forked from Azure/Azure-Sentinel
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCribl_Internal_logs.json
31 lines (31 loc) · 1.06 KB
/
Cribl_Internal_logs.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
[{
"dataset": "cribl_logs",
"_raw": "{\"time\":\"2024-08-01T17:04:55.500Z\",\"cid\":\"api\",\"channel\":\"ProcessMetrics\",\"level\":\"info\",\"message\":\"stats\",\"cpuPerc\":0.42,\"eluPerc\":0.41,\"mem\":{\"heap\":104,\"heapTotal\":108,\"ext\":11,\"rss\":192,\"buffers\":0}}",
"source": "s3://internal-main-gifted-curran-71s14n0/cribl_logs/hjhg-2024/af-08/db-01/ag-17/ip-10-254-0-89.ec2.internal-KEJJt3.0.json.gz",
"_time": 1722531895.5,
"time": "2024-08-01T17:04:55.500Z",
"cid": "api",
"channel": "ProcessMetrics",
"level": "info",
"message": "stats",
"cpuPerc": 0.42,
"eluPerc": 0.41,
"mem": {
"heap": 104,
"heapTotal": 108,
"ext": 11,
"rss": 192,
"buffers": 0
},
"cribl_breaker": "json_newline:newline",
"saas_domain": "cribl.cloud",
"accountId": "111111111111",
"tenantId": "unique-name-111111",
"deployment": "main",
"workspace": "main",
"fleet": "prod-leaders",
"instance": "ip-10-255-255-89.ec2.internal",
"service": "stream-leader",
"datatype": "cribl_json_raw",
"data_source": "/opt/cribl/log/cribl.log"
}]