The text 28eeea2e6947, as Debian 12 (Bookworm) shipped it.
search for field name
auparse_find_field(3) on Linux now
