TST: end of json in sshd sample log