WitFoo-Artifact ::: streamName=DUO Asset Inventory ::: program=cisco_duo ::: userName=janedoe ::: messageType=asset_inventory ::: message={"alias1":"!brohrer","alias2":"janedoe","alias3":null,"alias4":null,"aliases":{"alias1":"!brohrer","alias2":"janedoe"},"created":1597072656,"desktoptokens":[],"email":"janedoe","enable_auto_prompt":true,"firstname":"","groups":[],"is_enrolled":true,"last_directory_sync":null,"last_login":1721909207,"lastname":"","lockout_reason":null,"notes":"","phones":[{"activated":true,"capabilities":["auto","push","sms","phone","mobile_otp"],"extension":"","last_seen":"2024-07-26T11:05:42","model":"Apple iPhone 12 Pro","name":"","number":"+14123709347","phone_id":"DPSH5S416UGQQL9GWA6G","platform":"Apple iOS","postdelay":"0","predelay":"0","sms_passcodes_sent":false,"type":"Mobile"}],"realname":"Brian Rohrer","status":"active","tokens":[],"u2ftokens":[],"user_id":"DUJCLW3N9SAXF4WG6Y0A","username":"brohrer","webauthncredentials":[]}
{
    "fieldExtractorName": "custom_artifact",
    "message": "WitFoo-Artifact ::: streamName=DUO Asset Inventory ::: program=cisco_duo ::: userName=janedoe ::: messageType=asset_inventory ::: message={\"alias1\":\"!brohrer\",\"alias2\":\"janedoe\",\"alias3\":null,\"alias4\":null,\"aliases\":{\"alias1\":\"!brohrer\",\"alias2\":\"janedoe\"},\"created\":1597072656,\"desktoptokens\":[],\"email\":\"janedoe\",\"enable_auto_prompt\":true,\"firstname\":\"\",\"groups\":[],\"is_enrolled\":true,\"last_directory_sync\":null,\"last_login\":1721909207,\"lastname\":\"\",\"lockout_reason\":null,\"notes\":\"\",\"phones\":[{\"activated\":true,\"capabilities\":[\"auto\",\"push\",\"sms\",\"phone\",\"mobile_otp\"],\"extension\":\"\",\"last_seen\":\"2024-07-26T11:05:42\",\"model\":\"Apple iPhone 12 Pro\",\"name\":\"\",\"number\":\"+14123709347\",\"phone_id\":\"DPSH5S416UGQQL9GWA6G\",\"platform\":\"Apple iOS\",\"postdelay\":\"0\",\"predelay\":\"0\",\"sms_passcodes_sent\":false,\"type\":\"Mobile\"}],\"realname\":\"Brian Rohrer\",\"status\":\"active\",\"tokens\":[],\"u2ftokens\":[],\"user_id\":\"DUJCLW3N9SAXF4WG6Y0A\",\"username\":\"brohrer\",\"webauthncredentials\":[]}",
    "messageType": "asset_inventory",
    "program": "cisco_duo",
    "senderHost": "kafka.precinct",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "DUO Asset Inventory",
    "tags": [
        "DUO Asset Inventory",
        "asset_inventory"
    ],
    "userName": "janedoe"
}