add parser-specific docs & rewrite sudo parser for journald