WitFoo-Artifact ::: messageType=asset_inventory ::: streamName=DUO Asset Inventory ::: userName=janedoe ::: program=cisco_duo ::: message={"alias1":null,"alias2":null,"alias3":null,"alias4":null,"aliases":{},"created":1568729957,"desktoptokens":[],"email":"janedoe","enable_auto_prompt":true,"external_id":"KFoDMGwOOUCYtPNu51aAZw==","firstname":"","groups":[{"desc":"","group_id":"DG4OA9OC4WS33G54DD2O","mobile_otp_enabled":false,"name":"DuoUsers (from AD sync \"AD Sync\")","push_enabled":false,"sms_enabled":false,"status":"Active","voice_enabled":false}],"is_enrolled":true,"last_directory_sync":1722031562,"last_login":1722021917,"lastname":"","lockout_reason":null,"notes":"","phones":[{"activated":false,"capabilities":["auto","phone"],"encrypted":"","extension":"","fingerprint":"","last_seen":"","model":"Unknown","name":"","number":"+14044922052","phone_id":"DP3YZ9N6SF550T6X5CDU","platform":"Unknown","postdelay":"0","predelay":"0","screenlock":"","sms_passcodes_sent":false,"tampered":"","type":"Landline"}],"realname":"Elizabeth Holbrook","status":"active","tokens":[{"serial":"2795622641GO6OATH","token_id":"DHRVR52IYLWLN5W1L0EM","totp_step":null,"type":"d1"}],"u2ftokens":[],"user_id":"DU23NDAUPLJ2MKUFQ6F8","username":"eholbrook","webauthncredentials":[]}
{
    "fieldExtractorName": "custom_artifact",
    "message": "WitFoo-Artifact ::: messageType=asset_inventory ::: streamName=DUO Asset Inventory ::: userName=janedoe ::: program=cisco_duo ::: message={\"alias1\":null,\"alias2\":null,\"alias3\":null,\"alias4\":null,\"aliases\":{},\"created\":1568729957,\"desktoptokens\":[],\"email\":\"janedoe\",\"enable_auto_prompt\":true,\"external_id\":\"KFoDMGwOOUCYtPNu51aAZw==\",\"firstname\":\"\",\"groups\":[{\"desc\":\"\",\"group_id\":\"DG4OA9OC4WS33G54DD2O\",\"mobile_otp_enabled\":false,\"name\":\"DuoUsers (from AD sync \\\"AD Sync\\\")\",\"push_enabled\":false,\"sms_enabled\":false,\"status\":\"Active\",\"voice_enabled\":false}],\"is_enrolled\":true,\"last_directory_sync\":1722031562,\"last_login\":1722021917,\"lastname\":\"\",\"lockout_reason\":null,\"notes\":\"\",\"phones\":[{\"activated\":false,\"capabilities\":[\"auto\",\"phone\"],\"encrypted\":\"\",\"extension\":\"\",\"fingerprint\":\"\",\"last_seen\":\"\",\"model\":\"Unknown\",\"name\":\"\",\"number\":\"+14044922052\",\"phone_id\":\"DP3YZ9N6SF550T6X5CDU\",\"platform\":\"Unknown\",\"postdelay\":\"0\",\"predelay\":\"0\",\"screenlock\":\"\",\"sms_passcodes_sent\":false,\"tampered\":\"\",\"type\":\"Landline\"}],\"realname\":\"Elizabeth Holbrook\",\"status\":\"active\",\"tokens\":[{\"serial\":\"2795622641GO6OATH\",\"token_id\":\"DHRVR52IYLWLN5W1L0EM\",\"totp_step\":null,\"type\":\"d1\"}],\"u2ftokens\":[],\"user_id\":\"DU23NDAUPLJ2MKUFQ6F8\",\"username\":\"eholbrook\",\"webauthncredentials\":[]}",
    "messageType": "asset_inventory",
    "program": "cisco_duo",
    "senderHost": "kafka.precinct",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "DUO Asset Inventory",
    "tags": [
        "DUO Asset Inventory",
        "asset_inventory"
    ],
    "userName": "janedoe"
}