }, { "id": 560, "host_id": 15, "hostname": "srv-070", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 04:27:21" }, { "id": 561, "host_id": 12, "hostname": "srv-382", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 17:52:24" }, { "id": 562, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 05:18:24" }, { "id": 563, "host_id": 9, "hostname": "srv-783", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 08:01:27" }, { "id": 564, "host_id": 12, "hostname": "srv-382", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 18:20:29" }, { "id": 565, "host_id": 23, "hostname": "srv-278", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 14:48:33" }, { "id": 566, "host_id": 24, "hostname": "srv-079", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 05:23:53" }, { "id": 567, "host_id": 19, "hostname": "srv-935", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 12:59:56" }, { "id": 568, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 02:16:08" }, { "id": 569, "host_id": 25, "hostname": "srv-396", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 08:32:01" }, { "id": 570, "host_id": 10, "hostname": "srv-867", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 06:28:10" }, { "id": 571, "host_id": 28, "hostname": "srv-630", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 18:55:29" }, { "id": 572, "host_id": 6, "hostname": "srv-019", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 12:23:22" }, { "id": 573, "host_id": 9, "hostname": "srv-783", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 08:21:21" }, { "id": 574, "host_id": 16, "hostname": "srv-939", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 01:41:28" }, { "id": 575, "host_id": 26, "hostname": "srv-952", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 02:40:47" }, { "id": 576, "host_id": 23, "hostname": "srv-278", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-18 15:36:04" }, { "id": 577, "host_id": 1, "hostname": "srv-797", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 07:08:32" }, { "id": 578, "host_id": 17, "hostname": "srv-801", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 09:01:41" }, { "id": 579, "host_id": 2, "hostname": "srv-831", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 06:31:48" }, { "id": 580, "host_id": 12, "hostname": "srv-382", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-18 18:34:40" }, { "id": 581, "host_id": 17, "hostname": "srv-801", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 09:38:02" }, { "id": 582, "host_id": 3, "hostname": "srv-192", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 03:23:07" }, { "id": 583, "host_id": 4, "hostname": "srv-295", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 22:48:33" }, { "id": 584, "host_id": 25, "hostname": "srv-396", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 08:44:55" }, { "id": 585, "host_id": 3, "hostname": "srv-192", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 04:06:20" }, { "id": 586, "host_id": 22, "hostname": "srv-818", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 12:55:13" }, { "id": 587, "host_id": 15, "hostname": "srv-070", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 05:11:07" }, { "id": 588, "host_id": 2, "hostname": "srv-831", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 06:57:41" }, { "id": 589, "host_id": 15, "hostname": "srv-070", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 05:59:15" }, { "id": 590, "host_id": 3, "hostname": "srv-192", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 04:50:25" }, { "id": 591, "host_id": 2, "hostname": "srv-831", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 07:23:51" }, { "id": 592, "host_id": 26, "hostname": "srv-952", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 03:06:56" }, { "id": 593, "host_id": 14, "hostname": "srv-597", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 11:16:32" }, { "id": 594, "host_id": 30, "hostname": "srv-493", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 22:57:28" }, { "id": 595, "host_id": 2, "hostname": "srv-831", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 08:14:29" }, { "id": 596, "host_id": 20, "hostname": "srv-787", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 02:34:42" }, { "id": 597, "host_id": 8, "hostname": "srv-711", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 01:40:31" }, { "id": 598, "host_id": 2, "hostname": "srv-831", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 08:19:35" }, { "id": 599, "host_id": 2, "hostname": "srv-831", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-19 08:55:44" }, { "id": 600, "host_id": 15, "hostname": "srv-070", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 06:34:45" }, { "id": 601, "host_id": 26, "hostname": "srv-952", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 03:26:36" }, { "id": 602, "host_id": 6, "hostname": "srv-019", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 12:50:44" }, { "id": 603, "host_id": 7, "hostname": "srv-550", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 18:22:39" }, { "id": 604, "host_id": 23, "hostname": "srv-278", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 15:47:12" }, { "id": 605, "host_id": 26, "hostname": "srv-952", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 03:57:28" }, { "id": 606, "host_id": 24, "hostname": "srv-079", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 05:46:27" }, { "id": 607, "host_id": 16, "hostname": "srv-939", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 02:23:29" }, { "id": 608, "host_id": 17, "hostname": "srv-801", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 10:03:01" }, { "id": 609, "host_id": 15, "hostname": "srv-070", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 07:17:51" }, { "id": 610, "host_id": 28, "hostname": "srv-630", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:21:05" }, { "id": 611, "host_id": 22, "hostname": "srv-818", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 13:45:24" }, { "id": 612, "host_id": 19, "hostname": "srv-935", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 13:48:07" }, { "id": 613, "host_id": 15, "hostname": "srv-070", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-19 07:24:43" }, { "id": 614, "host_id": 25, "hostname": "srv-396", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 08:51:18" }, { "id": 615, "host_id": 28, "hostname": "srv-630", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 20:12:24" }, { "id": 616, "host_id": 1, "hostname": "srv-797", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 08:01:18" }, { "id": 617, "host_id": 10, "hostname": "srv-867", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 06:48:42" }, { "id": 618, "host_id": 8, "hostname": "srv-711", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 02:32:52" }, { "id": 619, "host_id": 13, "hostname": "srv-380", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 05:39:07" }, { "id": 620, "host_id": 26, "hostname": "srv-952", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 04:14:09" }, { "id": 621, "host_id": 14, "hostname": "srv-597", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 12:03:19" }, { "id": 622, "host_id": 23, "hostname": "srv-278", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 16:10:04" }, { "id": 623, "host_id": 14, "hostname": "srv-597", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 12:50:27" }, { "id": 624, "host_id": 4, "hostname": "srv-295", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 23:42:22" }, { "id": 625, "host_id": 28, "hostname": "srv-630", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 21:03:53" }, { "id": 626, "host_id": 26, "hostname": "srv-952", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 04:56:07" }, { "id": 627, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 13:29:28" }, { "id": 628, "host_id": 24, "hostname": "srv-079", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 06:19:40" }, { "id": 629, "host_id": 12, "hostname": "srv-382", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 19:19:27" }, { "id": 630, "host_id": 7, "hostname": "srv-550", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 19:00:35" }, { "id": 631, "host_id": 12, "hostname": "srv-382", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 19:56:32" }, { "id": 632, "host_id": 28, "hostname": "srv-630", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 21:08:53" }, { "id": 633, "host_id": 15, "hostname": "srv-070", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 08:00:43" }, { "id": 634, "host_id": 23, "hostname": "srv-278", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 16:26:20" }, { "id": 635, "host_id": 14, "hostname": "srv-597", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 13:10:52" }, { "id": 636, "host_id": 8, "hostname": "srv-711", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 03:23:53" }, { "id": 637, "host_id": 14, "hostname": "srv-597", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 13:27:14" }, { "id": 638, "host_id": 13, "hostname": "srv-380", "template_id": 7, "program": "kernel", "facility": "kern", "severity": "notice", "message_text": "EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro", "logged_at": "2025-08-19 06:28:37" }, { "id": 639, "host_id": 26, "hostname": "srv-952", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 05:05:22" }, { "id": 640, "host_id": 24, "hostname": "srv-079", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 06:52:38" }, { "id": 641, "host_id": 26, "hostname": "srv-952", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 05:58:43" }, { "id": 642, "host_id": 8, "hostname": "srv-711", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 04:08:15" }, { "id": 643, "host_id": 27, "hostname": "srv-671", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 19:15:19" }, { "id": 644, "host_id": 8, "hostname": "srv-711", "template_id": 9, "program": "rsyslogd", "facility": "syslog", "severity": "info", "message_text": "rsyslogd was HUPed", "logged_at": "2025-08-19 05:01:41" }, { "id": 645, "host_id": 27, "hostname": "srv-671", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 19:26:01" }, { "id": 646, "host_id": 11, "hostname": "srv-715", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-18 23:44:09" }, { "id": 647, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 00:15:33" }, { "id": 648, "host_id": 25, "hostname": "srv-396", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 08:57:00" }, { "id": 649, "host_id": 23, "hostname": "srv-278", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 16:42:17" }, { "id": 650, "host_id": 6, "hostname": "srv-019", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 13:59:19" }, { "id": 651, "host_id": 15, "hostname": "srv-070", "template_id": 4, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "pam_unix(sshd:session): session closed for user ", "logged_at": "2025-08-19 08:52:13" }, { "id": 652, "host_id": 6, "hostname": "srv-019", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 14:37:32" }, { "id": 653, "host_id": 5, "hostname": "srv-700", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 07:11:41" }, { "id": 654, "host_id": 29, "hostname": "srv-296", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 00:44:21" }, { "id": 655, "host_id": 24, "hostname": "srv-079", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 07:19:53" }, { "id": 656, "host_id": 28, "hostname": "srv-630", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 22:00:33" }, { "id": 657, "host_id": 17, "hostname": "srv-801", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 10:36:23" }, { "id": 658, "host_id": 11, "hostname": "srv-715", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 00:35:16" }, { "id": 659, "host_id": 15, "hostname": "srv-070", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 09:33:03" }, { "id": 660, "host_id": 22, "hostname": "srv-818", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 14:26:40" }, { "id": 661, "host_id": 28, "hostname": "srv-630", "template_id": 8, "program": "dhclient", "facility": "daemon", "severity": "info", "message_text": "DHCPACK of from ", "logged_at": "2025-08-18 22:47:13" }, { "id": 662, "host_id": 6, "hostname": "srv-019", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 15:01:46" }, { "id": 663, "host_id": 26, "hostname": "srv-952", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 06:58:06" }, { "id": 664, "host_id": 5, "hostname": "srv-700", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 07:52:39" }, { "id": 665, "host_id": 17, "hostname": "srv-801", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 11:01:31" }, { "id": 666, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 15:29:20" }, { "id": 667, "host_id": 20, "hostname": "srv-787", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 03:02:19" }, { "id": 668, "host_id": 29, "hostname": "srv-296", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 01:38:36" }, { "id": 669, "host_id": 12, "hostname": "srv-382", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-18 20:19:58" }, { "id": 670, "host_id": 11, "hostname": "srv-715", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 01:29:40" }, { "id": 671, "host_id": 26, "hostname": "srv-952", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 07:11:46" }, { "id": 672, "host_id": 25, "hostname": "srv-396", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 09:22:48" }, { "id": 673, "host_id": 18, "hostname": "srv-172", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-18 17:32:05" }, { "id": 674, "host_id": 1, "hostname": "srv-797", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 08:22:17" }, { "id": 675, "host_id": 11, "hostname": "srv-715", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 01:59:05" }, { "id": 676, "host_id": 11, "hostname": "srv-715", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 02:08:22" }, { "id": 677, "host_id": 26, "hostname": "srv-952", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-19 07:34:33" }, { "id": 678, "host_id": 20, "hostname": "srv-787", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 03:34:30" }, { "id": 679, "host_id": 10, "hostname": "srv-867", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 07:17:08" }, { "id": 680, "host_id": 20, "hostname": "srv-787", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 04:12:54" }, { "id": 681, "host_id": 11, "hostname": "srv-715", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 02:56:34" }, { "id": 682, "host_id": 16, "hostname": "srv-939", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-19 03:09:16" }, { "id": 683, "host_id": 14, "hostname": "srv-597", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 14:21:09" }, { "id": 684, "host_id": 29, "hostname": "srv-296", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 01:49:11" }, { "id": 685, "host_id": 8, "hostname": "srv-711", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 05:22:45" }, { "id": 686, "host_id": 6, "hostname": "srv-019", "template_id": 10, "program": "chronyd", "facility": "daemon", "severity": "info", "message_text": "Selected source (pool.example.net)", "logged_at": "2025-08-19 15:39:23" }, { "id": 687, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 16:23:11" }, { "id": 688, "host_id": 6, "hostname": "srv-019", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 16:46:37" }, { "id": 689, "host_id": 12, "hostname": "srv-382", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 20:29:31" }, { "id": 690, "host_id": 6, "hostname": "srv-019", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 17:18:52" }, { "id": 691, "host_id": 23, "hostname": "srv-278", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 17:34:42" }, { "id": 692, "host_id": 13, "hostname": "srv-380", "template_id": 3, "program": "sshd", "facility": "auth", "severity": "info", "message_text": "Accepted publickey for from port ssh2", "logged_at": "2025-08-19 07:01:52" }, { "id": 693, "host_id": 8, "hostname": "srv-711", "template_id": 13, "program": "sudo", "facility": "authpriv", "severity": "notice", "message_text": " : TTY=pts/0 ; USER=root ; COMMAND=/usr/bin/uptime", "logged_at": "2025-08-19 05:31:01" }, { "id": 694, "host_id": 14, "hostname": "srv-597", "template_id": 12, "program": "systemd-logind", "facility": "authpriv", "severity": "info", "message_text": "New session of user .", "logged_at": "2025-08-18 15:09:12" }, { "id": 695, "host_id": 16, "hostname": "srv-939", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-19 03:18:55" }, { "id": 696, "host_id": 13, "hostname": "srv-380", "template_id": 14, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "() CMD (/usr/local/bin/backup-check)", "logged_at": "2025-08-19 08:00:28" }, { "id": 697, "host_id": 15, "hostname": "srv-070", "template_id": 2, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Starting Daily apt download activities...", "logged_at": "2025-08-19 10:27:33" }, { "id": 698, "host_id": 27, "hostname": "srv-671", "template_id": 5, "program": "CRON", "facility": "cron", "severity": "info", "message_text": "(root) CMD (cd / && run-parts --report /etc/cron.hourly)", "logged_at": "2025-08-18 19:52:44" }, { "id": 699, "host_id": 18, "hostname": "srv-172", "template_id": 11, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "logrotate.service: Deactivated successfully.", "logged_at": "2025-08-18 18:23:20" }, { "id": 700, "host_id": 21, "hostname": "srv-423", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-18 19:17:49" }, { "id": 701, "host_id": 16, "hostname": "srv-939", "template_id": 6, "program": "kernel", "facility": "kern", "severity": "info", "message_text": "eth0: Link is Up - 1Gbps/Full - flow control off", "logged_at": "2025-08-19 03:55:30" }, { "id": 702, "host_id": 16, "hostname": "srv-939", "template_id": 1, "program": "systemd", "facility": "daemon", "severity": "info", "message_text": "Started Session of User .", "logged_at": "2025-08-19 04:23:48" } ] }