2017-03-06 17:27:13 [root:groupadd] cyrus(60)
2017-03-06 17:27:13 [root:useradd] cyrus(60):cyrus(60):the cyrus mail server:/nonexistent:/usr/sbin/nologin
2017-03-06 17:27:26 [root:groupadd] messagebus(556)
2017-03-06 17:27:26 [root:useradd] messagebus(556):messagebus(556):D-BUS Daemon User:/nonexistent:/usr/sbin/nologin
2017-03-06 17:27:27 [root:groupadd] _tss(601)
2017-03-06 17:27:27 [root:useradd] _tss(601):_tss(601):TrouSerS user:/var/empty:/usr/sbin/nologin
2017-03-06 17:28:43 [root:groupadd] stunnel(341)
2017-03-06 17:28:43 [root:useradd] stunnel(341):stunnel(341):Stunnel Daemon:/nonexistent:/usr/sbin/nologin
2017-03-06 17:28:45 [root:groupadd] consul(469)
2017-03-06 17:28:45 [root:useradd] consul(469):consul(469):Consul Daemon:/var/tmp/consul:/usr/sbin/nologin
2017-03-06 17:28:51 [root:groupadd] ladvd(142)
2017-03-06 17:28:51 [root:useradd] ladvd(142):ladvd(142):Ladvd User:/var/empty:/usr/sbin/nologin
2017-03-06 17:28:52 [root:groupadd] git_daemon(964)
2017-03-06 17:28:52 [root:useradd] git_daemon(964):git_daemon(964):git daemon:/nonexistent:/usr/sbin/nologin
2017-03-06 17:28:56 [root:groupadd] nomad(472)
2017-03-06 17:28:56 [root:useradd] nomad(472):nomad(472):Nomad Daemon:/var/tmp/nomad:/usr/sbin/nologin
2017-03-06 17:28:57 [root:groupadd] vault(471)
2017-03-06 17:28:57 [root:useradd] vault(471):vault(471):Vault Daemon:/nonexistent:/usr/sbin/nologin
2017-04-18 12:09:24 [unknown:groupadd] neo(1002)
2017-04-18 12:09:24 [unknown:useradd] neo(1002):neo(1002):neo:/nonexistent:/bin/csh
2017-04-18 12:10:15 [unknown:groupadd] Admin(1003)
2017-04-18 12:10:15 [unknown:useradd] Admin(1003):Admin(1003):Admin:/nonexistent:/bin/csh
2017-04-18 12:12:45 [unknown:userdel] Admin(1003) account removed
2017-04-18 12:12:54 [unknown:userdel] neo(1002) account removed
2017-04-18 12:39:04 [unknown:groupdel] admin(18446744073709551615) removed
