WitFoo-Artifact ::: action=FAILURE ::: userName=johndoe ::: message={"actor":{"alternateId":"johndoe","detailEntry":null,"displayName":"TAnderson Admin","id":"00u1768rxuCoeW0Qm697","type":"User"},"authenticationContext":{"authenticationProvider":"ACTIVE_DIRECTORY","authenticationStep":0,"credentialProvider":null,"credentialType":"PASSWORD","externalSessionId":"trsnToOpAyOSCyDueDLshNXvA","interface":null,"issuer":null},"client":{"device":"Computer","geographicalContext":{"city":"Las Vegas","country":"United States","geolocation":{"lat":36.1685,"lon":-115.1164},"postalCode":"89101","state":"Nevada"},"id":"cappT0Hfy97F1BoO1UTR","ipAddress":"121.70.153.121","userAgent":{"browser":"UNKNOWN","os":"Windows 8","rawUserAgent":"Okta AD Agent/3.16.1 (Microsoft Windows NT 6.2.9200.0; .NET CLR 4.0.30319.42000; 64-bit OS; 64-bit Process; sslpinning=disabled)"},"zone":"null"},"debugContext":{"debugData":{"dtHash":"6f9aadba8adbed6cc725293f82e786b12e8cbbf43909b90f570b2a356f6fa8ff","requestId":"909345ba8d340e18725897113229e5f6","requestUri":"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a539kiyvwggVTfYyD697/actionResult","url":"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a539kiyvwggVTfYyD697/actionResult?responseId=0ee4cacf-acb0-4426-8b5f-88cb7475ea71"}},"device":null,"displayMessage":"Authenticate user with AD agent","eventType":"user.authentication.auth_via_AD_agent","legacyEventType":"app.ad.agent.user_auth.error","outcome":{"reason":"Login Failed","result":"FAILURE"},"published":"2024-02-09T21:21:06.196Z","request":{"ipChain":[{"geographicalContext":{"city":"Las Vegas","country":"United States","geolocation":{"lat":36.1685,"lon":-115.1164},"postalCode":"89101","state":"Nevada"},"ip":"121.70.153.121","source":null,"version":"V4"}]},"securityContext":{"asNumber":174,"asOrg":"psinet  inc.","domain":"cogentco.com","isProxy":false,"isp":"cogent communications"},"severity":"ERROR","target":[{"alternateId":"SDPB.LOCAL","detailEntry":null,"displayName":"Active Directory","id":"0oa16yxhp6iUzuI2b697","type":"AppInstance"}],"transaction":{"detail":{"requestApiTokenId":"00T144bkn6dBONmdv697"},"id":"909345ba8d340e18725897113229e5f6","type":"WEB"},"uuid":"22bb7589-c791-11ee-b28a-21407b1ca606","version":"0"} ::: program=okta ::: severityCode=2 ::: clientGUID=cappT0Hfy97F1BoO1UTR ::: messageType=auth_failure ::: severityLabel=ERROR ::: clientIP=121.70.153.121 ::: streamName=Okta
{
    "action": "FAILURE",
    "clientguid": "cappT0Hfy97F1BoO1UTR",
    "message": "WitFoo-Artifact ::: action=FAILURE ::: userName=johndoe ::: message={\"actor\":{\"alternateId\":\"johndoe\",\"detailEntry\":null,\"displayName\":\"TAnderson Admin\",\"id\":\"00u1768rxuCoeW0Qm697\",\"type\":\"User\"},\"authenticationContext\":{\"authenticationProvider\":\"ACTIVE_DIRECTORY\",\"authenticationStep\":0,\"credentialProvider\":null,\"credentialType\":\"PASSWORD\",\"externalSessionId\":\"trsnToOpAyOSCyDueDLshNXvA\",\"interface\":null,\"issuer\":null},\"client\":{\"device\":\"Computer\",\"geographicalContext\":{\"city\":\"Las Vegas\",\"country\":\"United States\",\"geolocation\":{\"lat\":36.1685,\"lon\":-115.1164},\"postalCode\":\"89101\",\"state\":\"Nevada\"},\"id\":\"cappT0Hfy97F1BoO1UTR\",\"ipAddress\":\"121.70.153.121\",\"userAgent\":{\"browser\":\"UNKNOWN\",\"os\":\"Windows 8\",\"rawUserAgent\":\"Okta AD Agent/3.16.1 (Microsoft Windows NT 6.2.9200.0; .NET CLR 4.0.30319.42000; 64-bit OS; 64-bit Process; sslpinning=disabled)\"},\"zone\":\"null\"},\"debugContext\":{\"debugData\":{\"dtHash\":\"6f9aadba8adbed6cc725293f82e786b12e8cbbf43909b90f570b2a356f6fa8ff\",\"requestId\":\"909345ba8d340e18725897113229e5f6\",\"requestUri\":\"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a539kiyvwggVTfYyD697/actionResult\",\"url\":\"/api/1/internal/app/activedirectory/0oa16yxhp6iUzuI2b697/agent/a539kiyvwggVTfYyD697/actionResult?responseId=0ee4cacf-acb0-4426-8b5f-88cb7475ea71\"}},\"device\":null,\"displayMessage\":\"Authenticate user with AD agent\",\"eventType\":\"user.authentication.auth_via_AD_agent\",\"legacyEventType\":\"app.ad.agent.user_auth.error\",\"outcome\":{\"reason\":\"Login Failed\",\"result\":\"FAILURE\"},\"published\":\"2024-02-09T21:21:06.196Z\",\"request\":{\"ipChain\":[{\"geographicalContext\":{\"city\":\"Las Vegas\",\"country\":\"United States\",\"geolocation\":{\"lat\":36.1685,\"lon\":-115.1164},\"postalCode\":\"89101\",\"state\":\"Nevada\"},\"ip\":\"121.70.153.121\",\"source\":null,\"version\":\"V4\"}]},\"securityContext\":{\"asNumber\":174,\"asOrg\":\"psinet  inc.\",\"domain\":\"cogentco.com\",\"isProxy\":false,\"isp\":\"cogent communications\"},\"severity\":\"ERROR\",\"target\":[{\"alternateId\":\"SDPB.LOCAL\",\"detailEntry\":null,\"displayName\":\"Active Directory\",\"id\":\"0oa16yxhp6iUzuI2b697\",\"type\":\"AppInstance\"}],\"transaction\":{\"detail\":{\"requestApiTokenId\":\"00T144bkn6dBONmdv697\"},\"id\":\"909345ba8d340e18725897113229e5f6\",\"type\":\"WEB\"},\"uuid\":\"22bb7589-c791-11ee-b28a-21407b1ca606\",\"version\":\"0\"} ::: program=okta ::: severityCode=2 ::: clientGUID=cappT0Hfy97F1BoO1UTR ::: messageType=auth_failure ::: severityLabel=ERROR ::: clientIP=121.70.153.121 ::: streamName=Okta",
    "messagetype": "auth_failure",
    "productids": [
        6
    ],
    "program": "okta",
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 2,
    "severitylabel": "critical",
    "sourceinfo": "unknown",
    "tags": [
        "Okta",
        "auth_failure"
    ],
    "streamName": "Okta",
    "clientIP": "121.70.153.121",
    "userName": "johndoe"
}