kazulog@sv1:~$ sudo journalctl --no-pager -o short-precise | awk '/STEP3-BEGIN-20260912-090807/{f=1} f' Sep 12 09:08:52.932700 sv1 KAZULOG[3437]: STEP3-BEGIN-20260912-090807 Sep 12 09:08:52.955316 sv1 sshd-session[3358]: syslogin_perform_logout: logout() returned an error Sep 12 09:08:52.957196 sv1 sshd-session[3404]: Received disconnect from 10.100.3.1 port 51857:11: disconnected by user Sep 12 09:08:52.957820 sv1 sshd-session[3404]: Disconnected from user kazulog 10.100.3.1 port 51857 Sep 12 09:08:52.958697 sv1 sshd-session[3358]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:08:52.961032 sv1 systemd[1]: session-17.scope: Deactivated successfully. Sep 12 09:08:52.963440 sv1 systemd-logind[1134]: Session 17 logged out. Waiting for processes to exit. Sep 12 09:08:52.966651 sv1 systemd-logind[1134]: Removed session 17. Sep 12 09:08:53.103273 sv1 sshd-session[3449]: Accepted publickey for kazulog from 10.100.3.1 port 51858 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:08:53.106784 sv1 sshd-session[3449]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:08:53.114047 sv1 systemd-logind[1134]: New session '18' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:08:53.118865 sv1 systemd[1]: Started session-18.scope - Session 18 of User kazulog. Sep 12 09:08:53.460504 sv1 sudo[3539]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:08:53.461076 sv1 sudo[3539]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/sbin/useradd -m -s /bin/bash telnetdemo Sep 12 09:08:53.525327 sv1 useradd[3542]: new group: name=telnetdemo, GID=1001 Sep 12 09:08:53.526277 sv1 useradd[3542]: new user: name=telnetdemo, UID=1001, GID=1001, home=/home/telnetdemo, shell=/bin/bash, from=/dev/pts/1 Sep 12 09:08:53.657941 sv1 sudo[3539]: pam_unix(sudo:session): session closed for user root Sep 12 09:08:53.723304 sv1 sudo[3557]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:08:53.724311 sv1 sudo[3557]: kazulog : PWD=/home/kazulog ; USER=root ; COMMAND=/usr/sbin/chpasswd Sep 12 09:08:53.789868 sv1 chpasswd[3560]: pam_unix(chpasswd:chauthtok): password changed for telnetdemo Sep 12 09:08:53.794312 sv1 sudo[3557]: pam_unix(sudo:session): session closed for user root Sep 12 09:08:53.870341 sv1 sshd-session[3449]: syslogin_perform_logout: logout() returned an error Sep 12 09:08:53.871574 sv1 sshd-session[3495]: Received disconnect from 10.100.3.1 port 51858:11: disconnected by user Sep 12 09:08:53.871896 sv1 sshd-session[3495]: Disconnected from user kazulog 10.100.3.1 port 51858 Sep 12 09:08:53.873639 sv1 sshd-session[3449]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:08:53.876398 sv1 systemd[1]: session-18.scope: Deactivated successfully. Sep 12 09:08:53.880651 sv1 systemd-logind[1134]: Session 18 logged out. Waiting for processes to exit. Sep 12 09:08:53.884337 sv1 systemd-logind[1134]: Removed session 18. Sep 12 09:08:54.023391 sv1 sshd-session[3586]: Accepted publickey for kazulog from 10.100.3.1 port 51859 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:08:54.032047 sv1 sshd-session[3586]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:08:54.041802 sv1 systemd-logind[1134]: New session '19' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:08:54.046721 sv1 systemd[1]: Started session-19.scope - Session 19 of User kazulog. Sep 12 09:08:54.402946 sv1 sudo[3665]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:08:54.403817 sv1 sudo[3665]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise