Aug 12 20:36:33 prd-ubuntu1804-docker-8c-8g-34850 passwd[1011]: password for 'ubuntu' changed by 'root'
Aug 12 20:36:33 prd-ubuntu1804-docker-8c-8g-34850 systemd-logind[1048]: Watching system buttons on /dev/input/event0 (Power Button)
Aug 12 20:36:33 prd-ubuntu1804-docker-8c-8g-34850 systemd-logind[1048]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Aug 12 20:36:33 prd-ubuntu1804-docker-8c-8g-34850 systemd-logind[1048]: New seat seat0.
Aug 12 20:36:33 prd-ubuntu1804-docker-8c-8g-34850 sshd[1130]: Server listening on 0.0.0.0 port 22.
Aug 12 20:36:33 prd-ubuntu1804-docker-8c-8g-34850 sshd[1130]: Server listening on :: port 22.
Aug 12 20:36:35 prd-ubuntu1804-docker-8c-8g-34850 sshd[1426]: Did not receive identification string from 10.30.104.4 port 51850
Aug 12 20:36:41 prd-ubuntu1804-docker-8c-8g-34850 sshd[1459]: Invalid user jenkins from 10.30.104.4 port 51878
Aug 12 20:36:42 prd-ubuntu1804-docker-8c-8g-34850 sshd[1459]: Received disconnect from 10.30.104.4 port 51878:11: Closed due to user request. [preauth]
Aug 12 20:36:42 prd-ubuntu1804-docker-8c-8g-34850 sshd[1459]: Disconnected from invalid user jenkins 10.30.104.4 port 51878 [preauth]
Aug 12 20:36:44 prd-ubuntu1804-docker-8c-8g-34850 sshd[1463]: Invalid user jenkins from 10.30.104.4 port 51928
Aug 12 20:36:44 prd-ubuntu1804-docker-8c-8g-34850 sshd[1463]: Received disconnect from 10.30.104.4 port 51928:11: Closed due to user request. [preauth]
Aug 12 20:36:44 prd-ubuntu1804-docker-8c-8g-34850 sshd[1463]: Disconnected from invalid user jenkins 10.30.104.4 port 51928 [preauth]
Aug 12 20:36:46 prd-ubuntu1804-docker-8c-8g-34850 sshd[1465]: Invalid user jenkins from 10.30.104.4 port 51960
Aug 12 20:36:46 prd-ubuntu1804-docker-8c-8g-34850 sshd[1465]: Received disconnect from 10.30.104.4 port 51960:11: Closed due to user request. [preauth]
Aug 12 20:36:46 prd-ubuntu1804-docker-8c-8g-34850 sshd[1465]: Disconnected from invalid user jenkins 10.30.104.4 port 51960 [preauth]
Aug 12 20:36:48 prd-ubuntu1804-docker-8c-8g-34850 sshd[1467]: Invalid user jenkins from 10.30.104.4 port 51998
Aug 12 20:36:48 prd-ubuntu1804-docker-8c-8g-34850 sshd[1467]: Received disconnect from 10.30.104.4 port 51998:11: Closed due to user request. [preauth]
Aug 12 20:36:48 prd-ubuntu1804-docker-8c-8g-34850 sshd[1467]: Disconnected from invalid user jenkins 10.30.104.4 port 51998 [preauth]
Aug 12 20:36:50 prd-ubuntu1804-docker-8c-8g-34850 sshd[1497]: Invalid user jenkins from 10.30.104.4 port 52032
Aug 12 20:36:50 prd-ubuntu1804-docker-8c-8g-34850 sshd[1497]: Received disconnect from 10.30.104.4 port 52032:11: Closed due to user request. [preauth]
Aug 12 20:36:50 prd-ubuntu1804-docker-8c-8g-34850 sshd[1497]: Disconnected from invalid user jenkins 10.30.104.4 port 52032 [preauth]
Aug 12 20:36:52 prd-ubuntu1804-docker-8c-8g-34850 sshd[1713]: Invalid user jenkins from 10.30.104.4 port 52070
Aug 12 20:36:52 prd-ubuntu1804-docker-8c-8g-34850 sshd[1713]: Received disconnect from 10.30.104.4 port 52070:11: Closed due to user request. [preauth]
Aug 12 20:36:52 prd-ubuntu1804-docker-8c-8g-34850 sshd[1713]: Disconnected from invalid user jenkins 10.30.104.4 port 52070 [preauth]
Aug 12 20:36:54 prd-ubuntu1804-docker-8c-8g-34850 sshd[1721]: Invalid user jenkins from 10.30.104.4 port 52110
Aug 12 20:36:54 prd-ubuntu1804-docker-8c-8g-34850 sshd[1721]: Received disconnect from 10.30.104.4 port 52110:11: Closed due to user request. [preauth]
Aug 12 20:36:54 prd-ubuntu1804-docker-8c-8g-34850 sshd[1721]: Disconnected from invalid user jenkins 10.30.104.4 port 52110 [preauth]
Aug 12 20:36:56 prd-ubuntu1804-docker-8c-8g-34850 sshd[1750]: Invalid user jenkins from 10.30.104.4 port 52132
Aug 12 20:36:57 prd-ubuntu1804-docker-8c-8g-34850 sshd[1750]: Received disconnect from 10.30.104.4 port 52132:11: Closed due to user request. [preauth]
Aug 12 20:36:57 prd-ubuntu1804-docker-8c-8g-34850 sshd[1750]: Disconnected from invalid user jenkins 10.30.104.4 port 52132 [preauth]
Aug 12 20:36:59 prd-ubuntu1804-docker-8c-8g-34850 sshd[1769]: Invalid user jenkins from 10.30.104.4 port 52164
Aug 12 20:36:59 prd-ubuntu1804-docker-8c-8g-34850 sshd[1769]: Received disconnect from 10.30.104.4 port 52164:11: Closed due to user request. [preauth]
Aug 12 20:36:59 prd-ubuntu1804-docker-8c-8g-34850 sshd[1769]: Disconnected from invalid user jenkins 10.30.104.4 port 52164 [preauth]
Aug 12 20:37:01 prd-ubuntu1804-docker-8c-8g-34850 sshd[1773]: Invalid user jenkins from 10.30.104.4 port 52192
Aug 12 20:37:01 prd-ubuntu1804-docker-8c-8g-34850 sshd[1773]: Received disconnect from 10.30.104.4 port 52192:11: Closed due to user request. [preauth]
Aug 12 20:37:01 prd-ubuntu1804-docker-8c-8g-34850 sshd[1773]: Disconnected from invalid user jenkins 10.30.104.4 port 52192 [preauth]
Aug 12 20:37:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[1771]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:37:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[1771]: pam_unix(cron:session): session closed for user root
Aug 12 20:37:03 prd-ubuntu1804-docker-8c-8g-34850 sshd[1792]: Invalid user jenkins from 10.30.104.4 port 52216
Aug 12 20:37:03 prd-ubuntu1804-docker-8c-8g-34850 sshd[1792]: Received disconnect from 10.30.104.4 port 52216:11: Closed due to user request. [preauth]
Aug 12 20:37:03 prd-ubuntu1804-docker-8c-8g-34850 sshd[1792]: Disconnected from invalid user jenkins 10.30.104.4 port 52216 [preauth]
Aug 12 20:37:05 prd-ubuntu1804-docker-8c-8g-34850 sshd[1805]: Invalid user jenkins from 10.30.104.4 port 52236
Aug 12 20:37:05 prd-ubuntu1804-docker-8c-8g-34850 sshd[1805]: Received disconnect from 10.30.104.4 port 52236:11: Closed due to user request. [preauth]
Aug 12 20:37:05 prd-ubuntu1804-docker-8c-8g-34850 sshd[1805]: Disconnected from invalid user jenkins 10.30.104.4 port 52236 [preauth]
Aug 12 20:37:08 prd-ubuntu1804-docker-8c-8g-34850 sshd[1807]: Invalid user jenkins from 10.30.104.4 port 52264
Aug 12 20:37:08 prd-ubuntu1804-docker-8c-8g-34850 sshd[1807]: Received disconnect from 10.30.104.4 port 52264:11: Closed due to user request. [preauth]
Aug 12 20:37:08 prd-ubuntu1804-docker-8c-8g-34850 sshd[1807]: Disconnected from invalid user jenkins 10.30.104.4 port 52264 [preauth]
Aug 12 20:37:10 prd-ubuntu1804-docker-8c-8g-34850 sshd[1809]: Invalid user jenkins from 10.30.104.4 port 52282
Aug 12 20:37:10 prd-ubuntu1804-docker-8c-8g-34850 sshd[1809]: Received disconnect from 10.30.104.4 port 52282:11: Closed due to user request. [preauth]
Aug 12 20:37:10 prd-ubuntu1804-docker-8c-8g-34850 sshd[1809]: Disconnected from invalid user jenkins 10.30.104.4 port 52282 [preauth]
Aug 12 20:37:12 prd-ubuntu1804-docker-8c-8g-34850 sshd[1811]: Invalid user jenkins from 10.30.104.4 port 52320
Aug 12 20:37:12 prd-ubuntu1804-docker-8c-8g-34850 sshd[1811]: Received disconnect from 10.30.104.4 port 52320:11: Closed due to user request. [preauth]
Aug 12 20:37:12 prd-ubuntu1804-docker-8c-8g-34850 sshd[1811]: Disconnected from invalid user jenkins 10.30.104.4 port 52320 [preauth]
Aug 12 20:37:15 prd-ubuntu1804-docker-8c-8g-34850 sshd[1813]: Invalid user jenkins from 10.30.104.4 port 52348
Aug 12 20:37:16 prd-ubuntu1804-docker-8c-8g-34850 sshd[1813]: Received disconnect from 10.30.104.4 port 52348:11: Closed due to user request. [preauth]
Aug 12 20:37:16 prd-ubuntu1804-docker-8c-8g-34850 sshd[1813]: Disconnected from invalid user jenkins 10.30.104.4 port 52348 [preauth]
Aug 12 20:37:18 prd-ubuntu1804-docker-8c-8g-34850 sshd[1815]: Invalid user jenkins from 10.30.104.4 port 52396
Aug 12 20:37:18 prd-ubuntu1804-docker-8c-8g-34850 sshd[1815]: Received disconnect from 10.30.104.4 port 52396:11: Closed due to user request. [preauth]
Aug 12 20:37:18 prd-ubuntu1804-docker-8c-8g-34850 sshd[1815]: Disconnected from invalid user jenkins 10.30.104.4 port 52396 [preauth]
Aug 12 20:37:20 prd-ubuntu1804-docker-8c-8g-34850 sshd[1817]: Invalid user jenkins from 10.30.104.4 port 52428
Aug 12 20:37:20 prd-ubuntu1804-docker-8c-8g-34850 sshd[1817]: Received disconnect from 10.30.104.4 port 52428:11: Closed due to user request. [preauth]
Aug 12 20:37:20 prd-ubuntu1804-docker-8c-8g-34850 sshd[1817]: Disconnected from invalid user jenkins 10.30.104.4 port 52428 [preauth]
Aug 12 20:37:22 prd-ubuntu1804-docker-8c-8g-34850 sshd[1819]: Invalid user jenkins from 10.30.104.4 port 52466
Aug 12 20:37:27 prd-ubuntu1804-docker-8c-8g-34850 sshd[1819]: Received disconnect from 10.30.104.4 port 52466:11: Closed due to user request. [preauth]
Aug 12 20:37:27 prd-ubuntu1804-docker-8c-8g-34850 sshd[1819]: Disconnected from invalid user jenkins 10.30.104.4 port 52466 [preauth]
Aug 12 20:37:29 prd-ubuntu1804-docker-8c-8g-34850 sshd[1821]: Invalid user jenkins from 10.30.104.4 port 52566
Aug 12 20:37:29 prd-ubuntu1804-docker-8c-8g-34850 sshd[1821]: Received disconnect from 10.30.104.4 port 52566:11: Closed due to user request. [preauth]
Aug 12 20:37:29 prd-ubuntu1804-docker-8c-8g-34850 sshd[1821]: Disconnected from invalid user jenkins 10.30.104.4 port 52566 [preauth]
Aug 12 20:37:31 prd-ubuntu1804-docker-8c-8g-34850 sshd[1823]: Invalid user jenkins from 10.30.104.4 port 52598
Aug 12 20:37:31 prd-ubuntu1804-docker-8c-8g-34850 sshd[1823]: Received disconnect from 10.30.104.4 port 52598:11: Closed due to user request. [preauth]
Aug 12 20:37:31 prd-ubuntu1804-docker-8c-8g-34850 sshd[1823]: Disconnected from invalid user jenkins 10.30.104.4 port 52598 [preauth]
Aug 12 20:37:32 prd-ubuntu1804-docker-8c-8g-34850 useradd[1843]: new group: name=jenkins, GID=1001
Aug 12 20:37:32 prd-ubuntu1804-docker-8c-8g-34850 useradd[1843]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash
Aug 12 20:37:33 prd-ubuntu1804-docker-8c-8g-34850 sshd[1844]: Invalid user jenkins from 10.30.104.4 port 52622
Aug 12 20:37:33 prd-ubuntu1804-docker-8c-8g-34850 sshd[1844]: Received disconnect from 10.30.104.4 port 52622:11: Closed due to user request. [preauth]
Aug 12 20:37:33 prd-ubuntu1804-docker-8c-8g-34850 sshd[1844]: Disconnected from invalid user jenkins 10.30.104.4 port 52622 [preauth]
Aug 12 20:37:36 prd-ubuntu1804-docker-8c-8g-34850 sshd[1846]: Received disconnect from 10.30.104.4 port 52652:11: Closed due to user request. [preauth]
Aug 12 20:37:36 prd-ubuntu1804-docker-8c-8g-34850 sshd[1846]: Disconnected from authenticating user jenkins 10.30.104.4 port 52652 [preauth]
Aug 12 20:37:38 prd-ubuntu1804-docker-8c-8g-34850 sshd[1848]: Received disconnect from 10.30.104.4 port 52686:11: Closed due to user request. [preauth]
Aug 12 20:37:38 prd-ubuntu1804-docker-8c-8g-34850 sshd[1848]: Disconnected from authenticating user jenkins 10.30.104.4 port 52686 [preauth]
Aug 12 20:37:39 prd-ubuntu1804-docker-8c-8g-34850 usermod[1856]: add 'jenkins' to group 'docker'
Aug 12 20:37:39 prd-ubuntu1804-docker-8c-8g-34850 usermod[1856]: add 'jenkins' to shadow group 'docker'
Aug 12 20:37:40 prd-ubuntu1804-docker-8c-8g-34850 sshd[1857]: Received disconnect from 10.30.104.4 port 52708:11: Closed due to user request. [preauth]
Aug 12 20:37:40 prd-ubuntu1804-docker-8c-8g-34850 sshd[1857]: Disconnected from authenticating user jenkins 10.30.104.4 port 52708 [preauth]
Aug 12 20:37:42 prd-ubuntu1804-docker-8c-8g-34850 sshd[1919]: Accepted publickey for jenkins from 10.30.104.4 port 52734 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Aug 12 20:37:42 prd-ubuntu1804-docker-8c-8g-34850 sshd[1919]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Aug 12 20:37:42 prd-ubuntu1804-docker-8c-8g-34850 systemd-logind[1048]: New session 2 of user jenkins.
Aug 12 20:37:42 prd-ubuntu1804-docker-8c-8g-34850 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Aug 12 20:38:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[2464]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:38:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[2464]: pam_unix(cron:session): session closed for user root
Aug 12 20:39:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[2535]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:39:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[2535]: pam_unix(cron:session): session closed for user root
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1
Aug 12 20:39:18 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:19 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:20 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/bin/rm -rf /w/workspace/policy-api-master-project-csit-verify-api/csit/archives/api
Aug 12 20:39:20 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:20 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:21 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/bin/mkdir -p /usr/local/lib/docker/cli-plugins
Aug 12 20:39:21 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:21 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:21 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/usr/bin/curl -SL https://github.com/docker/compose/releases/download/v2.29.1/docker-compose-linux-x86_64 -o /usr/local/lib/docker/cli-plugins/docker-compose
Aug 12 20:39:21 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:22 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:39:22 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/bin/chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
Aug 12 20:39:22 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 12 20:39:22 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session closed for user root
Aug 12 20:40:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[3617]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:40:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[3617]: pam_unix(cron:session): session closed for user root
Aug 12 20:41:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[4958]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:41:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[4958]: pam_unix(cron:session): session closed for user root
Aug 12 20:42:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[7189]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:42:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[7189]: pam_unix(cron:session): session closed for user root
Aug 12 20:43:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[9140]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:43:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[9140]: pam_unix(cron:session): session closed for user root
Aug 12 20:44:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[9153]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 12 20:44:01 prd-ubuntu1804-docker-8c-8g-34850 CRON[9153]: pam_unix(cron:session): session closed for user root
Aug 12 20:44:45 prd-ubuntu1804-docker-8c-8g-34850 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/policy-api-master-project-csit-verify-api ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp
Aug 12 20:44:45 prd-ubuntu1804-docker-8c-8g-34850 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)