WitFoo-Artifact ::: message={"actor":{"alternateId":"janedoe","detailEntry":null,"displayName":"IT Support","id":"00u176suj2KgPRj9K697","type":"User"},"authenticationContext":{"authenticationProvider":"ACTIVE_DIRECTORY","authenticationStep":0,"credentialProvider":null,"credentialType":"PASSWORD","externalSessionId":"trsrVw-oMzMQYSdlrdq5uXeuA","interface":null,"issuer":null},"client":{"device":"Computer","geographicalContext":{"city":"Irvine","country":"United States","geolocation":{"lat":33.6564,"lon":-117.8245},"postalCode":"92612","state":"California"},"id":"cappT0Hfy97F1BoO1UTR","ipAddress":"252.177.51.159","userAgent":{"browser":"UNKNOWN","os":"Windows 8","rawUserAgent":"Okta AD Agent/3.16.1 (Microsoft Windows NT 6.2.9200.0; .NET CLR 4.0.30319.42000; 64-bit OS; 64-bit Process; sslpinning=disabled)"},"zone":"null"},"debugContext":{"debugData":{"dtHash":"2b67c5b1387816afe388f836400e7ad438e048eaabca36b9ea1eceaa1f0f5f1f","requestId":"5bbecfea3a028874187139773a599b69","requestUri":"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a532lo6a4sAZS1Lht697/actionResult","url":"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a532lo6a4sAZS1Lht697/actionResult?responseId=24b40c55-42d1-4192-a8a8-c5f5b2b24de6"}},"device":null,"displayMessage":"Authenticate user with AD agent","eventType":"user.authentication.auth_via_AD_agent","legacyEventType":"app.ad.agent.user_auth.error","outcome":{"reason":"Login Failed","result":"FAILURE"},"published":"2024-02-20T19:59:15.455Z","request":{"ipChain":[{"geographicalContext":{"city":"Irvine","country":"United States","geolocation":{"lat":33.6564,"lon":-117.8245},"postalCode":"92612","state":"California"},"ip":"252.177.51.159","source":null,"version":"V4"}]},"securityContext":{"asNumber":174,"asOrg":"psinet  inc.","domain":".","isProxy":false,"isp":"cogent communications"},"severity":"ERROR","target":[{"alternateId":"SDPB.LOCAL","detailEntry":null,"displayName":"Active Directory","id":"0oa16yxhp6iUzuI2b697","type":"AppInstance"}],"transaction":{"detail":{"requestApiTokenId":"00Tb3jwyxdZ9wzFyO696"},"id":"5bbecfea3a028874187139773a599b69","type":"WEB"},"uuid":"863f1939-d02a-11ee-8e67-6f50371e48a2","version":"0"} ::: clientIP=252.177.51.159 ::: streamName=Okta ::: program=okta ::: messageType=auth_failure ::: severityLabel=ERROR ::: action=FAILURE ::: userName=janedoe ::: severityCode=2 ::: clientGUID=cappT0Hfy97F1BoO1UTR
{
    "action": "FAILURE",
    "clientguid": "cappT0Hfy97F1BoO1UTR",
    "message": "WitFoo-Artifact ::: message={\"actor\":{\"alternateId\":\"janedoe\",\"detailEntry\":null,\"displayName\":\"IT Support\",\"id\":\"00u176suj2KgPRj9K697\",\"type\":\"User\"},\"authenticationContext\":{\"authenticationProvider\":\"ACTIVE_DIRECTORY\",\"authenticationStep\":0,\"credentialProvider\":null,\"credentialType\":\"PASSWORD\",\"externalSessionId\":\"trsrVw-oMzMQYSdlrdq5uXeuA\",\"interface\":null,\"issuer\":null},\"client\":{\"device\":\"Computer\",\"geographicalContext\":{\"city\":\"Irvine\",\"country\":\"United States\",\"geolocation\":{\"lat\":33.6564,\"lon\":-117.8245},\"postalCode\":\"92612\",\"state\":\"California\"},\"id\":\"cappT0Hfy97F1BoO1UTR\",\"ipAddress\":\"252.177.51.159\",\"userAgent\":{\"browser\":\"UNKNOWN\",\"os\":\"Windows 8\",\"rawUserAgent\":\"Okta AD Agent/3.16.1 (Microsoft Windows NT 6.2.9200.0; .NET CLR 4.0.30319.42000; 64-bit OS; 64-bit Process; sslpinning=disabled)\"},\"zone\":\"null\"},\"debugContext\":{\"debugData\":{\"dtHash\":\"2b67c5b1387816afe388f836400e7ad438e048eaabca36b9ea1eceaa1f0f5f1f\",\"requestId\":\"5bbecfea3a028874187139773a599b69\",\"requestUri\":\"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a532lo6a4sAZS1Lht697/actionResult\",\"url\":\"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a532lo6a4sAZS1Lht697/actionResult?responseId=24b40c55-42d1-4192-a8a8-c5f5b2b24de6\"}},\"device\":null,\"displayMessage\":\"Authenticate user with AD agent\",\"eventType\":\"user.authentication.auth_via_AD_agent\",\"legacyEventType\":\"app.ad.agent.user_auth.error\",\"outcome\":{\"reason\":\"Login Failed\",\"result\":\"FAILURE\"},\"published\":\"2024-02-20T19:59:15.455Z\",\"request\":{\"ipChain\":[{\"geographicalContext\":{\"city\":\"Irvine\",\"country\":\"United States\",\"geolocation\":{\"lat\":33.6564,\"lon\":-117.8245},\"postalCode\":\"92612\",\"state\":\"California\"},\"ip\":\"252.177.51.159\",\"source\":null,\"version\":\"V4\"}]},\"securityContext\":{\"asNumber\":174,\"asOrg\":\"psinet  inc.\",\"domain\":\".\",\"isProxy\":false,\"isp\":\"cogent communications\"},\"severity\":\"ERROR\",\"target\":[{\"alternateId\":\"SDPB.LOCAL\",\"detailEntry\":null,\"displayName\":\"Active Directory\",\"id\":\"0oa16yxhp6iUzuI2b697\",\"type\":\"AppInstance\"}],\"transaction\":{\"detail\":{\"requestApiTokenId\":\"00Tb3jwyxdZ9wzFyO696\"},\"id\":\"5bbecfea3a028874187139773a599b69\",\"type\":\"WEB\"},\"uuid\":\"863f1939-d02a-11ee-8e67-6f50371e48a2\",\"version\":\"0\"} ::: clientIP=252.177.51.159 ::: streamName=Okta ::: program=okta ::: messageType=auth_failure ::: severityLabel=ERROR ::: action=FAILURE ::: userName=janedoe ::: severityCode=2 ::: clientGUID=cappT0Hfy97F1BoO1UTR",
    "messagetype": "auth_failure",
    "productids": [
        6
    ],
    "program": "okta",
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "tags": [
        "Okta",
        "auth_failure"
    ],
    "streamName": "Okta",
    "clientIP": "252.177.51.159",
    "userName": "janedoe"
}