kazulog@sv1:~$ sudo journalctl --no-pager -o short-precise | awk '/STEP6-BEGIN-20260912-101552/{f=1} f'
Sep 12 10:20:40.029678 sv1 KAZULOG[4653]: STEP6-BEGIN-20260912-101552
Sep 12 10:20:40.055659 sv1 sshd-session[4574]: syslogin_perform_logout: logout() returned an error
Sep 12 10:20:40.057603 sv1 sshd-session[4620]: Received disconnect from 10.100.3.1 port 53637:11: disconnected by user
Sep 12 10:20:40.058010 sv1 sshd-session[4620]: Disconnected from user kazulog 10.100.3.1 port 53637
Sep 12 10:20:40.059830 sv1 sshd-session[4574]: pam_unix(sshd:session): session closed for user kazulog
Sep 12 10:20:40.062526 sv1 systemd[1]: session-31.scope: Deactivated successfully.
Sep 12 10:20:40.066433 sv1 systemd-logind[1133]: Session 31 logged out. Waiting for processes to exit.
Sep 12 10:20:40.070621 sv1 systemd-logind[1133]: Removed session 31.
Sep 12 10:20:50.212974 sv1 systemd[1]: Stopping user@1000.service - User Manager for UID 1000...
Sep 12 10:20:50.216687 sv1 systemd[4175]: Activating special unit exit.target...
Sep 12 10:20:50.218052 sv1 systemd[4175]: Stopped target default.target - Main User Target.
Sep 12 10:20:50.218163 sv1 systemd[4175]: Stopped target basic.target - Basic System.
Sep 12 10:20:50.218243 sv1 systemd[4175]: Stopped target paths.target - Paths.
Sep 12 10:20:50.218320 sv1 systemd[4175]: Stopped target sockets.target - Sockets.
Sep 12 10:20:50.218444 sv1 systemd[4175]: Stopped target timers.target - Timers.
Sep 12 10:20:50.218526 sv1 systemd[4175]: Stopped launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache.
Sep 12 10:20:50.222486 sv1 systemd[4175]: Closed dbus.socket - D-Bus User Message Bus Socket.
Sep 12 10:20:50.223981 sv1 systemd[4175]: Closed dirmngr.socket - GnuPG network certificate management daemon.
Sep 12 10:20:50.224136 sv1 systemd[4175]: Closed gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers).
Sep 12 10:20:50.224265 sv1 systemd[4175]: Closed gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted).
Sep 12 10:20:50.228387 sv1 systemd[4175]: Stopping gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)...
Sep 12 10:20:50.233421 sv1 systemd[4175]: Stopping gpg-agent.socket - GnuPG cryptographic agent and passphrase cache...
Sep 12 10:20:50.233535 sv1 systemd[4175]: Closed keyboxd.socket - GnuPG public key management service.
Sep 12 10:20:50.237062 sv1 systemd[4175]: Closed pk-debconf-helper.socket - debconf communication socket.
Sep 12 10:20:50.237211 sv1 systemd[4175]: Closed snapd.session-agent.socket - REST API socket for snapd user session agent.
Sep 12 10:20:50.242109 sv1 systemd[4175]: Stopping ssh-agent.socket - OpenSSH Agent socket...
Sep 12 10:20:50.242228 sv1 systemd[4175]: Closed systemd-ask-password.socket - Query the User Interactively for a Password.
Sep 12 10:20:50.326992 sv1 systemd[4175]: Closed ssh-agent.socket - OpenSSH Agent socket.
Sep 12 10:20:50.328411 sv1 systemd[4175]: Closed gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation).
Sep 12 10:20:50.331993 sv1 systemd[4175]: Closed gpg-agent.socket - GnuPG cryptographic agent and passphrase cache.
Sep 12 10:20:50.336990 sv1 systemd[4175]: Removed slice app.slice - User Application Slice.
Sep 12 10:20:50.337158 sv1 systemd[4175]: Reached target shutdown.target - Shutdown.
Sep 12 10:20:50.337675 sv1 systemd[4175]: Finished systemd-exit.service - Exit the Session.
Sep 12 10:20:50.338166 sv1 systemd[4175]: Reached target exit.target - Exit the Session.
Sep 12 10:20:50.346907 sv1 systemd-logind[1133]: Removed session 27.
Sep 12 10:20:50.352654 sv1 systemd[1]: user@1000.service: Deactivated successfully.
Sep 12 10:20:50.353604 sv1 systemd[1]: Stopped user@1000.service - User Manager for UID 1000.
Sep 12 10:20:50.361986 sv1 systemd[1]: Stopping user-runtime-dir@1000.service - User Runtime Directory /run/user/1000...
Sep 12 10:20:50.390424 sv1 systemd[1]: run-user-1000.mount: Deactivated successfully.
Sep 12 10:20:50.392699 sv1 systemd[1]: user-runtime-dir@1000.service: Deactivated successfully.
Sep 12 10:20:50.393311 sv1 systemd[1]: Stopped user-runtime-dir@1000.service - User Runtime Directory /run/user/1000.
Sep 12 10:20:50.399933 sv1 systemd[1]: Removed slice user-1000.slice - User Slice of UID 1000.
Sep 12 10:20:50.400116 sv1 systemd[1]: user-1000.slice: Consumed 2.314s CPU time over 13.591s wall clock time, 36.6M memory peak.
Sep 12 10:21:40.882282 sv1 PackageKit[1975]: daemon quit
Sep 12 10:21:40.896614 sv1 systemd[1]: packagekit.service: Deactivated successfully.
Sep 12 10:22:02.804018 sv1 sshd-session[4687]: Accepted publickey for kazulog from 10.100.3.1 port 53679 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw
Sep 12 10:22:02.811018 sv1 sshd-session[4687]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:22:02.828852 sv1 systemd[1]: Created slice user-1000.slice - User Slice of UID 1000.
Sep 12 10:22:02.833291 sv1 systemd[1]: Starting user-runtime-dir@1000.service - User Runtime Directory /run/user/1000...
Sep 12 10:22:02.852385 sv1 systemd-logind[1133]: New session '32' of user 'kazulog' with class 'user' and type 'tty'.
Sep 12 10:22:02.876697 sv1 systemd[1]: Finished user-runtime-dir@1000.service - User Runtime Directory /run/user/1000.
Sep 12 10:22:02.884082 sv1 systemd[1]: Starting user@1000.service - User Manager for UID 1000...
Sep 12 10:22:02.903015 sv1 (systemd)[4692]: pam_unix(systemd-user:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:22:02.906455 sv1 systemd-logind[1133]: New session '33' of user 'kazulog' with class 'manager' and type 'unspecified'.
Sep 12 10:22:03.083967 sv1 systemd[4692]: Queued start job for default target default.target.
Sep 12 10:22:03.088244 sv1 systemd[4692]: Created slice app.slice - User Application Slice.
Sep 12 10:22:03.088662 sv1 systemd[4692]: Started launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache.
Sep 12 10:22:03.088856 sv1 systemd[4692]: Reached target paths.target - Paths.
Sep 12 10:22:03.088948 sv1 systemd[4692]: Reached target timers.target - Timers.
Sep 12 10:22:03.091465 sv1 systemd[4692]: Starting dbus.socket - D-Bus User Message Bus Socket...
Sep 12 10:22:03.092145 sv1 systemd[4692]: Listening on dirmngr.socket - GnuPG network certificate management daemon.
Sep 12 10:22:03.092984 sv1 systemd[4692]: Listening on gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers).
Sep 12 10:22:03.093375 sv1 systemd[4692]: Listening on gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted).
Sep 12 10:22:03.097204 sv1 systemd[4692]: Starting gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)...
Sep 12 10:22:03.099117 sv1 systemd[4692]: Starting gpg-agent.socket - GnuPG cryptographic agent and passphrase cache...
Sep 12 10:22:03.099483 sv1 systemd[4692]: Listening on keyboxd.socket - GnuPG public key management service.
Sep 12 10:22:03.100078 sv1 systemd[4692]: Listening on pk-debconf-helper.socket - debconf communication socket.
Sep 12 10:22:03.101981 sv1 systemd[4692]: Listening on snapd.session-agent.socket - REST API socket for snapd user session agent.
Sep 12 10:22:03.105198 sv1 systemd[4692]: Starting ssh-agent.socket - OpenSSH Agent socket...
Sep 12 10:22:03.110929 sv1 systemd[4692]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password.
Sep 12 10:22:03.175031 sv1 systemd[4692]: Listening on dbus.socket - D-Bus User Message Bus Socket.
Sep 12 10:22:03.196467 sv1 systemd[4692]: Listening on gpg-agent.socket - GnuPG cryptographic agent and passphrase cache.
Sep 12 10:22:03.203245 sv1 systemd[4692]: Listening on gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation).
Sep 12 10:22:03.203876 sv1 systemd[4692]: Listening on ssh-agent.socket - OpenSSH Agent socket.
Sep 12 10:22:03.204371 sv1 systemd[4692]: Reached target sockets.target - Sockets.
Sep 12 10:22:03.205044 sv1 systemd[4692]: Reached target basic.target - Basic System.
Sep 12 10:22:03.205440 sv1 systemd[1]: Started user@1000.service - User Manager for UID 1000.
Sep 12 10:22:03.206008 sv1 systemd[4692]: Reached target default.target - Main User Target.
Sep 12 10:22:03.206881 sv1 systemd[4692]: Startup finished in 289ms.
Sep 12 10:22:03.210601 sv1 systemd[1]: Started session-32.scope - Session 32 of User kazulog.
Sep 12 10:22:03.986674 sv1 sudo[4765]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:22:03.987892 sv1 sudo[4765]: kazulog :  PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/python3 -
Sep 12 10:22:04.019912 sv1 sudo[4765]: pam_unix(sudo:session): session closed for user root
Sep 12 10:22:04.022450 sv1 sshd-session[4764]: Received disconnect from 10.100.3.1 port 53679:11: disconnected by user
Sep 12 10:22:04.023033 sv1 sshd-session[4764]: Disconnected from user kazulog 10.100.3.1 port 53679
Sep 12 10:22:04.024636 sv1 sshd-session[4687]: pam_unix(sshd:session): session closed for user kazulog
Sep 12 10:22:04.028661 sv1 systemd[1]: session-32.scope: Deactivated successfully.
Sep 12 10:22:04.033200 sv1 systemd-logind[1133]: Session 32 logged out. Waiting for processes to exit.
Sep 12 10:22:04.036913 sv1 systemd-logind[1133]: Removed session 32.
Sep 12 10:22:04.154889 sv1 sshd-session[4769]: Accepted publickey for kazulog from 10.100.3.1 port 53680 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw
Sep 12 10:22:04.158415 sv1 sshd-session[4769]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:22:04.165460 sv1 systemd-logind[1133]: New session '34' of user 'kazulog' with class 'user' and type 'tty'.
Sep 12 10:22:04.170272 sv1 systemd[1]: Started session-34.scope - Session 34 of User kazulog.
Sep 12 10:22:04.334994 sv1 sudo[4816]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:22:04.335638 sv1 sudo[4816]: kazulog :  PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/python3 -
Sep 12 10:22:04.390453 sv1 sudo[4816]: pam_unix(sudo:session): session closed for user root
Sep 12 10:22:04.393047 sv1 sshd-session[4815]: Received disconnect from 10.100.3.1 port 53680:11: disconnected by user
Sep 12 10:22:04.393642 sv1 sshd-session[4815]: Disconnected from user kazulog 10.100.3.1 port 53680
Sep 12 10:22:04.394915 sv1 sshd-session[4769]: pam_unix(sshd:session): session closed for user kazulog
Sep 12 10:22:04.397208 sv1 systemd[1]: session-34.scope: Deactivated successfully.
Sep 12 10:22:04.400194 sv1 systemd-logind[1133]: Session 34 logged out. Waiting for processes to exit.
Sep 12 10:22:04.403114 sv1 systemd-logind[1133]: Removed session 34.
Sep 12 10:22:04.538857 sv1 sshd-session[4823]: Accepted publickey for kazulog from 10.100.3.1 port 53681 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw
Sep 12 10:22:04.543224 sv1 sshd-session[4823]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:22:04.550305 sv1 systemd-logind[1133]: New session '35' of user 'kazulog' with class 'user' and type 'tty'.
Sep 12 10:22:04.555058 sv1 systemd[1]: Started session-35.scope - Session 35 of User kazulog.
Sep 12 10:22:04.862298 sv1 sudo[4913]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:22:04.862928 sv1 sudo[4913]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/ls -l /home/ftpdemo/
Sep 12 10:22:04.871662 sv1 sudo[4913]: pam_unix(sudo:session): session closed for user root
Sep 12 10:22:04.952321 sv1 sudo[4936]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:22:04.952877 sv1 sudo[4936]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/ls -laR /srv/ftp-users/
Sep 12 10:22:04.961039 sv1 sudo[4936]: pam_unix(sudo:session): session closed for user root
Sep 12 10:22:04.993247 sv1 sudo[4949]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:22:04.993696 sv1 sudo[4949]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/systemctl restart vsftpd
Sep 12 10:22:05.008480 sv1 systemd[1]: Stopping vsftpd.service - vsftpd FTP server...
Sep 12 10:22:05.011331 sv1 systemd[1]: vsftpd.service: Deactivated successfully.
Sep 12 10:22:05.012017 sv1 systemd[1]: Stopped vsftpd.service - vsftpd FTP server.
Sep 12 10:22:05.017075 sv1 systemd[1]: Starting vsftpd.service - vsftpd FTP server...
Sep 12 10:22:05.032094 sv1 systemd[1]: Started vsftpd.service - vsftpd FTP server.
Sep 12 10:22:05.037078 sv1 sudo[4949]: pam_unix(sudo:session): session closed for user root
Sep 12 10:22:05.083476 sv1 sshd-session[4823]: syslogin_perform_logout: logout() returned an error
Sep 12 10:22:05.084668 sv1 sshd-session[4869]: Received disconnect from 10.100.3.1 port 53681:11: disconnected by user
Sep 12 10:22:05.085356 sv1 sshd-session[4869]: Disconnected from user kazulog 10.100.3.1 port 53681
Sep 12 10:22:05.086450 sv1 sshd-session[4823]: pam_unix(sshd:session): session closed for user kazulog
Sep 12 10:22:05.089935 sv1 systemd-logind[1133]: Session 35 logged out. Waiting for processes to exit.
Sep 12 10:22:05.090962 sv1 systemd[1]: session-35.scope: Deactivated successfully.
Sep 12 10:22:05.094246 sv1 systemd-logind[1133]: Removed session 35.
Sep 12 10:22:05.226053 sv1 sshd-session[4969]: Accepted publickey for kazulog from 10.100.3.1 port 53682 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw
Sep 12 10:22:05.228273 sv1 sshd-session[4969]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:22:05.233653 sv1 systemd-logind[1133]: New session '36' of user 'kazulog' with class 'user' and type 'tty'.
Sep 12 10:22:05.236890 sv1 systemd[1]: Started session-36.scope - Session 36 of User kazulog.
Sep 12 10:22:05.495922 sv1 sudo[5048]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:22:05.496901 sv1 sudo[5048]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise