WitFoo-Artifact ::: userName=nighthawk ::: program=microsoft_graph ::: tags=[mail=Administration@acme.org,jobTitle=Administration Mailbox,givenName=Administration Mailbox,displayName=Administration Mailbox,officeLocation=ACME] ::: messageType=asset_inventory ::: message={"businessPhones":[],"displayName":"Administration Mailbox","givenName":"Administration Mailbox","id":"eb35be06-6242-42be-a47b-3b83bd7b7c06","jobTitle":"Administration Mailbox","mail":"Administration@acme.org","mobilePhone":null,"officeLocation":"ACME","preferredLanguage":null,"surname":null,"userPrincipalName":"nighthawk"} ::: streamName=Microsoft Graph Asset Inventory
{
    "fieldExtractorName": "custom_artifact",
    "message": "WitFoo-Artifact ::: userName=nighthawk ::: program=microsoft_graph ::: tags=[mail=Administration@acme.org,jobTitle=Administration Mailbox,givenName=Administration Mailbox,displayName=Administration Mailbox,officeLocation=ACME] ::: messageType=asset_inventory ::: message={\"businessPhones\":[],\"displayName\":\"Administration Mailbox\",\"givenName\":\"Administration Mailbox\",\"id\":\"eb35be06-6242-42be-a47b-3b83bd7b7c06\",\"jobTitle\":\"Administration Mailbox\",\"mail\":\"Administration@acme.org\",\"mobilePhone\":null,\"officeLocation\":\"ACME\",\"preferredLanguage\":null,\"surname\":null,\"userPrincipalName\":\"nighthawk\"} ::: streamName=Microsoft Graph Asset Inventory",
    "messageType": "asset_inventory",
    "program": "microsoft_graph",
    "senderHost": "WitFoo-Streamer2.uwca.org",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "Microsoft Graph Asset Inventory",
    "tags": [
        "mail=Administration@uwca.org",
        "givenName=Administration Mailbox",
        "officeLocation=UWCA",
        "jobTitle=Administration Mailbox",
        "Microsoft Graph Asset Inventory",
        "displayName=Administration Mailbox",
        "asset_inventory"
    ],
    "userName": "nighthawk"
}