tokens: The Pi ( and almost any Linux distribution ) writes those events to the /var/log/wtmp file ( more about that file here ) .
ner_tags: O B-Device O O O O B-Operating_System O O O O O O O B-File_Name O O O O O O O O O