*Sep 12 06:27:12.037: %KAZULOG-6-STEPMARK: Message from tty434(user id: cisco): STEP0-BEGIN-20260912-152710
*Sep 12 06:27:12.089: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.100.3.1)
*Sep 12 06:27:12.093: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:27:15.709: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:27:15.925: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:27:15 UTC Sat Sep 12 2026
*Sep 12 06:27:15.926: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:27:16.185: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:27:24.538: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:27:24.718: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:27:24 UTC Sat Sep 12 2026
*Sep 12 06:27:24.719: %SSH-5-SSH2_USERAUTH: User 'cisco' authentication for SSH2 Session from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:27:25.738: %SYS-6-LOGOUT: User cisco has exited tty session 434(10.100.3.1)
*Sep 12 06:27:25.740: %SSH-5-SSH2_CLOSE: SSH2 Session from 10.100.3.1 (tty = 0) for user 'cisco' using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' closed
*Sep 12 06:27:26.038: %SSH-5-SSH2_SESSION: SSH2 Session request from 10.100.3.1 (tty = 0) using crypto cipher 'aes128-gcm@openssh.com', hmac 'hmac-sha2-256-etm@openssh.com' Succeeded
*Sep 12 06:27:26.400: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cisco] [Source: 10.100.3.1] [localport: 22] at 06:27:26 UTC Sat Sep 12 2026