"auditType.category":Global\ administration "auditType.action":SSH\ settings\ changed