D="user" AUID="user"
type=USER_CMD msg=audit(1769341296.244:132): pid=1358 uid=1000 auid=1000 ses=1 subj=unconfined msg='cwd="/home/user" cmd="/usr/libexec/sdwdate-gui/sdwdate-gui" exe="/usr/bin/sudo" terminal=? res=success'