1186 <6> 2024-07-26T13:27:06Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {"message_id":"1722000418-104721-12615-9938-1","src_ip":"104.47.57.168","hdr_from":"John Martin \u003cjmartin@umbrella.org\u003e","account_id":"ESS70460","domain_id":"158260","ptr_record":"mail-dm6nam11lp2168.outbound.protection.outlook.com","attumbrellaments":[{"name":"IMG_3450.jpg"},{"name":"IMG_3449.jpg"}],"recipients":[{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"142.251.182.26:25:250 2.0.0 OK  1722000421 3f1490d57ef6-e0b2a92f9e9si1943701276.298 - gsmtp","email":"normanjetmundsen@gmail.com","taxonomy":"none"},{"action":"allowed","reason":"","reason_extra":"","delivered":"delivered","delivery_detail":"142.251.166.26:25:250 2.0.0 OK  1722000422 3f1490d57ef6-e0b4fda61cesi229737276.254 - gsmtp","email":"barnhart@tonybarnhart.com","taxonomy":"none"}],"hdr_to":"Norman Jetmundsen \u003cnormanjetmundsen@gmail.com\u003e, Tony Barnhart.\u003cbarnhart@tonybarnhart.com\u003e","recipient_count":2,"dst_domain":"umbrella.org","size":460704,"subject":"Re: Hot off the press","env_from":"jmartin@umbrella.org","timestamp":"2024-07-26T13:27:02+0000","geoip":"","tls":true}
{
    "fieldExtractorName": "barracuda_ess",
    "message": "1186 <6> 2024-07-26T13:27:06Z ip-100-69-13-151.us-east-2.compute.internal ESS70460[1]: {\"message_id\":\"1722000418-104721-12615-9938-1\",\"src_ip\":\"104.47.57.168\",\"hdr_from\":\"John Martin \\u003cjmartin@umbrella.org\\u003e\",\"account_id\":\"ESS70460\",\"domain_id\":\"158260\",\"ptr_record\":\"mail-dm6nam11lp2168.outbound.protection.outlook.com\",\"attumbrellaments\":[{\"name\":\"IMG_3450.jpg\"},{\"name\":\"IMG_3449.jpg\"}],\"recipients\":[{\"action\":\"allowed\",\"reason\":\"\",\"reason_extra\":\"\",\"delivered\":\"delivered\",\"delivery_detail\":\"142.251.182.26:25:250 2.0.0 OK  1722000421 3f1490d57ef6-e0b2a92f9e9si1943701276.298 - gsmtp\",\"email\":\"normanjetmundsen@gmail.com\",\"taxonomy\":\"none\"},{\"action\":\"allowed\",\"reason\":\"\",\"reason_extra\":\"\",\"delivered\":\"delivered\",\"delivery_detail\":\"142.251.166.26:25:250 2.0.0 OK  1722000422 3f1490d57ef6-e0b4fda61cesi229737276.254 - gsmtp\",\"email\":\"barnhart@tonybarnhart.com\",\"taxonomy\":\"none\"}],\"hdr_to\":\"Norman Jetmundsen \\u003cnormanjetmundsen@gmail.com\\u003e, Tony Barnhart.\\u003cbarnhart@tonybarnhart.com\\u003e\",\"recipient_count\":2,\"dst_domain\":\"umbrella.org\",\"size\":460704,\"subject\":\"Re: Hot off the press\",\"env_from\":\"jmartin@umbrella.org\",\"timestamp\":\"2024-07-26T13:27:02+0000\",\"geoip\":\"\",\"tls\":true}",
    "messageType": "email_protection",
    "senderHost": "egress.ess.barracudanetworks.com",
    "sensitivity": "normal",
    "sourceInfo": "unknown",
    "streamName": "barracuda_ess",
    "tags": [
        "barracuda_ess",
        "email_protection"
    ]
}