WitFoo-Artifact ::: tags=["description=Connect AD agent to Okta","userDisplay=undefined | undefined","reason=WitFoo.Switch(FAILURE)"] ::: action=FAILURE ::: message={"user":{"id":"00u176suj2KgPRj9K697","status":"ACTIVE","created":"2022-05-27T15:49:21.000Z","activated":"2022-05-27T15:49:22.000Z","statusChanged":"2023-05-03T17:47:47.000Z","lastLogin":"2023-05-18T17:12:00.000Z","lastUpdated":"2023-05-18T23:25:08.000Z","passwordChanged":"2023-05-03T17:47:47.000Z","type":{"id":"oty16ygr7f2XinpEr697"},"profile":{"firstName":"IT","lastName":"Support","mobilePhone":227.59.32.11,"secondEmail":"","login":"johndoe","email":"johndoe"},"credentials":{"password":{},"provider":{"type":"OKTA","name":"OKTA"}},"_links":{"suspend":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/suspend","method":"POST"},"schema":{"href":"https://stark.okta.com/api/v1/meta/schemas/user/osc16ygr7f2XinpEr697"},"resetPassword":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/reset_password","method":"POST"},"forgotPassword":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/credentials/forgot_password","method":"POST"},"expirePassword":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/expire_password","method":"POST"},"changeRecoveryQuestion":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/credentials/change_recovery_question","method":"POST"},"self":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697"},"resetFactors":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/reset_factors","method":"POST"},"type":{"href":"https://stark.okta.com/api/v1/meta/types/user/oty16ygr7f2XinpEr697"},"changePassword":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/credentials/change_password","method":"POST"},"deactivate":{"href":"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/deactivate","method":"POST"}}},"event":{"actor":{"id":"00u176suj2KgPRj9K697","type":"User","alternateId":"johndoe","displayName":"IT Support","detailEntry":227.59.32.11},"client":{"userAgent":227.59.32.11,"zone":227.59.32.11,"device":227.59.32.11,"id":227.59.32.11,"ipAddress":227.59.32.11,"geographicalContext":227.59.32.11},"device":227.59.32.11,"authenticationContext":{"authenticationProvider":227.59.32.11,"credentialProvider":227.59.32.11,"credentialType":227.59.32.11,"issuer":227.59.32.11,"interface":227.59.32.11,"authenticationStep":0,"externalSessionId":"trsXO07BbQcQ_2vQpUjpiBMVg"},"displayMessage":"Connect AD agent to Okta","eventType":"system.agent.ad.connect","outcome":{"result":"FAILURE","reason":227.59.32.11},"published":"2023-11-09T05:02:23.555Z","securityContext":{"asNumber":227.59.32.11,"asOrg":227.59.32.11,"isp":227.59.32.11,"domain":227.59.32.11,"isProxy":227.59.32.11},"severity":"WARN","debugContext":{"debugData":{}},"legacyEventType":"app.ad.agent.disconnected","transaction":{"type":227.59.32.11,"id":"unknown","detail":{}},"uuid":"2b4e8957-7ebd-11ee-9f00-99e5724458cd","version":"0","request":{"ipChain":[]},"target":[{"id":"0oa16yxhp6iUzuI2b697","type":"Active Directory","alternateId":227.59.32.11,"displayName":"SDPB.LOCAL","detailEntry":227.59.32.11},{"id":"a532lo6a4sAZS1Lht697","type":"AD Agent","alternateId":227.59.32.11,"displayName":"IDCOAS01","detailEntry":227.59.32.11}]}} ::: clientIP=227.59.32.11 ::: userName=johndoe ::: created_at=2023-11-09T05:02:23.555Z ::: streamName=Okta ::: vendorCode=system.agent.ad.connect ::: messageType=auth_failure ::: pipelineName=Okta ::: severityCode=3 ::: pipelineEntrypoint=dispatch
{
    "action": "FAILURE",
    "message": "WitFoo-Artifact ::: tags=[\"description=Connect AD agent to Okta\",\"userDisplay=undefined | undefined\",\"reason=WitFoo.Switch(FAILURE)\"] ::: action=FAILURE ::: message={\"user\":{\"id\":\"00u176suj2KgPRj9K697\",\"status\":\"ACTIVE\",\"created\":\"2022-05-27T15:49:21.000Z\",\"activated\":\"2022-05-27T15:49:22.000Z\",\"statusChanged\":\"2023-05-03T17:47:47.000Z\",\"lastLogin\":\"2023-05-18T17:12:00.000Z\",\"lastUpdated\":\"2023-05-18T23:25:08.000Z\",\"passwordChanged\":\"2023-05-03T17:47:47.000Z\",\"type\":{\"id\":\"oty16ygr7f2XinpEr697\"},\"profile\":{\"firstName\":\"IT\",\"lastName\":\"Support\",\"mobilePhone\":227.59.32.11,\"secondEmail\":\"\",\"login\":\"johndoe\",\"email\":\"johndoe\"},\"credentials\":{\"password\":{},\"provider\":{\"type\":\"OKTA\",\"name\":\"OKTA\"}},\"_links\":{\"suspend\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/suspend\",\"method\":\"POST\"},\"schema\":{\"href\":\"https://stark.okta.com/api/v1/meta/schemas/user/osc16ygr7f2XinpEr697\"},\"resetPassword\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/reset_password\",\"method\":\"POST\"},\"forgotPassword\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/credentials/forgot_password\",\"method\":\"POST\"},\"expirePassword\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/expire_password\",\"method\":\"POST\"},\"changeRecoveryQuestion\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/credentials/change_recovery_question\",\"method\":\"POST\"},\"self\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697\"},\"resetFactors\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/reset_factors\",\"method\":\"POST\"},\"type\":{\"href\":\"https://stark.okta.com/api/v1/meta/types/user/oty16ygr7f2XinpEr697\"},\"changePassword\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/credentials/change_password\",\"method\":\"POST\"},\"deactivate\":{\"href\":\"https://stark.okta.com/api/v1/users/00u176suj2KgPRj9K697/lifecycle/deactivate\",\"method\":\"POST\"}}},\"event\":{\"actor\":{\"id\":\"00u176suj2KgPRj9K697\",\"type\":\"User\",\"alternateId\":\"johndoe\",\"displayName\":\"IT Support\",\"detailEntry\":227.59.32.11},\"client\":{\"userAgent\":227.59.32.11,\"zone\":227.59.32.11,\"device\":227.59.32.11,\"id\":227.59.32.11,\"ipAddress\":227.59.32.11,\"geographicalContext\":227.59.32.11},\"device\":227.59.32.11,\"authenticationContext\":{\"authenticationProvider\":227.59.32.11,\"credentialProvider\":227.59.32.11,\"credentialType\":227.59.32.11,\"issuer\":227.59.32.11,\"interface\":227.59.32.11,\"authenticationStep\":0,\"externalSessionId\":\"trsXO07BbQcQ_2vQpUjpiBMVg\"},\"displayMessage\":\"Connect AD agent to Okta\",\"eventType\":\"system.agent.ad.connect\",\"outcome\":{\"result\":\"FAILURE\",\"reason\":227.59.32.11},\"published\":\"2023-11-09T05:02:23.555Z\",\"securityContext\":{\"asNumber\":227.59.32.11,\"asOrg\":227.59.32.11,\"isp\":227.59.32.11,\"domain\":227.59.32.11,\"isProxy\":227.59.32.11},\"severity\":\"WARN\",\"debugContext\":{\"debugData\":{}},\"legacyEventType\":\"app.ad.agent.disconnected\",\"transaction\":{\"type\":227.59.32.11,\"id\":\"unknown\",\"detail\":{}},\"uuid\":\"2b4e8957-7ebd-11ee-9f00-99e5724458cd\",\"version\":\"0\",\"request\":{\"ipChain\":[]},\"target\":[{\"id\":\"0oa16yxhp6iUzuI2b697\",\"type\":\"Active Directory\",\"alternateId\":227.59.32.11,\"displayName\":\"SDPB.LOCAL\",\"detailEntry\":227.59.32.11},{\"id\":\"a532lo6a4sAZS1Lht697\",\"type\":\"AD Agent\",\"alternateId\":227.59.32.11,\"displayName\":\"IDCOAS01\",\"detailEntry\":227.59.32.11}]}} ::: clientIP=227.59.32.11 ::: userName=johndoe ::: created_at=2023-11-09T05:02:23.555Z ::: streamName=Okta ::: vendorCode=system.agent.ad.connect ::: messageType=auth_failure ::: pipelineName=Okta ::: severityCode=3 ::: pipelineEntrypoint=dispatch",
    "messagetype": "auth_failure",
    "productids": [
        6
    ],
    "senderhost": "kafka.precinct",
    "sensitivity": "normal",
    "severitycode": 3,
    "severitylabel": "error",
    "sourceinfo": "unknown",
    "tags": [
        "userDisplay=undefined | undefined",
        "Okta",
        "auth_failure",
        "reason=WitFoo.Switch(FAILURE)",
        "description=Connect AD agent to Okta"
    ],
    "vendorcode": "system.agent.ad.connect",
    "streamName": "Okta",
    "clientIP": "227.59.32.11",
    "userName": "johndoe"
}