Log Data - Sandfly Security

Log data contains elements from standard logs found under /var/log/ on the remote host. See the sub-sections for the structure and details of each log type.

{
	"utmp": {
		"entry_number": 0,
		"type": 0,
		"type_name": "",
		"pid": 0,
		"device": "",
		"id": "",
		"username": "",
		"hostname": "",
		"exit_status": {
			"termination": 0,
			"exit": 0
		},
		"session": 0,
		"date": {
			"created": "",
			"created_previous_entry": "",
			"created_minutes": 0
		},
		"ip_address": "",
		"reserved": ""
	},
	"wtmp": {
		"entry_number": 0,
		"type": 0,
		"type_name": "",
		"pid": 0,
		"device": "",
		"id": "",
		"username": "",
		"hostname": "",
		"exit_status": {
			"termination": 0,
			"exit": 0
		},
		"session": 0,
		"date": {
			"created": "",
			"created_previous_entry": "",
			"created_minutes": 0
		},
		"ip_address": "",
		"reserved": ""
	},
	"btmp": {
		"entry_number": 0,
		"type": 0,
		"type_name": "",
		"pid": 0,
		"device": "",
		"id": "",
		"username": "",
		"hostname": "",
		"exit_status": {
			"termination": 0,
			"exit": 0
		},
		"session": 0,
		"date": {
			"created": "",
			"created_previous_entry": "",
			"created_minutes": 0
		},
		"ip_address": "",
		"reserved": ""
	},
	"lastlog": {
		"username": "",
		"uid": 0,
		"date": {
			"created": "",
			"created_minutes": 0
		},
		"terminal": "",
		"hostname": ""
	}
}