type=EXECVE msg=audit(1723450480.055:305481): argc=4 a0="split" a1="-b" a2="1000000" a3="split_me.txt" type=EXECVE msg=audit(1723450480.035:305462): argc=5 a0="sudo" a1="split" a2="-b" a3="1000000" a4="split_me.txt"