type=SYSCALL msg=audit(04/16/2025 09:14:42.784:96444) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x5bb5511644d0 a1=0x5bb551165220 a2=0x5bb55115e5d0 a3=0x8 items=2 ppid=38881 pid=38887 auid=ubuntu uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=3 comm=split exe=/usr/bin/split subj=unconfined key=rootcmd 
type=SYSCALL msg=audit(04/16/2025 09:13:55.003:96364) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x5c97a36e2858 a1=0x5c97a36d5ce0 a2=0x5c97a36e7820 a3=0x0 items=2 ppid=38840 pid=38841 auid=ubuntu uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=3 comm=split exe=/usr/bin/split subj=unconfined key=rootcmd