{ "_event_score": 0, "arguments": { "pid": 4294967295 }, "header": { "event_id": 43060, "event_modifier": 0, "event_name": "AUE_WAIT4", "time_milliseconds_offset": 671, "time_seconds_epoch": 1570154832, "version": 11 }, "host_info": { "host_name": "Dan_macbook_pro", "host_uuid": "3F6E4B3A-9285-4E7E-9A0C-C3B62DC379DF", "osversion": "Version 10.14.6 (Build 18G95)", "primary_mac_address": "38:f9:e8:15:5a:82", "serial_number": "C03XY889JHG3" }, "identity": { "cd_hash": "05ed42ef5e67e41ab135b8f24b59f7b42e9b324d", "signer_id": "com.apple.zsh", "signer_id_truncated": 0, "signer_type": 1, "team_id": "", "team_id_truncated": 0 }, "return": { "description": "failure : No child processes", "error": 10, "return_value": 4294967295 }, "subject": { "audit_id": 502, "audit_user_name": "dan", "effective_group_id": 20, "effective_group_name": "staff", "effective_user_id": 502, "effective_user_name": "dan", "group_id": 20, "group_name": "staff", "process_hash": "333153896BB2AFB5C0363D381A30D47ECF87243F", "process_id": 30537, "process_name": "/bin/zsh", "session_id": 100011, "terminal_id": { "addr": [ 0 ], "ip_address": "0.0.0.0", "port": 50331650, "type": 0 }, "user_id": 502, "user_name": "dan" } }