Jun 29 15:11:29 bastion LinuxCommandsWazuh: User ubuntu [29434]:   559  sudo su devesh
Jun 29 15:11:30 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [29434]:   559  sudo su devesh]
Jun 29 15:11:31 bastion LinuxCommandsWazuh: User ubuntu [29434]:   560  ls
Jun 29 15:11:34 bastion LinuxCommandsWazuh: User ubuntu [29434]:   561  htop 
Jun 29 15:11:42 bastion LinuxCommandsWazuh: User ubuntu [29434]:   562  crontab -e