type=PROCTITLE msg=audit(02/20/2025 13:35:04.846:154663) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.835:154662) : proctitle=systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.830:154659) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.830:154658) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.827:154655) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.821:154654) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.821:154653) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.821:154652) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.820:154651) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.820:154650) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.819:154645) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.819:154644) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:35:04.813:154643) : proctitle=sudo systemctl startus auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.661:154635) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.417:153851) : proctitle=systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.414:153848) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.414:153847) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.413:153844) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.409:153843) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.409:153842) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.409:153841) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.409:153840) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.409:153839) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.406:153834) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.406:153833) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:34:54.397:153832) : proctitle=sudo systemctl restart auditd.service type=PROCTITLE msg=audit(02/20/2025 13:30:45.607:153249) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 13:30:45.605:153248) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 13:29:21.026:150322) : proctitle=systemctl start --no-block apt-news.service esm-cache.service type=PROCTITLE msg=audit(02/20/2025 13:29:21.017:150320) : proctitle=sh -c [ ! -e /run/systemd/system ] || [ $(id -u) -ne 0 ] || systemctl start --no-block apt-news.service esm-cache.service >/dev/ type=PROCTITLE msg=audit(02/20/2025 13:08:37.900:148736) : proctitle=sudo systemctl restart auditd type=PROCTITLE msg=audit(02/20/2025 13:08:37.613:147905) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.562:147899) : proctitle=systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.560:147896) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.559:147895) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.559:147892) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.555:147891) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.555:147890) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.555:147889) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.555:147888) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.555:147887) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.553:147882) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.553:147881) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:37.547:147880) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 13:08:31.100:147826) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.469:147758) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 13:08:30.467:147757) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 13:08:30.095:147720) : proctitle=systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.092:147717) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.092:147716) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.090:147713) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.085:147712) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.085:147711) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.085:147710) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.085:147709) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.085:147708) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.082:147703) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.082:147702) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:08:30.077:147701) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 13:06:22.971:103639) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.957:103637) : proctitle=systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.954:103634) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.954:103633) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.953:103630) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.949:103629) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.949:103628) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.949:103627) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.949:103626) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.949:103625) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.948:103620) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.948:103619) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.943:103618) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.937:103615) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.911:103611) : proctitle=systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.908:103608) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.907:103607) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.906:103604) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.902:103603) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.902:103602) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.902:103601) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.901:103600) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.901:103599) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.900:103594) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.900:103593) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:22.895:103592) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 13:06:13.841:103198) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:13.821:103196) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:13.821:103195) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:13.821:103194) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:13.821:103193) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.483:103188) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.479:103185) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.479:103184) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.478:103181) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.473:103180) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.473:103179) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.473:103178) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.473:103177) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.473:103176) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.471:103171) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.471:103170) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:12.467:103169) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 13:06:04.353:102622) : proctitle=systemctl start --no-block apt-news.service esm-cache.service type=PROCTITLE msg=audit(02/20/2025 13:06:04.348:102620) : proctitle=sh -c [ ! -e /run/systemd/system ] || [ $(id -u) -ne 0 ] || systemctl start --no-block apt-news.service esm-cache.service >/dev/ type=PROCTITLE msg=audit(02/20/2025 10:02:59.005:91161) : proctitle=sudo systemctl restart auditd type=PROCTITLE msg=audit(02/20/2025 10:02:58.618:90330) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.569:90324) : proctitle=systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.562:90321) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.561:90320) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.557:90317) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.550:90316) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.550:90315) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.550:90314) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.549:90313) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.549:90312) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.545:90307) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.545:90306) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:58.526:90305) : proctitle=sudo systemctl restart osqueryd type=PROCTITLE msg=audit(02/20/2025 10:02:56.656:90276) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:56.000:90218) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 10:02:55.999:90217) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 10:02:55.422:90181) : proctitle=systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.419:90178) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.419:90177) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.418:90174) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.411:90173) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.411:90172) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.411:90171) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.410:90170) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.410:90169) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.408:90164) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.408:90163) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:02:55.402:90162) : proctitle=sudo systemctl restart sysmon type=PROCTITLE msg=audit(02/20/2025 10:00:25.826:44759) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.807:44757) : proctitle=systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.802:44754) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.801:44753) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.799:44750) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.794:44749) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.794:44748) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.794:44747) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.793:44746) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.793:44745) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.791:44740) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.791:44739) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.786:44738) : proctitle=sudo systemctl start atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.783:44735) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.755:44731) : proctitle=systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.752:44728) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.751:44727) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.750:44724) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.745:44723) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.745:44722) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.745:44721) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.744:44720) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.744:44719) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.743:44714) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.742:44713) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:25.737:44712) : proctitle=sudo systemctl restart atd type=PROCTITLE msg=audit(02/20/2025 10:00:10.987:44224) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 10:00:10.986:44223) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 10:00:02.304:43652) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 10:00:02.303:43651) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:59:53.575:43054) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:59:53.571:43053) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:59:49.042:42766) : proctitle=systemctl --system is-enabled -- firewalld.service type=PROCTITLE msg=audit(02/20/2025 09:59:49.041:42765) : proctitle=sh -c systemctl --system is-enabled -- 'firewalld.service' type=PROCTITLE msg=audit(02/20/2025 09:59:35.769:38528) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:59:35.767:38527) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:59:30.771:38258) : proctitle=systemctl --quiet is-enabled x11-common.service type=PROCTITLE msg=audit(02/20/2025 09:59:20.398:37191) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:59:20.394:37190) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:58:56.189:5936) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:56.163:5933) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:56.162:5932) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:56.162:5931) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:56.162:5930) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.670:5925) : proctitle=/bin/sh /usr/sbin/service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.663:5922) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.662:5921) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.661:5918) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.656:5917) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.656:5916) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.656:5915) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.655:5914) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.655:5913) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.645:5908) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.645:5907) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:54.639:5906) : proctitle=sudo service atd start type=PROCTITLE msg=audit(02/20/2025 09:58:51.500:5791) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:58:51.496:5790) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:58:44.571:5566) : proctitle=systemctl start atd.service type=PROCTITLE msg=audit(02/20/2025 09:58:44.511:5562) : proctitle=systemctl --quiet is-enabled atd.service type=PROCTITLE msg=audit(02/20/2025 09:14:53.835:978) : proctitle=systemctl show SplunkForwarder --property=Type,ExecStart,LoadState,Restart,Delegate,ActiveState type=PROCTITLE msg=audit(02/20/2025 09:14:52.778:936) : proctitle=systemctl is-enabled snapd.apparmor type=PROCTITLE msg=audit(02/20/2025 09:14:50.476:807) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/20/2025 09:14:50.473:806) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/19/2025 16:34:22.093:1065) : proctitle=systemctl show SplunkForwarder --property=Type,ExecStart,LoadState,Restart,Delegate,ActiveState type=PROCTITLE msg=audit(02/19/2025 16:34:21.145:1013) : proctitle=systemctl is-enabled snapd.apparmor type=PROCTITLE msg=audit(02/19/2025 16:34:17.991:875) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/19/2025 16:34:17.988:874) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/19/2025 11:48:16.210:10889) : proctitle=systemctl show SplunkForwarder --property=Type,ExecStart,LoadState,Restart,Delegate,ActiveState type=PROCTITLE msg=audit(02/19/2025 08:58:38.535:1603) : proctitle=systemctl restart snap-core20-2496.mount type=PROCTITLE msg=audit(02/19/2025 08:58:38.522:1602) : proctitle=systemctl --no-reload enable snap-core20-2496.mount type=PROCTITLE msg=audit(02/19/2025 08:53:34.293:1052) : proctitle=systemctl show SplunkForwarder --property=Type,ExecStart,LoadState,Restart,Delegate,ActiveState type=PROCTITLE msg=audit(02/19/2025 08:53:33.440:1010) : proctitle=systemctl is-enabled snapd.apparmor type=PROCTITLE msg=audit(02/19/2025 08:53:31.321:887) : proctitle=systemctl enable sysmon.service type=PROCTITLE msg=audit(02/19/2025 08:53:31.317:884) : proctitle=sh -c systemctl enable sysmon.service type=PROCTITLE msg=audit(02/18/2025 14:29:36.418:4016) : proctitle=systemctl show SplunkForwarder --property=Type,ExecStart,LoadState,Restart,Delegate,ActiveState type=PROCTITLE msg=audit(02/18/2025 14:29:30.813:3975) : proctitle=/usr/bin/systemctl restart SplunkForwarder type=PROCTITLE msg=audit(02/18/2025 14:28:43.577:716) : proctitle=/usr/bin/systemctl is-enabled auditd -l