{
  "_index": "ecs-forcepoint-firewall-20200702-000005",
  "_type": "_doc",
  "_id": "yJ_XSHMBirBqbvJH23O7",
  "_score": 1,
  "_source": {
    "destination": {
      "nat": {
        "port": 443,
        "ip": "52.1.2.3"
      },
      "geo": {
        "continent_name": "Europe",
        "region_iso_code": "GB-ENG",
        "city_name": "London",
        "country_iso_code": "GB",
        "region_name": "England",
        "location": {
          "lon": -0.0961,
          "lat": 51.5132
        }
      },
      "port": 443,
      "service": {
        "name": "Microsoft-Office-365"
      },
      "bytes": 5854,
      "ip": "52.1.2.3"
    },
    "rule": {
      "nat": {
        "id": "901.2"
      },
      "id": "855.0"
    },
    "source": {
      "nat": {
        "port": 48151,
        "ip": "37.4.5.6"
      },
      "port": 60062,
      "bytes": 4732,
      "ip": "10.7.8.9"
    },
    "network": {
      "application": "HTTPS",
      "transport": "tcp",
      "iana_number": "6"
    },
    "forcepoint": {
      "facility": "Packet Filtering",
      "situation": "Connection_Closed"
    },
    "observer": {
      "ingress": {
        "interface": {
          "id": "128"
        }
      },
      "product": "Firewall",
      "hostname": "10.10.11.12",
      "vendor": "FORCEPOINT",
      "ip": "10.10.11.12",
      "name": "FW-ACME node 2",
      "version": "6.5.8"
    },
    "@timestamp": "2020-07-13T15:42:51.000Z",
    "event": {
      "severity": 0,
      "code": "70021",
      "created": "2020-07-13T15:42:51.881Z"
    }
  }
}