1006 <6> 2024-07-26T19:39:58Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722022787-104963-12675-11495-1","src_ip":"104.47.66.41","hdr_from":"Michaela Brooke \u003cmichaela.brooke@oscorp.org\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mail-mw2nam12lp2041.outbound.protection.outlook.com","attoscorpments":[{"name":"Outlook-mcldgrxi.jpg"},{"name":"Outlook-gawd5tl1.jpg"},{"name":"IMG_1380.jpg"},{"name":"Outlook-0icbkn3f.jpg"}],"recipients":[{"action":"allowed","reason":"content_subject","reason_extra":"COVID","delivered":"delivered","delivery_detail":"142.250.111.26:25:250 2.0.0 OK  1722022795 af79cd13be357-7a1d7445a56si490587885a.371 - gsmtp","email":"densonwillis@gmail.com","taxonomy":"policy"}],"hdr_to":"Ann Willis \u003cdensonwillis@gmail.com\u003e","recipient_count":1,"dst_domain":"oscorp.org","size":4180400,"subject":"Re: COVID19 Response Introduction","env_from":"michaela.brooke@oscorp.org","timestamp":"2024-07-26T19:39:55+0000","geoip":"","tls":true}
This is a syslog message from a product called Barracuda ESS by Barracuda. The following fields were extracted from the message:
fieldExtractorName: barracuda_ess
messageType: email_protection
senderHost: egress.ess.barracudanetworks.com
sensitivity: normal
sourceInfo: unknown
streamName: barracuda_ess
tags: ['barracuda_ess', 'email_protection']