$37$ ip$-10-77-20-248$ systemd$-$logind$[1118]$: New session $72$ of user elastic$\_$user$\_5.$

Mar $2911$:$37$:$37$ ip$-10-77-20-248$ sshd$[1510]$: User child is on pid $1549$

Mar $2911$:$37$:$37$ ip$-10-77-20-248$ sshd$[1549]$: Starting session: command for elastic$\_$user$\_5$ from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50697$ id $0$

Mar $2911$:$37$:$37$ ip$-10-77-20-248$ sshd$[1549]$: Received disconnect from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50697$:$11$: disconnected by user

Mar $2911$:$37$:$37$ ip$-10-77-20-248$ sshd$[1549]$: Disconnected from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50697$

Mar $2911$:$37$:$37$ ip$-10-77-20-248$ sshd$[1510]$: pam$\_$unix$($sshd:session$)$: session closed for user elastic$\_$user$\_5$

Mar $2911$:$37$:$37$ ip$-10-77-20-248$ systemd$-$logind$[1118]$: Removed session $72.$

Mar $2911$:$37$:$49$ ip$-10-77-20-248$ sshd$[1558]$: Connection from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50699$ on $10\mathrm{.}77\mathrm{.}20\mathrm{.}248$ port $2222$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1558]$: Failed publickey for elastic$\_$user$\_8$ from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50699$ ssh$2$: RSA SHA$256$:aC$2$UQe$4$piBfaFwr$2$ne$0$PItnl$9$AcHqZOYrWjDmqpOzvE

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1558]$: Accepted password for elastic$\_$user$\_8$ from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50699$ ssh$2$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1558]$: pam$\_$unix$($sshd:session$)$: session opened for user elastic$\_$user$\_8$ by $($uid$=0)$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ systemd: pam$\_$unix$($systemd$-$user:session$)$: session opened for user elastic$\_$user$\_8$ by $($uid$=0)$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ systemd$-$logind$[1118]$: New session $73$ of user elastic$\_$user$\_8.$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1558]$: User child is on pid $1597$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1597]$: Starting session: command for elastic$\_$user$\_8$ from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50699$ id $0$

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1597]$: Received disconnect from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50699$:$11$: disconnected by user

Mar $2911$:$37$:$50$ ip$-10-77-20-248$ sshd$[1597]$: Disconnected from $85\mathrm{.}245\mathrm{.}107\mathrm{.}41$ port $50699$

What would these entries from a data log reveal during an audit?