systemd · json
systemd journal — JSON export
journalctl serializes journal entries to JSON; strings, arrays, byte arrays and null have distinct meanings.
Log sources tagged json
Log sources tagged json. Browse source profiles associated with json.
Matching source profiles
macOS · json
macOS Unified Logging — JSON event
Unified Logging exposes structured application and operating-system messages with subsystem and process context.
osquery · json
osquery differential results
Scheduled query differential results describe rows added or removed relative to the query’s prior state.
Microsoft Defender · json
Microsoft Defender for Endpoint alerts API
Alert objects describe a detection and its workflow state in Defender for Endpoint.
CrowdStrike · json
CrowdStrike Falcon event stream
Falcon event-stream objects carry a metadata envelope and an event-specific payload.
Zscaler · json
Zscaler NSS web — configured JSON
A configured NSS web JSON export with an event envelope.
Zeek · json
Zeek connection JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Zeek · json
Zeek DNS JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Zeek · json
Zeek HTTP JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Zeek · json
Zeek TLS JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Zeek · json
Zeek file analysis JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Zeek · json
Zeek SSH JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Zeek · json
Zeek SMTP JSON
Zeek protocol analysis produces structured metadata from observed network traffic.
Suricata · json
Suricata EVE alert
EVE JSON emits typed records from the Suricata network engine.
Suricata · json
Suricata EVE fileinfo
EVE JSON emits typed records from the Suricata network engine.
Suricata · json
Suricata EVE http
EVE JSON emits typed records from the Suricata network engine.
Suricata · json
Suricata EVE anomaly
EVE JSON emits typed records from the Suricata network engine.
Suricata · json
Suricata EVE flow
EVE JSON emits typed records from the Suricata network engine.
Suricata · json
Suricata EVE mqtt
EVE JSON emits typed records from the Suricata network engine.
Suricata · json
Suricata EVE pgsql
EVE JSON emits typed records from the Suricata network engine.
AWS · json
AWS CloudTrail
CloudTrail log-file envelope containing API activity records.
AWS · json
AWS WAF
Web ACL request evaluation records.
AWS · json
AWS API Gateway — configured access JSON
Access log object generated by a configured context-variable template.
Azure · json
Azure Activity Log
Azure control-plane activity exported as structured events.
Google Cloud · json
Google Cloud Audit Logs
Cloud Logging LogEntry carrying an AuditLog protoPayload.
Google Cloud · json
Google Cloud VPC Flow Logs
Sampled network flow records within a Cloud Logging LogEntry.
Microsoft · json
Microsoft Entra service-principal sign-ins
Diagnostic export of service-principal authentication activity.
Microsoft · json
Microsoft Entra directory audit
Directory audit events exported through Azure diagnostics.
Okta · json
Okta System Log
Identity platform events with actor, client, outcome and target context.
Google · json
Google Workspace login audit
Admin SDK Reports API login activity.
Google · json
Google Workspace administrator audit
Admin SDK Reports API administrative activity.
GitHub · json
GitHub audit log
Organization or enterprise audit event export.
Microsoft 365 · json
Microsoft 365 Exchange audit
Unified audit record for the named Microsoft 365 workload.
Microsoft 365 · json
Microsoft 365 SharePoint audit
Unified audit record for the named Microsoft 365 workload.
MongoDB · json
MongoDB structured server log
Structured MongoDB diagnostic log object.
Kubernetes · json
Kubernetes API audit event
API-server audit Event describing a request stage.
Falco · json
Falco JSON alert
Rule match output from Falco with structured output_fields.