1185 <6> 2024-07-26T18:42:16Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722019325-111102-12655-2574-1","src_ip":"40.107.237.117","hdr_from":"Christy Pfahl \u003ccpfahl@groupmgmt.com\u003e","account_id":"ESS70460","domain_id":"184811","ptr_record":"mail-bn8nam12on2117.outbound.protection.outlook.com","attstarkments":[{"name":"image005.png"},{"name":"image006.png"},{"name":"image007.png"},{"name":"image008.jpg"}],"recipients":[{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"crisiscenterbham-org.mail.protection.outlook.com:25:250 2.6.0 \u003cBL3PR02MB7938D6680A42FBE4AF83518BC9B42@BL3PR02MB7938.namprd02.prod.outlook.com\u003e [InternalId=755914269645, Hostname=LV8PR15MB6545.namprd15.prod.outlook.com] 813509 bytes in 0.583, 1361.668 KB/sec Queued mail for delivery","email":"cfairley@crisiscenterbham.org","taxonomy":"none"}],"hdr_to":"Craig Fairley \u003ccfairley@crisiscenterbham.org\u003e","recipient_count":1,"dst_domain":"crisiscenterbham.org","size":798797,"subject":"RE: CRISIS CENTER     Identification","env_from":"cpfahl@groupmgmt.com","timestamp":"2024-07-26T18:42:11+0000","geoip":"USA","tls":true}
{
    "fieldExtractorName": "barracuda_ess",
    "message": "1185 <6> 2024-07-26T18:42:16Z ip-100-69-16-230.us-east-2.compute.internal ESS70460[1]: {\"message_id\":\"1722019325-111102-12655-2574-1\",\"src_ip\":\"40.107.237.117\",\"hdr_from\":\"Christy Pfahl \\u003ccpfahl@groupmgmt.com\\u003e\",\"account_id\":\"ESS70460\",\"domain_id\":\"184811\",\"ptr_record\":\"mail-bn8nam12on2117.outbound.protection.outlook.com\",\"attstarkments\":[{\"name\":\"image005.png\"},{\"name\":\"image006.png\"},{\"name\":\"image007.png\"},{\"name\":\"image008.jpg\"}],\"recipients\":[{\"action\":\"allowed\",\"reason\":\"\",\"reason_extra\":\"\",\"delivered\":\"delivered\",\"delivery_detail\":\"crisiscenterbham-org.mail.protection.outlook.com:25:250 2.6.0 \\u003cBL3PR02MB7938D6680A42FBE4AF83518BC9B42@BL3PR02MB7938.namprd02.prod.outlook.com\\u003e [InternalId=755914269645, Hostname=LV8PR15MB6545.namprd15.prod.outlook.com] 813509 bytes in 0.583, 1361.668 KB/sec Queued mail for delivery\",\"email\":\"cfairley@crisiscenterbham.org\",\"taxonomy\":\"none\"}],\"hdr_to\":\"Craig Fairley \\u003ccfairley@crisiscenterbham.org\\u003e\",\"recipient_count\":1,\"dst_domain\":\"crisiscenterbham.org\",\"size\":798797,\"subject\":\"RE: CRISIS CENTER     Identification\",\"env_from\":\"cpfahl@groupmgmt.com\",\"timestamp\":\"2024-07-26T18:42:11+0000\",\"geoip\":\"USA\",\"tls\":true}",
    "messageType": "email_protection",
    "senderHost": "egress.ess.barracudanetworks.com",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "barracuda_ess",
    "tags": [
        "barracuda_ess",
        "email_protection"
    ]
}