1037 <6> 2024-07-26T17:48:29Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722016071-103421-12672-3121-1","src_ip":"8.7.42.39","hdr_from":"\"Saks Fifth Avenue\" \u003csaksfifthavenue@news.saks.com\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"ny7p01lppmta262.news.saks.com","attstarkments":null,"recipients":[{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"stark-org.mail.protection.outlook.com.:25:250 2.6.0 \u003cbgtb70gaz553sgaue13sqqcevp7ezr.14708191611.664@ny7p01lppmta262.news.saks.com\u003e [InternalId=15161234580953, Hostname=SA1PR15MB4919.namprd15.prod.outlook.com] 72976 bytes in 0.179, 396.633 KB/sec Queued mail for delivery","email":"kcarlton@stark.org","taxonomy":"none"}],"hdr_to":"kcarlton@stark.org","recipient_count":1,"dst_domain":"stark.org","size":43871,"subject":"Here are new picks from Marchesa Notte","env_from":"bo-bgtb70gaz553sgaue13sqqcevp7ezr@b.news.saks.com","timestamp":"2024-07-26T17:48:24+0000","geoip":"USA","tls":true}
This is a syslog message from a product called Barracuda ESS by Barracuda. The following fields were extracted from the message:
fieldExtractorName: barracuda_ess
messageType: email_protection
senderHost: egress.ess.barracudanetworks.com
sensitivity: normal
sourceInfo: unknown
streamName: barracuda_ess
tags: ['barracuda_ess', 'email_protection']