Log: audit-log-cron
type=USER_START msg=audit(1719517182.019:16496658): pid=12425 uid=0 auid=0 ses=2317238 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct='root' exe='/usr/sbin/crond' hostname=? addr=? terminal=cron res=success'
For: Linux audit log
Meaning: This log happens whenever a user session is started. This log often comes after a type=LOGIN or type=USER_LOGIN audit event. In this case, it is from cron and will be triggered whenever cron runs.
What to do: None. Informational only.
Get
Started