cool @alessandrogario. is the format of the records consistent enough that it would make sense to extract the fields into the schema of the

selinux_events

table?