873 <6> 2024-07-26T14:03:18Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722002592-106039-12750-6804-1","src_ip":"104.47.59.168","hdr_from":"Caroline Bolvig \u003cCBolvig@oscorp.org\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mail-dm6nam12lp2168.outbound.protection.outlook.com","attoscorpments":null,"recipients":[{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"142.250.123.27:25:250 2.0.0 OK DMARC:Quarantine 1722002594 00721157ae682-675688bb665si22720967b3.102 - gsmtp","email":"hello@poshchicago.com","taxonomy":"none"}],"hdr_to":"P.O.S.H. \u003chello@poshchicago.com\u003e","recipient_count":1,"dst_domain":"oscorp.org","size":9254,"subject":"Automatic reply: 🎁 Shhh! Exclusive Holiday Sneak Peek! 🎁","env_from":"","timestamp":"2024-07-26T14:03:14+0000","geoip":"","tls":true}
{
    "fieldExtractorName": "barracuda_ess",
    "message": "873 <6> 2024-07-26T14:03:18Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {\"message_id\":\"1722002592-106039-12750-6804-1\",\"src_ip\":\"104.47.59.168\",\"hdr_from\":\"Caroline Bolvig \\u003cCBolvig@oscorp.org\\u003e\",\"account_id\":\"ESS70460\",\"domain_id\":\"158260\",\"ptr_record\":\"mail-dm6nam12lp2168.outbound.protection.outlook.com\",\"attoscorpments\":null,\"recipients\":[{\"action\":\"allowed\",\"reason\":\"\",\"reason_extra\":\"\",\"delivered\":\"delivered\",\"delivery_detail\":\"142.250.123.27:25:250 2.0.0 OK DMARC:Quarantine 1722002594 00721157ae682-675688bb665si22720967b3.102 - gsmtp\",\"email\":\"hello@poshchicago.com\",\"taxonomy\":\"none\"}],\"hdr_to\":\"P.O.S.H. \\u003chello@poshchicago.com\\u003e\",\"recipient_count\":1,\"dst_domain\":\"oscorp.org\",\"size\":9254,\"subject\":\"Automatic reply: \ud83c\udf81 Shhh! Exclusive Holiday Sneak Peek! \ud83c\udf81\",\"env_from\":\"\",\"timestamp\":\"2024-07-26T14:03:14+0000\",\"geoip\":\"\",\"tls\":true}",
    "messageType": "email_protection",
    "senderHost": "egress.ess.barracudanetworks.com",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "barracuda_ess",
    "tags": [
        "barracuda_ess",
        "email_protection"
    ]
}