WitFoo-Artifact ::: tags=["result=success","reason=user_approved"] ::: localIP=136.22.15.50 ::: message={"access_device":{"epkey":"EP1HI4JDUI4SE65F1LVA","hostname":null,"ip":"36.42.119.201","location":{"city":"Aldie","country":"United States","state":"Virginia"}},"alias":"","application":{"key":"DI5NR1TYEZ6N0Y46F8AN","name":"LastPass"},"auth_device":{"ip":"136.22.15.50","key":"DP670W5L7EHRPZYSRYIN","location":{"city":"Brooklyn","country":"United States","state":"New York"},"name":"703-459-0549"},"email":"bob@oscorputilities.com","event_type":"authentication","factor":"duo_push","isotimestamp":"2023-10-29T19:01:38.453209+00:00","ood_software":null,"reason":"user_approved","result":"success","timestamp":1698606098,"trusted_endpoint_status":"unknown","txid":"e2203256-76ea-4e79-9957-61e769a0f705","user":{"groups":[],"key":"DUNRXCFGBTAY1AR7A5AG","name":"bob"}} ::: clientIP=36.42.119.201 ::: userName=bob ::: created_at=1698606098 ::: streamName=DUO ::: application=LastPass ::: messageType=credential_access ::: pipelineName=DUO ::: severityCode=2 ::: startTimeUTC=1698606098 ::: clientHostname=703-459-0549 ::: pipelineEntrypoint=dispatch
{
    "application": "LastPass",
    "clienthostname": "703-459-0549",
    "localip": "136.22.15.50",
    "message": "WitFoo-Artifact ::: tags=[\"result=success\",\"reason=user_approved\"] ::: localIP=136.22.15.50 ::: message={\"access_device\":{\"epkey\":\"EP1HI4JDUI4SE65F1LVA\",\"hostname\":null,\"ip\":\"36.42.119.201\",\"location\":{\"city\":\"Aldie\",\"country\":\"United States\",\"state\":\"Virginia\"}},\"alias\":\"\",\"application\":{\"key\":\"DI5NR1TYEZ6N0Y46F8AN\",\"name\":\"LastPass\"},\"auth_device\":{\"ip\":\"136.22.15.50\",\"key\":\"DP670W5L7EHRPZYSRYIN\",\"location\":{\"city\":\"Brooklyn\",\"country\":\"United States\",\"state\":\"New York\"},\"name\":\"703-459-0549\"},\"email\":\"bob@oscorputilities.com\",\"event_type\":\"authentication\",\"factor\":\"duo_push\",\"isotimestamp\":\"2023-10-29T19:01:38.453209+00:00\",\"ood_software\":null,\"reason\":\"user_approved\",\"result\":\"success\",\"timestamp\":1698606098,\"trusted_endpoint_status\":\"unknown\",\"txid\":\"e2203256-76ea-4e79-9957-61e769a0f705\",\"user\":{\"groups\":[],\"key\":\"DUNRXCFGBTAY1AR7A5AG\",\"name\":\"bob\"}} ::: clientIP=36.42.119.201 ::: userName=bob ::: created_at=1698606098 ::: streamName=DUO ::: application=LastPass ::: messageType=credential_access ::: pipelineName=DUO ::: severityCode=2 ::: startTimeUTC=1698606098 ::: clientHostname=703-459-0549 ::: pipelineEntrypoint=dispatch",
    "messagetype": "credential_access",
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "starttimeutc": "1698606098",
    "tags": [
        "result=success",
        "reason=user_approved",
        "DUO",
        "credential_access"
    ],
    "streamName": "DUO",
    "clientIP": "36.42.119.201",
    "userName": "bob"
}