000001 nobody 1 root 0 somehost id /var/log/sudo-io %%{bogus} /var/log/sudo-io %%{bogus} 000001 nobody 1 root 0 somehost id /var/log/sudo-io %%{seq} /var/log/sudo-io %%{seq} 000001 nobody 1 root 0 somehost id /var/log/sudo-io %{seq} /var/log/sudo-io 00/00/01 000001 nobody 1 root 0 somehost id /var/log/sudo-io/%{user} %{seq} /var/log/sudo-io/nobody 00/00/01 000001 nobody 1 root 0 somehost su /var/log/sudo-io/%{user}/%{runas_user} %{command}_%Y%m%s_%H%M /var/log/sudo-io/nobody/root su_%Y%m%s_%H%M 000001 nobody 1 root 0 somehost su /var/log/sudo-io/ /%{user}/%{runas_user}/%{command}_%Y%m%s_%H%M /var/log/sudo-io nobody/root/su_%Y%m%s_%H%M 000001 nobody 1 root 0 somehost su /var/log/sudo-io/%d%m%Y %{user}/%{runas_user}/%{command} /var/log/sudo-io/%d%m%Y nobody/root/su 000001 nobody 1 root 0 somehost su //////// %{user}/%{runas_user}/%{command} / nobody/root/su