1083 <6> 2024-07-27T01:37:18Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722044231-112188-12714-23202-1","src_ip":"108.174.3.171","hdr_from":"LinkedIn \u003cnotifications-noreply@linkedin.com\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mailc-bc.linkedin.com","attacmements":null,"recipients":[{"action":"allowed","reason":"emailcat","reason_extra":"acmeialmedia","delivered":"delivered","delivery_detail":"acme-org.mail.protection.outlook.com.:25:250 2.6.0 \u003c2021749509.4718786.1722044230676@lor1-app103569.prod.linkedin.com\u003e [InternalId=28883655076248, Hostname=MN6PR15MB6218.namprd15.prod.outlook.com] 137251 bytes in 0.253, 527.877 KB/sec Queued mail for delivery","email":"ljett@acme.org","taxonomy":"policy"}],"hdr_to":"Lisa Jett \u003cljett@acme.org\u003e","recipient_count":1,"dst_domain":"acme.org","size":123393,"subject":"📩 You have new messages and notifications","env_from":"m-2p9z5cihavnjd7ljqobh0p6k3nmzv2gv5jogy0bkk59xr3fcl0@bounce.linkedin.com","timestamp":"2024-07-27T01:37:13+0000","geoip":"USA","tls":true}
This is a syslog message from a product called Barracuda ESS by Barracuda. The following fields were extracted from the message:
fieldExtractorName: barracuda_ess
messageType: email_protection
senderHost: egress.ess.barracudanetworks.com
sensitivity: normal
sourceInfo: unknown
streamName: barracuda_ess
tags: ['barracuda_ess', 'email_protection']