r root by (uid=0)
2016-08-16T18:29:59.087600-07:00 INFO sshd[19391]: pam_unix(sshd:session): session closed for user root
2016-08-16T18:29:59.174075-07:00 INFO sshd[19538]: pam_unix(sshd:session): session opened for user root by (uid=0)
