1035 <6> 2024-07-26T14:09:42Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722002967-105190-12686-5350-1","src_ip":"198.2.142.3","hdr_from":"Danny Cohn \u003cdannyc@bjf.org\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mail3.atl261.mcdlv.net","attacmements":null,"recipients":[{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"acme-org.mail.protection.outlook.com.:25:250 2.6.0 \u003cae0491b30f16043728f3e2585.41208dbbf4.20240726140022.2908a76d45.c7e807ab@mail3.atl261.mcdlv.net\u003e [InternalId=1752346662278, Hostname=IA1PR15MB5560.namprd15.prod.outlook.com] 200302 bytes in 3.642, 53.702 KB/sec Queued mail for delivery","email":"dlangloh@acme.org","taxonomy":"none"}],"hdr_to":"\u003cdlangloh@acme.org\u003e","recipient_count":1,"dst_domain":"acme.org","size":168294,"subject":"A Not So Slow Summer","env_from":"bounce-mc.us13_204272810.6750535-41208dbbf4@mail3.atl261.mcdlv.net","timestamp":"2024-07-26T14:09:37+0000","geoip":"USA","tls":true}
This is a syslog message from a product called Barracuda ESS by Barracuda. The following fields were extracted from the message:
fieldExtractorName: barracuda_ess
messageType: email_protection
senderHost: egress.ess.barracudanetworks.com
sensitivity: normal
sourceInfo: unknown
streamName: barracuda_ess
tags: ['barracuda_ess', 'email_protection']