<189>17711: 10.3.162.253: Jul 26 14:43:17.936 CDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cevans_a] [Source: 10.0.1.170] [localport: 22] at 14:43:17 CDT Fri Jul 26 2024
{
    "fieldExtractorName": "cisco_os",
    "message": "<189>17711: 10.3.162.253: Jul 26 14:43:17.936 CDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: cevans_a] [Source: 10.0.1.170] [localport: 22] at 14:43:17 CDT Fri Jul 26 2024",
    "messageType": "management_message",
    "ruleCategory": "sec_login",
    "ruleName": "login_success",
    "senderHost": "10.3.162.253",
    "sensitivity": "normal",
    "severityCode": 5,
    "severityLabel": "notice",
    "sourceInfo": "unknown",
    "streamName": "cisco_os",
    "tags": [
        "cisco_os",
        "management_message"
    ]
}