WitFoo-Artifact ::: message={"alias1":null,"alias2":null,"alias3":null,"alias4":null,"aliases":{},"created":1601556771,"desktoptokens":[],"email":"charlie","enable_auto_prompt":true,"firstname":"","groups":[],"is_enrolled":true,"last_directory_sync":null,"last_login":1722264870,"lastname":"","lockout_reason":null,"notes":"","phones":[{"activated":true,"capabilities":["auto","push","sms","phone","mobile_otp"],"extension":"","last_seen":"2024-07-29T14:54:17","model":"LGE LM-V600","name":"","number":"+16784722598","phone_id":"DP62TDIDPH3QFN365PD1","platform":"Google Android","postdelay":"","predelay":"","sms_passcodes_sent":false,"type":"Mobile"}],"realname":"Vichelle Taylor","status":"active","tokens":[],"u2ftokens":[],"user_id":"DUF0A450P6CA3TIBZTP1","username":"vtaylor","webauthncredentials":[]} ::: streamName=DUO Asset Inventory ::: messageType=asset_inventory ::: userName=charlie ::: program=cisco_duo
This is a syslog message from a product called Duo by Cisco. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: cisco_duo
sampleTime: 1.722308449052881E9
senderHost: kafka.precinct
sensitivity: normal
sourceInfo: unknown
streamName: DUO Asset Inventory
tags: ['DUO Asset Inventory', 'asset_inventory']
userName: charlie