In /var/log/messages, I am getting like this & their is no syslog file in /var/log
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_ACQ msg=audit(1645066801.386:64903): pid=5443 uid=0 auid=4294967295 ses=4294967295 su
bj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? term
inal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=LOGIN msg=audit(1645066801.387:64904): pid=5443 uid=0 subj=system_u:system_r:crond_t:s0-s0
:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=7125 res=1
Feb 16 21:00:01 vm0pnelkdaa0001 systemd: Created slice User Slice of root.
Feb 16 21:00:01 vm0pnelkdaa0001 systemd: Started Session 7121 of user root.
Feb 16 21:00:01 vm0pnelkdaa0001 systemd: Started Session 7122 of user root.
Feb 16 21:00:01 vm0pnelkdaa0001 systemd: Started Session 7123 of user root.
Feb 16 21:00:01 vm0pnelkdaa0001 systemd: Started Session 7124 of user root.
Feb 16 21:00:01 vm0pnelkdaa0001 systemd: Started Session 7125 of user root.
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_START msg=audit(1645066801.419:64905): pid=5444 uid=0 auid=0 ses=7121 subj=system_u:s
ystem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_START msg=audit(1645066801.419:64906): pid=5446 uid=0 auid=0 ses=7122 subj=system_u:s
ystem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_START msg=audit(1645066801.420:64907): pid=5447 uid=0 auid=0 ses=7123 subj=system_u:s
ystem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_START msg=audit(1645066801.420:64908): pid=5445 uid=0 auid=0 ses=7124 subj=system_u:s
ystem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_START msg=audit(1645066801.420:64909): pid=5443 uid=0 auid=0 ses=7125 subj=system_u:s
ystem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_REFR msg=audit(1645066801.421:64910): pid=5446 uid=0 auid=0 ses=7122 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_REFR msg=audit(1645066801.421:64911): pid=5444 uid=0 auid=0 ses=7121 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_REFR msg=audit(1645066801.421:64912): pid=5445 uid=0 auid=0 ses=7124 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_REFR msg=audit(1645066801.421:64913): pid=5443 uid=0 auid=0 ses=7125 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_REFR msg=audit(1645066801.422:64914): pid=5447 uid=0 auid=0 ses=7123 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_DISP msg=audit(1645066801.432:64915): pid=5445 uid=0 auid=0 ses=7124 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_DISP msg=audit(1645066801.433:64916): pid=5444 uid=0 auid=0 ses=7121 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_END msg=audit(1645066801.434:64917): pid=5445 uid=0 auid=0 ses=7124 subj=system_u:sys
tem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_END msg=audit(1645066801.435:64918): pid=5444 uid=0 auid=0 ses=7121 subj=system_u:sys
tem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_DISP msg=audit(1645066801.436:64919): pid=5446 uid=0 auid=0 ses=7122 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=CRED_DISP msg=audit(1645066801.438:64920): pid=5443 uid=0 auid=0 ses=7125 subj=system_u:sy
stem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_tally2,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=
success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_END msg=audit(1645066801.440:64921): pid=5446 uid=0 auid=0 ses=7122 subj=system_u:sys
tem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:01 vm0pnelkdaa0001 audispd: node=vm0pnelkdaa0001 type=USER_END msg=audit(1645066801.443:64922): pid=5443 uid=0 auid=0 ses=7125 subj=system_u:sys
tem_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=?
addr=? terminal=cron res=success'
Feb 16 21:00:54 vm0pnelkdaa0001 sshd[6388]: Did not receive identification string from 142.136.105.187 port 51318