Jul  8 12:12:38 ip-172-16-3-10 polkitd[828]: Loading rules from directory /etc/polkit-1/rules.d
Jul  8 12:12:38 ip-172-16-3-10 polkitd[828]: Loading rules from directory /usr/share/polkit-1/rules.d
Jul  8 12:12:38 ip-172-16-3-10 polkitd[828]: Finished loading, compiling and executing 4 rules
Jul  8 12:12:38 ip-172-16-3-10 polkitd[828]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Jul  8 12:12:39 ip-172-16-3-10 useradd[914]: new group: name=rocky, GID=1000
Jul  8 12:12:39 ip-172-16-3-10 useradd[914]: new user: name=rocky, UID=1000, GID=1000, home=/home/rocky, shell=/bin/bash
Jul  8 12:12:39 ip-172-16-3-10 useradd[914]: add 'rocky' to group 'adm'
Jul  8 12:12:39 ip-172-16-3-10 useradd[914]: add 'rocky' to group 'systemd-journal'
Jul  8 12:12:39 ip-172-16-3-10 useradd[914]: add 'rocky' to shadow group 'adm'
Jul  8 12:12:39 ip-172-16-3-10 useradd[914]: add 'rocky' to shadow group 'systemd-journal'
Jul  8 12:12:40 ip-172-16-3-10 sshd[929]: Server listening on 0.0.0.0 port 22.
Jul  8 12:12:40 ip-172-16-3-10 sshd[929]: Server listening on :: port 22.
Jul  8 12:12:48 ip-172-16-3-10 sshd[3183]: Accepted publickey for rocky from 172.16.0.143 port 51324 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Jul  8 12:12:48 ip-172-16-3-10 systemd[3274]: pam_unix(systemd-user:session): session opened for user rocky by (uid=0)
Jul  8 12:12:48 ip-172-16-3-10 sshd[3183]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Jul  8 12:12:49 ip-172-16-3-10 sshd[3704]: Accepted publickey for rocky from 172.16.0.143 port 51334 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Jul  8 12:12:49 ip-172-16-3-10 sshd[3704]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Jul  8 12:12:50 ip-172-16-3-10 sshd[3819]: Accepted publickey for rocky from 172.16.0.143 port 51344 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Jul  8 12:12:50 ip-172-16-3-10 sshd[3819]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Jul  8 12:12:50 ip-172-16-3-10 sudo[4024]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/bash /tmp/salt/wait_for_salt.sh
Jul  8 12:12:50 ip-172-16-3-10 sudo[4024]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Jul  8 12:14:19 ip-172-16-3-10 sudo[4024]: pam_unix(sudo:session): session closed for user root
Jul  8 12:14:19 ip-172-16-3-10 sshd[4995]: Accepted publickey for rocky from 172.16.0.143 port 38904 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Jul  8 12:14:19 ip-172-16-3-10 sshd[4995]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Jul  8 12:14:19 ip-172-16-3-10 sudo[5071]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/rm -rf /root/salt
Jul  8 12:14:19 ip-172-16-3-10 sudo[5071]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Jul  8 12:14:19 ip-172-16-3-10 sudo[5071]: pam_unix(sudo:session): session closed for user root
Jul  8 12:14:19 ip-172-16-3-10 sudo[5074]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/mv /tmp/salt /root
Jul  8 12:14:19 ip-172-16-3-10 sudo[5074]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Jul  8 12:14:19 ip-172-16-3-10 sudo[5074]: pam_unix(sudo:session): session closed for user root
Jul  8 12:14:19 ip-172-16-3-10 sudo[5077]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/bash /root/salt/first_deployment_highstate.sh
Jul  8 12:14:19 ip-172-16-3-10 sudo[5077]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Jul  8 12:16:28 ip-172-16-3-10 sudo[5077]: pam_unix(sudo:session): session closed for user root
Jul  8 12:32:25 ip-172-16-3-10 sshd[3183]: pam_unix(sshd:session): session closed for user rocky
Jul  8 12:32:25 ip-172-16-3-10 sshd[3819]: pam_unix(sshd:session): session closed for user rocky
Jul  8 12:32:25 ip-172-16-3-10 sshd[4995]: pam_unix(sshd:session): session closed for user rocky
Jul  8 12:32:25 ip-172-16-3-10 sshd[3704]: pam_unix(sshd:session): session closed for user rocky
Jul  8 12:32:35 ip-172-16-3-10 systemd[3287]: pam_unix(systemd-user:session): session closed for user rocky
Jul  8 12:33:17 ip-172-16-3-10 sshd[5641]: Accepted publickey for root from 172.16.3.5 port 51470 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:17 ip-172-16-3-10 systemd[5646]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jul  8 12:33:17 ip-172-16-3-10 sshd[5641]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:17 ip-172-16-3-10 sshd[5641]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:17 ip-172-16-3-10 sshd[5673]: Accepted publickey for root from 172.16.3.5 port 51480 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:17 ip-172-16-3-10 sshd[5673]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:18 ip-172-16-3-10 sshd[5673]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:18 ip-172-16-3-10 sshd[5694]: Accepted publickey for root from 172.16.3.5 port 51492 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:18 ip-172-16-3-10 sshd[5694]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:18 ip-172-16-3-10 sshd[5694]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:18 ip-172-16-3-10 sshd[5715]: Accepted publickey for root from 172.16.3.5 port 51504 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:18 ip-172-16-3-10 sshd[5715]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:18 ip-172-16-3-10 sshd[5715]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:18 ip-172-16-3-10 sshd[5736]: Accepted publickey for root from 172.16.3.5 port 51518 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:18 ip-172-16-3-10 sshd[5736]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:18 ip-172-16-3-10 sshd[5736]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:18 ip-172-16-3-10 sshd[5757]: Accepted publickey for root from 172.16.3.5 port 51530 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:18 ip-172-16-3-10 sshd[5757]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:18 ip-172-16-3-10 sshd[5757]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:18 ip-172-16-3-10 sshd[5778]: Accepted publickey for root from 172.16.3.5 port 51540 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:18 ip-172-16-3-10 sshd[5778]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:19 ip-172-16-3-10 sshd[5778]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:19 ip-172-16-3-10 sshd[5799]: Accepted publickey for root from 172.16.3.5 port 51544 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:19 ip-172-16-3-10 sshd[5799]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:19 ip-172-16-3-10 sshd[5799]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:19 ip-172-16-3-10 sshd[5824]: Accepted publickey for root from 172.16.3.5 port 51546 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:19 ip-172-16-3-10 sshd[5824]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:19 ip-172-16-3-10 sshd[5824]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:19 ip-172-16-3-10 sshd[5847]: Accepted publickey for root from 172.16.3.5 port 51550 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:19 ip-172-16-3-10 sshd[5847]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:19 ip-172-16-3-10 sshd[5847]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:19 ip-172-16-3-10 sshd[5871]: Accepted publickey for root from 172.16.3.5 port 51558 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:19 ip-172-16-3-10 sshd[5871]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:19 ip-172-16-3-10 sshd[5871]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:19 ip-172-16-3-10 sshd[5895]: Accepted publickey for root from 172.16.3.5 port 51560 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:19 ip-172-16-3-10 sshd[5895]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:20 ip-172-16-3-10 sshd[5895]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:20 ip-172-16-3-10 sshd[5917]: Accepted publickey for root from 172.16.3.5 port 51568 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 12:33:20 ip-172-16-3-10 sshd[5917]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 12:33:20 ip-172-16-3-10 sshd[5917]: pam_unix(sshd:session): session closed for user root
Jul  8 12:33:30 ip-172-16-3-10 systemd[5649]: pam_unix(systemd-user:session): session closed for user root
Jul  8 15:59:15 ip-172-16-3-10 sshd[6032]: Accepted publickey for root from 172.16.3.5 port 35836 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:15 ip-172-16-3-10 systemd[6037]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jul  8 15:59:15 ip-172-16-3-10 sshd[6032]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:15 ip-172-16-3-10 sshd[6032]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:15 ip-172-16-3-10 sshd[6066]: Accepted publickey for root from 172.16.3.5 port 35840 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:15 ip-172-16-3-10 sshd[6066]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:15 ip-172-16-3-10 sshd[6066]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:15 ip-172-16-3-10 sshd[6088]: Accepted publickey for root from 172.16.3.5 port 35844 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:15 ip-172-16-3-10 sshd[6088]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:15 ip-172-16-3-10 sshd[6088]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:15 ip-172-16-3-10 sshd[6109]: Accepted publickey for root from 172.16.3.5 port 35858 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:15 ip-172-16-3-10 sshd[6109]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:16 ip-172-16-3-10 sshd[6109]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:16 ip-172-16-3-10 sshd[6131]: Accepted publickey for root from 172.16.3.5 port 35866 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:16 ip-172-16-3-10 sshd[6131]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:16 ip-172-16-3-10 sshd[6131]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:16 ip-172-16-3-10 sshd[6152]: Accepted publickey for root from 172.16.3.5 port 35868 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:16 ip-172-16-3-10 sshd[6152]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:16 ip-172-16-3-10 sshd[6152]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:16 ip-172-16-3-10 sshd[6173]: Accepted publickey for root from 172.16.3.5 port 35878 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:16 ip-172-16-3-10 sshd[6173]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:16 ip-172-16-3-10 sshd[6173]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:16 ip-172-16-3-10 sshd[6194]: Accepted publickey for root from 172.16.3.5 port 35884 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:16 ip-172-16-3-10 sshd[6194]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:16 ip-172-16-3-10 sshd[6194]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:16 ip-172-16-3-10 sshd[6219]: Accepted publickey for root from 172.16.3.5 port 35898 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:17 ip-172-16-3-10 sshd[6219]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:17 ip-172-16-3-10 sshd[6219]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:17 ip-172-16-3-10 sshd[6242]: Accepted publickey for root from 172.16.3.5 port 35914 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 15:59:17 ip-172-16-3-10 sshd[6242]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 15:59:17 ip-172-16-3-10 sshd[6242]: pam_unix(sshd:session): session closed for user root
Jul  8 15:59:27 ip-172-16-3-10 systemd[6041]: pam_unix(systemd-user:session): session closed for user root
Jul  8 16:05:25 ip-172-16-3-10 sshd[6282]: Accepted publickey for root from 172.16.3.5 port 50954 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:25 ip-172-16-3-10 systemd[6287]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jul  8 16:05:25 ip-172-16-3-10 sshd[6282]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:25 ip-172-16-3-10 sshd[6282]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:25 ip-172-16-3-10 sshd[6317]: Accepted publickey for root from 172.16.3.5 port 50956 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:25 ip-172-16-3-10 sshd[6317]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:25 ip-172-16-3-10 sshd[6317]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:25 ip-172-16-3-10 sshd[6338]: Accepted publickey for root from 172.16.3.5 port 50966 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:25 ip-172-16-3-10 sshd[6338]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:25 ip-172-16-3-10 sshd[6338]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:25 ip-172-16-3-10 sshd[6359]: Accepted publickey for root from 172.16.3.5 port 50974 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:25 ip-172-16-3-10 sshd[6359]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:25 ip-172-16-3-10 sshd[6359]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:26 ip-172-16-3-10 sshd[6380]: Accepted publickey for root from 172.16.3.5 port 50990 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:26 ip-172-16-3-10 sshd[6380]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:26 ip-172-16-3-10 sshd[6380]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:26 ip-172-16-3-10 sshd[6401]: Accepted publickey for root from 172.16.3.5 port 51002 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:26 ip-172-16-3-10 sshd[6401]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:26 ip-172-16-3-10 sshd[6401]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:26 ip-172-16-3-10 sshd[6422]: Accepted publickey for root from 172.16.3.5 port 51016 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:26 ip-172-16-3-10 sshd[6422]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:26 ip-172-16-3-10 sshd[6422]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:26 ip-172-16-3-10 sshd[6443]: Accepted publickey for root from 172.16.3.5 port 51018 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:26 ip-172-16-3-10 sshd[6443]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:26 ip-172-16-3-10 sshd[6443]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:26 ip-172-16-3-10 sshd[6468]: Accepted publickey for root from 172.16.3.5 port 51034 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:05:26 ip-172-16-3-10 sshd[6468]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:05:26 ip-172-16-3-10 sshd[6468]: pam_unix(sshd:session): session closed for user root
Jul  8 16:05:37 ip-172-16-3-10 systemd[6292]: pam_unix(systemd-user:session): session closed for user root
Jul  8 16:06:17 ip-172-16-3-10 sshd[6500]: Accepted publickey for root from 172.16.3.5 port 47748 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:06:17 ip-172-16-3-10 systemd[6505]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jul  8 16:06:17 ip-172-16-3-10 sshd[6500]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:06:18 ip-172-16-3-10 sshd[6500]: pam_unix(sshd:session): session closed for user root
Jul  8 16:06:18 ip-172-16-3-10 sshd[6532]: Accepted publickey for root from 172.16.3.5 port 47750 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Jul  8 16:06:18 ip-172-16-3-10 sshd[6532]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul  8 16:06:19 ip-172-16-3-10 sshd[6532]: pam_unix(sshd:session): session closed for user root
