<110>2024-07-27T00:00:01.000-04:00 Nordc-app-Dell ADAuditPlus:  [ Category = ADAPAlerts ]  [ UNIQUE_ID = 227731 ]  [ ALERT_PROFILE = Unusual Activity -Logon Time on Host  ]  [ REPORT_PROFILE = AD Analytics ]  [ SEVERITY = 2 ]  [ TIME_GENERATED = 1722052801 ]  [ FORMAT_MESSAGE = Logon activity was done on nordc-app-cynet.wayne.com within 12-1 AM which deviates from host's normal Logon activity hours:6 AM-10 PM. Anomaly category:Unusual Activity -Logon Time on Host  ]  [ SOURCE = User Behaviour Analytics ]  [ DOMAIN = wayne.com ] 
This is a syslog message from a product called ManageEngine ADManager by ManageEngine. The following fields were extracted from the message:
facilityCode: 13
facilityLabel: log audit
fieldExtractorName: ad_audit_plus
localHostname: Nordc-app-Dell
localStartTime: 2024-07-27T00:00:01.000-04:00
messageType: audit_log
priority: 110
program: ADAuditPlus
senderHost: 192.168.10.233
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: ad_audit_plus
tags: ['rfc3164', 'ad_audit_plus', 'audit_log']