WitFoo-Artifact ::: message={"alias1":null,"alias2":null,"alias3":null,"alias4":null,"aliases":{},"created":1695031399,"desktoptokens":[],"email":"charlie","enable_auto_prompt":true,"external_id":"PG1zDE6eWkq/VaxEIZD0OQ==","firstname":"","groups":[{"desc":"","group_id":"DGNQJPQ0KSPDQMN9RNAB","mobile_otp_enabled":false,"name":"SSO-PagerDuty (from AD sync \"AD Sync\")","push_enabled":false,"sms_enabled":false,"status":"Active","voice_enabled":false},{"desc":"","group_id":"DGV777LPZH0NIVL8FTF5","mobile_otp_enabled":false,"name":"SSO-ReadOnly-Org (from AD sync \"AD Sync\")","push_enabled":false,"sms_enabled":false,"status":"Active","voice_enabled":false}],"is_enrolled":true,"last_directory_sync":1722031562,"last_login":1699290059,"lastname":"","lockout_reason":null,"notes":"","phones":[{"activated":true,"capabilities":["auto","push","sms","phone","mobile_otp"],"encrypted":"Encrypted","extension":"","fingerprint":"Configured","last_seen":"2023-11-06T17:07:34","model":"Apple iPhone 12 Pro Max","name":"","number":"+17085469642","phone_id":"DPED2Y79I2L1WPZ9H4Q5","platform":"Apple iOS","postdelay":"","predelay":"","screenlock":"Locked","sms_passcodes_sent":false,"tampered":"Not tampered","type":"Mobile"}],"realname":"Glenn Fitzpatrick","status":"disabled","tokens":[],"u2ftokens":[],"user_id":"DUOAMYKYBO330ZFO1AYC","username":"glenn.fitzpatrick","webauthncredentials":[]} ::: program=cisco_duo ::: userName=charlie ::: streamName=DUO Asset Inventory ::: messageType=asset_inventory
{
    "fieldExtractorName": "custom_artifact",
    "message": "WitFoo-Artifact ::: message={\"alias1\":null,\"alias2\":null,\"alias3\":null,\"alias4\":null,\"aliases\":{},\"created\":1695031399,\"desktoptokens\":[],\"email\":\"charlie\",\"enable_auto_prompt\":true,\"external_id\":\"PG1zDE6eWkq/VaxEIZD0OQ==\",\"firstname\":\"\",\"groups\":[{\"desc\":\"\",\"group_id\":\"DGNQJPQ0KSPDQMN9RNAB\",\"mobile_otp_enabled\":false,\"name\":\"SSO-PagerDuty (from AD sync \\\"AD Sync\\\")\",\"push_enabled\":false,\"sms_enabled\":false,\"status\":\"Active\",\"voice_enabled\":false},{\"desc\":\"\",\"group_id\":\"DGV777LPZH0NIVL8FTF5\",\"mobile_otp_enabled\":false,\"name\":\"SSO-ReadOnly-Org (from AD sync \\\"AD Sync\\\")\",\"push_enabled\":false,\"sms_enabled\":false,\"status\":\"Active\",\"voice_enabled\":false}],\"is_enrolled\":true,\"last_directory_sync\":1722031562,\"last_login\":1699290059,\"lastname\":\"\",\"lockout_reason\":null,\"notes\":\"\",\"phones\":[{\"activated\":true,\"capabilities\":[\"auto\",\"push\",\"sms\",\"phone\",\"mobile_otp\"],\"encrypted\":\"Encrypted\",\"extension\":\"\",\"fingerprint\":\"Configured\",\"last_seen\":\"2023-11-06T17:07:34\",\"model\":\"Apple iPhone 12 Pro Max\",\"name\":\"\",\"number\":\"+17085469642\",\"phone_id\":\"DPED2Y79I2L1WPZ9H4Q5\",\"platform\":\"Apple iOS\",\"postdelay\":\"\",\"predelay\":\"\",\"screenlock\":\"Locked\",\"sms_passcodes_sent\":false,\"tampered\":\"Not tampered\",\"type\":\"Mobile\"}],\"realname\":\"Glenn Fitzpatrick\",\"status\":\"disabled\",\"tokens\":[],\"u2ftokens\":[],\"user_id\":\"DUOAMYKYBO330ZFO1AYC\",\"username\":\"glenn.fitzpatrick\",\"webauthncredentials\":[]} ::: program=cisco_duo ::: userName=charlie ::: streamName=DUO Asset Inventory ::: messageType=asset_inventory",
    "messageType": "asset_inventory",
    "program": "cisco_duo",
    "senderHost": "kafka.precinct",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "DUO Asset Inventory",
    "tags": [
        "DUO Asset Inventory",
        "asset_inventory"
    ],
    "userName": "charlie"
}