1013 <6> 2024-07-26T14:03:22Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722002544-104683-12527-4851-1","src_ip":"13.111.206.187","hdr_from":"\"iRobot\" \u003cmarketing@email.irobot.com\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mta.email.irobot.com","attacmements":null,"recipients":[{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"acme-org.mail.protection.outlook.com.:25:250 2.6.0 \u003cc9ed6410-c684-489f-ba98-5bde255bebfd@atl1s11mta807.xt.local\u003e [InternalId=129278515611981, Hostname=SJ0PR15MB4520.namprd15.prod.outlook.com] 75335 bytes in 0.224, 326.991 KB/sec Queued mail for delivery","email":"jfew@acme.org","taxonomy":"none"}],"hdr_to":"\u003cjfew@acme.org\u003e","recipient_count":1,"dst_domain":"acme.org","size":54310,"subject":"Stay ahead of the mess!","env_from":"bounce-309_HTML-28006940-346268-514014416-5006@bounce.email.irobot.com","timestamp":"2024-07-26T14:03:19+0000","geoip":"USA","tls":true}
This is a syslog message from a product called Barracuda ESS by Barracuda. The following fields were extracted from the message:
fieldExtractorName: barracuda_ess
messageType: email_protection
senderHost: egress.ess.barracudanetworks.com
sensitivity: normal
sourceInfo: unknown
streamName: barracuda_ess
tags: ['barracuda_ess', 'email_protection']