sample_event.json

{
    "@timestamp": "2020-12-31T15:15:53.690Z",
    "agent": {
        "ephemeral_id": "c21cc458-5601-46e5-a313-919c8fc9cabb",
        "id": "9fb69190-14e5-47fd-bf29-410175dcf8e3",
        "name": "docker-fleet-agent",
        "type": "filebeat",
        "version": "8.7.1"
    },
    "data_stream": {
        "dataset": "zeek.known_certs",
        "namespace": "ep",
        "type": "logs"
    },
    "ecs": {
        "version": "8.11.0"
    },
    "elastic_agent": {
        "id": "9fb69190-14e5-47fd-bf29-410175dcf8e3",
        "snapshot": false,
        "version": "8.7.1"
    },
    "event": {
        "agent_id_status": "verified",
        "category": [
            "network",
            "file"
        ],
        "created": "2023-09-03T22:17:39.147Z",
        "dataset": "zeek.known_certs",
        "ingested": "2023-09-03T22:17:40Z",
        "kind": "event",
        "type": [
            "info"
        ]
    },
    "host": {
        "ip": [
            "192.168.4.1"
        ]
    },
    "input": {
        "type": "log"
    },
    "log": {
        "file": {
            "path": "/tmp/service_logs/known_certs.log"
        },
        "offset": 0
    },
    "network": {
        "type": "ipv4"
    },
    "related": {
        "ip": [
            "192.168.4.1"
        ]
    },
    "server": {
        "ip": [
            "192.168.4.1"
        ],
        "port": 443
    },
    "tags": [
        "forwarded",
        "zeek-known_certs"
    ],
    "tls": {
        "server": {
            "issuer": "L=San Jose,ST=CA,O=Ubiquiti Networks,CN=UBNT Router UI,C=US",
            "subject": "L=San Jose,ST=CA,O=Ubiquiti Networks,CN=UBNT Router UI,C=US",
            "x509": {
                "issuer": {
                    "common_name": [
                        "UBNT Router UI"
                    ],
                    "distinguished_name": "L=San Jose,ST=CA,O=Ubiquiti Networks,CN=UBNT Router UI,C=US"
                },
                "serial_number": "98D0AD47D748CDD6",
                "subject": {
                    "common_name": [
                        "UBNT Router UI"
                    ],
                    "distinguished_name": "L=San Jose,ST=CA,O=Ubiquiti Networks,CN=UBNT Router UI,C=US"
                }
            }
        }
    }
}