WitFoo-WinLogBeat ::: {"@metadata":{"beat":"winlogbeat","type":"_doc","version":"8.2.2"},"@timestamp":"2024-07-27T04:13:25.136Z","agent":{"ephemeral_id":"ab1e4ccc-2721-4aa9-b662-8e08f3285487","id":"c77891b6-1d2f-4342-896c-2060ec8843a0","name":"NORDC-DW01","type":"winlogbeat","version":"8.2.2"},"ecs":{"version":"8.0.0"},"event":{"action":"Backup","code":"18265","created":"2024-07-27T04:13:25.546Z","kind":"event","provider":"MSSQLSERVER"},"host":{"name":"NORDC-DW01.stark.com"},"log":{"level":"information"},"message":"Log was backed up. Database: model, creation date(time): 2003/04/08(09:13:36), first LSN: 96:22640:1, last LSN: 96:22760:1, number of dump devices: 1, device information: (FILE=1, TYPE=VIRTUAL_DEVICE: {'{0C1EBAC5-634F-4E82-89E8-A95D7860BADE}'}). This is an informational message only. No user action is required.","organization":"stark","senderHost":"192.168.15.23","sensitivity":"normal","winlog":{"api":"wineventlog","channel":"Application","computer_name":"NORDC-DW01.stark.com","event_data":{"Binary":"594700000A0000000B0000004E004F005200440043002D0044005700300031000000070000006D00610073007400650072000000","param1":"model","param2":"2003/04/08","param3":"09:13:36","param4":"96:22640:1","param5":"96:22760:1","param6":"1","param7":"FILE=1, TYPE=VIRTUAL_DEVICE: {'{0C1EBAC5-634F-4E82-89E8-A95D7860BADE}'}"},"event_id":"18265","keywords":["Classic"],"provider_name":"MSSQLSERVER","record_id":480719,"task":"Backup","user":{"domain":"MDS-ATL","identifier":"S-1-5-21-1725571127-999974082-2044928816-27041","name":"cohesitysvc","type":"User"}}}
Product: mssqlserver
Vendor: mssqlserver