WitFoo-Artifact ::: program=cisco_duo ::: message={"alias1":"alice","alias2":null,"alias3":null,"alias4":null,"aliases":{"alias1":"alice"},"created":1621362249,"desktoptokens":[],"email":"alice","enable_auto_prompt":true,"firstname":"","groups":[{"desc":"Users that are allowed to run pipelines within Azure DevOps that affect production environments","group_id":"DGUE0C69WGYPJGJ3F3HW","mobile_otp_enabled":false,"name":"Azure DevOps PRD Pipelines","push_enabled":false,"sms_enabled":false,"status":"Active","voice_enabled":false}],"is_enrolled":true,"last_directory_sync":null,"last_login":1721909203,"lastname":"","lockout_reason":null,"notes":"","phones":[{"activated":true,"capabilities":["auto","push","sms","phone","mobile_otp"],"extension":"","last_seen":"2024-07-25T12:06:40","model":"Apple iPhone 14 Pro","name":"","number":"+14782560857","phone_id":"DPAUBRPAZV20E11AL2FW","platform":"Apple iOS","postdelay":"0","predelay":"0","sms_passcodes_sent":true,"type":"Mobile"}],"realname":"Jared Gilstrap","status":"active","tokens":[],"u2ftokens":[],"user_id":"DUT0KKQOH0R1FTLFGDXI","username":"jgilstrap","webauthncredentials":[]} ::: streamName=DUO Asset Inventory ::: userName=alice ::: messageType=asset_inventory
{
    "fieldExtractorName": "custom_artifact",
    "message": "WitFoo-Artifact ::: program=cisco_duo ::: message={\"alias1\":\"alice\",\"alias2\":null,\"alias3\":null,\"alias4\":null,\"aliases\":{\"alias1\":\"alice\"},\"created\":1621362249,\"desktoptokens\":[],\"email\":\"alice\",\"enable_auto_prompt\":true,\"firstname\":\"\",\"groups\":[{\"desc\":\"Users that are allowed to run pipelines within Azure DevOps that affect production environments\",\"group_id\":\"DGUE0C69WGYPJGJ3F3HW\",\"mobile_otp_enabled\":false,\"name\":\"Azure DevOps PRD Pipelines\",\"push_enabled\":false,\"sms_enabled\":false,\"status\":\"Active\",\"voice_enabled\":false}],\"is_enrolled\":true,\"last_directory_sync\":null,\"last_login\":1721909203,\"lastname\":\"\",\"lockout_reason\":null,\"notes\":\"\",\"phones\":[{\"activated\":true,\"capabilities\":[\"auto\",\"push\",\"sms\",\"phone\",\"mobile_otp\"],\"extension\":\"\",\"last_seen\":\"2024-07-25T12:06:40\",\"model\":\"Apple iPhone 14 Pro\",\"name\":\"\",\"number\":\"+14782560857\",\"phone_id\":\"DPAUBRPAZV20E11AL2FW\",\"platform\":\"Apple iOS\",\"postdelay\":\"0\",\"predelay\":\"0\",\"sms_passcodes_sent\":true,\"type\":\"Mobile\"}],\"realname\":\"Jared Gilstrap\",\"status\":\"active\",\"tokens\":[],\"u2ftokens\":[],\"user_id\":\"DUT0KKQOH0R1FTLFGDXI\",\"username\":\"jgilstrap\",\"webauthncredentials\":[]} ::: streamName=DUO Asset Inventory ::: userName=alice ::: messageType=asset_inventory",
    "messageType": "asset_inventory",
    "program": "cisco_duo",
    "senderHost": "kafka.precinct",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "DUO Asset Inventory",
    "tags": [
        "DUO Asset Inventory",
        "asset_inventory"
    ],
    "userName": "alice"
}