WitFoo-WinLogBeat ::: {"@metadata":{"beat":"winlogbeat","type":"_doc","version":"8.2.2"},"@timestamp":"2024-07-26T17:28:43.124Z","agent":{"ephemeral_id":"970ead45-d705-467a-802a-cd059c8f9fbb","id":"1e289ed9-fa81-478d-9ec3-98d5119c9f2e","name":"TS01-2016","type":"winlogbeat","version":"8.2.2"},"ecs":{"version":"8.0.0"},"event":{"action":"None","code":"15021","created":"2024-07-26T17:28:43.957Z","kind":"event","provider":"Microsoft-Windows-HttpEvent"},"host":{"name":"TS01-2016.wayne.com"},"log":{"level":"error"},"message":"An error occurred while using SSL configuration for endpoint 0.0.0.0:443.  The error status code is contained within the returned data.","organization":"wayne","senderHost":"TS01-2016.wayne.com","sensitivity":"normal","winlog":{"api":"wineventlog","channel":"System","computer_name":"TS01-2016.wayne.com","event_data":{"Binary":"000004000200300000000000AD3A00C00000000000000000000000000000000000000000000000005F0000C0","Endpoint":"0.0.0.0:443"},"event_id":"15021","keywords":["Classic"],"opcode":"Info","process":{"pid":4,"thread":{"id":3876}},"provider_guid":"{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}","provider_name":"Microsoft-Windows-HttpEvent","record_id":159092,"task":"None"}}
This is a syslog message from a product called microsoft-windows-httpevent by microsoft-windows-httpevent. The following fields were extracted from the message:
action: None
fieldExtractorName: winlogbeat
messageType: 15021
senderHost: TS01-2016.mingledorffs.com
sensitivity: normal
severityLabel: Info
sourceInfo: unknown
streamName: microsoft-windows-httpevent
tags: ['v8', 'eventId:15021', 'microsoft-windows-httpevent', '15021']
vendorCode: 159092