WitFoo-Artifact ::: message={"businessPhones":["205.945.0018"],"displayName":"April Allen","givenName":"April","id":"0cd32ef2-6b18-4838-a0aa-4f2ea88a35dc","jobTitle":"MEL","mail":"aallen@ccr-bhm.org","mobilePhone":null,"officeLocation":"Childcare Resources","preferredLanguage":null,"surname":"Allen","userPrincipalName":"janedoe"} ::: userName=janedoe ::: messageType=asset_inventory ::: streamName=Microsoft Graph Asset Inventory ::: program=microsoft_graph ::: tags=[mail=aallen@ccr-bhm.org,surname=Allen,jobTitle=MEL,givenName=April,displayName=April Allen,officeLocation=Childcare Resources]
This is a syslog message from a product called Azure Security by Microsoft. The following fields were extracted from the message:
fieldExtractorName: custom_artifact
messageType: asset_inventory
program: microsoft_graph
senderHost: WitFoo-Streamer2.uwca.org
sensitivity: normal
sourceInfo: unknown
streamName: Microsoft Graph Asset Inventory
tags: ['givenName=April', 'Microsoft Graph Asset Inventory', 'officeLocation=Childcare Resources', 'displayName=April Allen', 'mail=aallen@ccr-bhm.org', 'jobTitle=MEL', 'surname=Allen', 'asset_inventory']
userName: janedoe