D="user" AUID="user"
type=CRED_DISP msg=audit(1758477714.557:317): pid=4118 uid=1000 auid=1000 ses=1 subj=unconfined msg='op=PAM:setcred grantors=pam_faillock,pam_wheel,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'