<189>7951: 10.1.234.254: Jul 27 05:57:41.086: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: sentinel] [Source: 10.0.1.170] [localport: 22] at 00:57:41 CDT Sat Jul 27 2024
{
    "fieldExtractorName": "cisco_os",
    "message": "<189>7951: 10.1.234.254: Jul 27 05:57:41.086: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: sentinel] [Source: 10.0.1.170] [localport: 22] at 00:57:41 CDT Sat Jul 27 2024",
    "messageType": "management_message",
    "ruleCategory": "sec_login",
    "ruleName": "login_success",
    "senderHost": "10.1.234.254",
    "sensitivity": "normal",
    "severityCode": 5,
    "severityLabel": "notice",
    "sourceInfo": "unknown",
    "streamName": "cisco_os",
    "tags": [
        "cisco_os",
        "management_message"
    ]
}