kazulog@sv1:~$ sudo journalctl --no-pager -o short-precise | awk '/STEP2-BEGIN-20260912-100050/{f=1} f' Sep 12 10:01:33.337122 sv1 KAZULOG[3091]: STEP2-BEGIN-20260912-100050 Sep 12 10:01:33.384894 sv1 sshd-session[3012]: syslogin_perform_logout: logout() returned an error Sep 12 10:01:33.386328 sv1 sshd-session[3058]: Received disconnect from 10.100.3.1 port 53152:11: disconnected by user Sep 12 10:01:33.386599 sv1 sshd-session[3058]: Disconnected from user kazulog 10.100.3.1 port 53152 Sep 12 10:01:33.388453 sv1 sshd-session[3012]: pam_unix(sshd:session): session closed for user kazulog Sep 12 10:01:33.391547 sv1 systemd[1]: session-14.scope: Deactivated successfully. Sep 12 10:01:33.395397 sv1 systemd-logind[1132]: Session 14 logged out. Waiting for processes to exit. Sep 12 10:01:33.398735 sv1 systemd-logind[1132]: Removed session 14. Sep 12 10:01:33.558484 sv1 sshd-session[3103]: Accepted publickey for kazulog from 10.100.3.1 port 53153 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 10:01:33.564840 sv1 sshd-session[3103]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 10:01:33.576582 sv1 systemd-logind[1132]: New session '15' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 10:01:33.579474 sv1 systemd[1]: Started session-15.scope - Session 15 of User kazulog. Sep 12 10:01:33.960886 sv1 sudo[3194]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:01:33.961767 sv1 sudo[3194]: kazulog : PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/tee /srv/tftp/hello.txt Sep 12 10:01:33.969548 sv1 sudo[3194]: pam_unix(sudo:session): session closed for user root Sep 12 10:01:34.021170 sv1 sudo[3207]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:01:34.021431 sv1 sudo[3207]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/ls -l /srv/tftp/ Sep 12 10:01:34.032497 sv1 sudo[3207]: pam_unix(sudo:session): session closed for user root Sep 12 10:01:34.079723 sv1 sshd-session[3103]: syslogin_perform_logout: logout() returned an error Sep 12 10:01:34.081318 sv1 sshd-session[3149]: Received disconnect from 10.100.3.1 port 53153:11: disconnected by user Sep 12 10:01:34.081924 sv1 sshd-session[3149]: Disconnected from user kazulog 10.100.3.1 port 53153 Sep 12 10:01:34.083132 sv1 sshd-session[3103]: pam_unix(sshd:session): session closed for user kazulog Sep 12 10:01:34.085760 sv1 systemd[1]: session-15.scope: Deactivated successfully. Sep 12 10:01:34.089159 sv1 systemd-logind[1132]: Session 15 logged out. Waiting for processes to exit. Sep 12 10:01:34.092589 sv1 systemd-logind[1132]: Removed session 15. Sep 12 10:01:34.240538 sv1 sshd-session[3222]: Accepted publickey for kazulog from 10.100.3.1 port 53154 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 10:01:34.246840 sv1 sshd-session[3222]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 10:01:34.258573 sv1 systemd-logind[1132]: New session '16' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 10:01:34.262515 sv1 systemd[1]: Started session-16.scope - Session 16 of User kazulog. Sep 12 10:01:34.544197 sv1 sudo[3301]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 10:01:34.544956 sv1 sudo[3301]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise