line1.timestamp Jan 12 14:23:45
line1.hostname myhost
line1.process sshd
line1.pid 1234
line1.message Accepted publickey for user from 10.0.0.1 port 22 ssh2
line2.timestamp Jan 12 14:24:01
line2.hostname myhost
line2.process cron
line2.pid 5678
line2.message (root) CMD (/usr/bin/daily-backup)
line3.timestamp Jan 12 14:25:30
line3.hostname myhost
line3.process kernel
line3.message [12345.678] eth0: link up
