WitFoo-WinLogBeat ::: {"@metadata":{"beat":"winlogbeat","type":"_doc","version":"8.2.2"},"@timestamp":"2024-07-30T14:34:30.374Z","agent":{"ephemeral_id":"a668c636-ec70-4103-9c98-53517f0df854","id":"040c78f0-1741-4108-a30c-aaf00e9af961","name":"NVIPROCPRDWEB01","type":"winlogbeat","version":"8.2.2"},"ecs":{"version":"8.0.0"},"event":{"action":"None","code":"1000","created":"2024-07-30T14:34:31.269Z","kind":"event","provider":".NET Runtime"},"host":{"name":"NVIPROCPRDWEB01.prdnvi.oscorpint.com"},"log":{"level":"warning"},"message":"Category: Microsoft.AspNetCore.DataProtection.Repositories.EphemeralXmlRepository\nEventId: 50\n\nUsing an in-memory repository. Keys will not be persisted to storage.","organization":"oscorp","senderHost":"10.160.18.44","sensitivity":"normal","winlog":{"api":"wineventlog","channel":"Application","computer_name":"NVIPROCPRDWEB01.prdnvi.oscorpint.com","event_data":{"param1":"Category: Microsoft.AspNetCore.DataProtection.Repositories.EphemeralXmlRepository\nEventId: 50\n\nUsing an in-memory repository. Keys will not be persisted to storage."},"event_id":"1000","keywords":["Classic"],"opcode":"Info","provider_name":".NET Runtime","record_id":1477808,"task":"None"}}
Product: .net runtime
Vendor: .net runtime