Web Proxy MEF - raw records

web_proxy_mef.json

{
    u'applicationProtocol': u'http',
    u'bytesIn': 1095,
    u'bytesOut': 10733,
    u'cefSignatureId': u'200',
    u'destinationAddress': None,
    u'destinationDnsDomain': u'on24.com',
    u'destinationHostName': u'webcast.on24.com',
    u'destinationMacAddress': None,
    u'destinationNameOrIp': u'webcast.on24.com',
    u'destinationPort': None,
    u'deviceAction': u'TCP_MISS',
    u'deviceAddress': u'192.16.170.42',
    u'deviceDnsDomain': None,
    u'deviceEventCategory': u'Brokerage/Trading',
    u'deviceHostName': None,
    u'deviceNameOrIp': None,
    u'devicePolicyAction': u'PROXIED',
    u'deviceProcessName': None,
    u'endTime': None,
    u'externalLogSourceType': u'BlueCoat',
    u'logSourceType': u'WebProxyMef',
    u'message': None,
    u'outputFormat': u'WebProxyMef',
    u'rawLog': u'2014-07-1500: 07: 0745.0.0.189Dexter_McClusterMozilla/4.0-(compatible;-MSIE-6.0;-Windows-NT-5.1;-SV1;-.NET-CLR-1.0.3705;-.NET-CLR-1.1.4322;-Tablet-PC-1.7)PROXIED200TCP_MISS107331095GEThttpwebcast.on24.com/event/12190/1/slide/slide/9_172x129.jpg?ms=18585444Brokerage/Trading192.16.170.42',
    u'reason': None,
    u'requestClientApplication': u'Mozilla/4.0-(compatible;-MSIE-6.0;-Windows-NT-5.1;-SV1;-.NET-CLR-1.0.3705;-.NET-CLR-1.1.4322;-Tablet-PC-1.7)',
    u'requestMethod': u'GET',
    u'requestPath': u'/event/12190/1/slide/slide/9_172x129.jpg',
    u'requestQuery': u'?ms=18585444',
    u'requestScheme': u'http',
    u'responseContentType': None,
    u'sourceAddress': u'45.0.0.189',
    u'sourceDnsDomain': None,
    u'sourceHostName': None,
    u'sourceMacAddress': None,
    u'sourceNameOrIp': u'45.0.0.189',
    u'sourcePort': None,
    u'sourceUserName': u'Dexter_McCluster',
    u'startTime': 1405382827000,
    u'startTimeISO': u'2014-07-15T00: 07: 07.000Z',
    u'transportProtocol': u'tcp',
    u'uuid': u'2ac379e2-9a05-4062-8dec-3643f10d5377'
}{
    u'applicationProtocol': u'http',
    u'bytesIn': 1095,
    u'bytesOut': 10733,
    u'cefSignatureId': u'200',
    u'destinationAddress': None,
    u'destinationDnsDomain': u'on24.com',
    u'destinationHostName': u'webcast.on24.com',
    u'destinationMacAddress': None,
    u'destinationNameOrIp': u'webcast.on24.com',
    u'destinationPort': None,
    u'deviceAction': u'TCP_MISS',
    u'deviceAddress': u'192.16.170.42',
    u'deviceDnsDomain': None,
    u'deviceEventCategory': u'Brokerage/Trading',
    u'deviceHostName': None,
    u'deviceNameOrIp': None,
    u'devicePolicyAction': u'PROXIED',
    u'deviceProcessName': None,
    u'endTime': None,
    u'externalLogSourceType': u'BlueCoat',
    u'logSourceType': u'WebProxyMef',
    u'message': None,
    u'outputFormat': u'WebProxyMef',
    u'rawLog': u'2014-07-1500: 07: 0745.0.0.189Dexter_McClusterMozilla/4.0-(compatible;-MSIE-6.0;-Windows-NT-5.1;-SV1;-.NET-CLR-1.0.3705;-.NET-CLR-1.1.4322;-Tablet-PC-1.7)PROXIED200TCP_MISS107331095GEThttpwebcast.on24.com/event/12190/1/slide/slide/9_172x129.jpg?ms=18585444Brokerage/Trading192.16.170.42',
    u'reason': None,
    u'requestClientApplication': u'Mozilla/4.0-(compatible;-MSIE-6.0;-Windows-NT-5.1;-SV1;-.NET-CLR-1.0.3705;-.NET-CLR-1.1.4322;-Tablet-PC-1.7)',
    u'requestMethod': u'GET',
    u'requestPath': u'/event/12190/1/slide/slide/9_172x129.jpg',
    u'requestQuery': u'?ms=18585444',
    u'requestScheme': u'http',
    u'responseContentType': None,
    u'sourceAddress': u'45.0.0.189',
    u'sourceDnsDomain': None,
    u'sourceHostName': None,
    u'sourceMacAddress': None,
    u'sourceNameOrIp': u'45.0.0.189',
    u'sourcePort': None,
    u'sourceUserName': u'Dexter_McCluster',
    u'startTime': 1405382827000,
    u'startTimeISO': u'2014-07-15T00: 07: 07.000Z',
    u'transportProtocol': u'tcp',
    u'uuid': u'6fc798d3-59b9-4f17-9b13-e50917c9db5b'
}