Working with JSON logs from sudo in syslog-ng