892 <6> 2024-07-26T19:02:24Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722020537-103128-12697-3098-1","src_ip":"104.47.59.168","hdr_from":"Tamara Calvert \u003ctcalvert@umbrella.org\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mail-dm6nam12lp2168.outbound.protection.outlook.com","attumbrellaments":[{"name":"image001.jpg"},{"name":"image002.png"}],"recipients":[{"action":"allowed","reason":"content_body","reason_extra":"HIV","delivered":"delivered","delivery_detail":"165.173.183.7:25:250 Message received","email":"ithelpdesk@sdp756980793.zm.sdpondemand.com","taxonomy":"policy"}],"hdr_to":"Computer Helpdesk \u003cComputerHelpdesk@umbrella.org\u003e","recipient_count":1,"dst_domain":"umbrella.org","size":674837,"subject":"RE: [Request ID :##450236##] : Emails","env_from":"tcalvert@umbrella.org","timestamp":"2024-07-26T19:02:21+0000","geoip":"","tls":true}
{
    "fieldExtractorName": "barracuda_ess",
    "message": "892 <6> 2024-07-26T19:02:24Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {\"message_id\":\"1722020537-103128-12697-3098-1\",\"src_ip\":\"104.47.59.168\",\"hdr_from\":\"Tamara Calvert \\u003ctcalvert@umbrella.org\\u003e\",\"account_id\":\"ESS70460\",\"domain_id\":\"158260\",\"ptr_record\":\"mail-dm6nam12lp2168.outbound.protection.outlook.com\",\"attumbrellaments\":[{\"name\":\"image001.jpg\"},{\"name\":\"image002.png\"}],\"recipients\":[{\"action\":\"allowed\",\"reason\":\"content_body\",\"reason_extra\":\"HIV\",\"delivered\":\"delivered\",\"delivery_detail\":\"165.173.183.7:25:250 Message received\",\"email\":\"ithelpdesk@sdp756980793.zm.sdpondemand.com\",\"taxonomy\":\"policy\"}],\"hdr_to\":\"Computer Helpdesk \\u003cComputerHelpdesk@umbrella.org\\u003e\",\"recipient_count\":1,\"dst_domain\":\"umbrella.org\",\"size\":674837,\"subject\":\"RE: [Request ID :##450236##] : Emails\",\"env_from\":\"tcalvert@umbrella.org\",\"timestamp\":\"2024-07-26T19:02:21+0000\",\"geoip\":\"\",\"tls\":true}",
    "messageType": "email_protection",
    "senderHost": "egress.ess.barracudanetworks.com",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "barracuda_ess",
    "tags": [
        "barracuda_ess",
        "email_protection"
    ]
}