From 7eb4a224cc99c2f71e7c4c7d44c7e056dc094143 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Chema=20Mart=C3=ADnez?= Date: Thu, 1 Jun 2023 16:02:44 +0200 Subject: [PATCH 01/52] Add CRC validation to Zoom module (#35604) * Add CRC options to Zoom module * Update http_endpoint to use crc.secret for the CRC validation * Update changelog * Update the Zoom docs about event verification * Update codeowners for x-pack/filebeat/modules.d/zoom.yml.disabled * Update legacy zoom module documentation --- .github/CODEOWNERS | 1 + CHANGELOG.next.asciidoc | 1 + filebeat/docs/modules/zoom.asciidoc | 10 +++++++--- .../docs/inputs/input-http-endpoint.asciidoc | 6 ++++++ x-pack/filebeat/filebeat.reference.yml | 10 ++++++++-- x-pack/filebeat/input/http_endpoint/config.go | 8 ++++++-- .../input/http_endpoint/handler_test.go | 18 ++++++------------ x-pack/filebeat/input/http_endpoint/input.go | 2 +- x-pack/filebeat/module/zoom/_meta/config.yml | 10 ++++++++-- .../filebeat/module/zoom/_meta/docs.asciidoc | 10 +++++++--- .../module/zoom/webhook/config/webhook.yml | 5 +++++ .../filebeat/module/zoom/webhook/manifest.yml | 4 ++++ x-pack/filebeat/modules.d/zoom.yml.disabled | 10 ++++++++-- 13 files changed, 68 insertions(+), 27 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 2df5cf01c58f..50fb92c88598 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -142,6 +142,7 @@ CHANGELOG* /x-pack/filebeat/module/zookeeper @elastic/integrations /x-pack/filebeat/module/zoom @elastic/security-external-integrations /x-pack/filebeat/module/zscaler @elastic/security-external-integrations +/x-pack/filebeat/modules.d/zoom.yml.disabled @elastic/security-external-integrations /x-pack/filebeat/processors/decode_cef/ @elastic/security-external-integrations /x-pack/heartbeat/ @elastic/uptime /x-pack/metricbeat/ @elastic/elastic-agent-data-plane diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 31a138174b7b..18f502152886 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -290,6 +290,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Add oracle authentication messages parsing {pull}35127[35127] - Add sanitization capabilities to azure-eventhub input {pull}34874[34874] - Add support for CRC validation in Filebeat's HTTP endpoint input. {pull}35204[35204] +- Add support for CRC validation in Zoom module. {pull}35604[35604] - Add execution budget to CEL input. {pull}35409[35409] - Add XML decoding support to HTTPJSON. {issue}34438[34438] {pull}35235[35235] - Add delegated account support when using Google ADC in `httpjson` input. {pull}35507[35507] diff --git a/filebeat/docs/modules/zoom.asciidoc b/filebeat/docs/modules/zoom.asciidoc index e55e5934c2d8..7e0685dfe87a 100644 --- a/filebeat/docs/modules/zoom.asciidoc +++ b/filebeat/docs/modules/zoom.asciidoc @@ -29,9 +29,11 @@ include::../include/config-option-intro.asciidoc[] [float] ==== `webhook` fileset settings -When a webhook integration is created on Zoom, it will show a special token used to ensure that filebeat only handles HTTP requests from the correct source. +When a webhook integration is created on Zoom, you can create a custom header to verify webhook events. See https://developers.zoom.us/docs/api/rest/webhook-reference/#custom-header[Custom Header] for more information about this process. This is configured with the `secret.header` and `secret.value` settings as shown below. +On the other hand, Zoom also requires webhook validation for created or modified webhooks after October, 2022. This follows a challenge-response check (CRC) algorithm which is configured with the `crc.enabled` and `crc.secret` settings. Learn more about it at https://developers.zoom.us/docs/api/rest/webhook-reference/#validate-your-webhook-endpoint[Validate your webhook endpoint]. + Example config: [source,yaml] @@ -42,8 +44,10 @@ Example config: var.input: http_endpoint var.listen_address: 0.0.0.0 var.listen_port: 8080 - var.secret.header: Authorization - var.secret.value: ZOOMTOKEN + var.secret.header: x-my-custom-key + var.secret.value: my-custom-value + var.crc.enabled: true + var.crc.secret: ZOOMSECRETTOKEN ---- include::../include/var-paths.asciidoc[] diff --git a/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc b/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc index 28c5c6dd4ecf..eafbb5d4d83a 100644 --- a/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc +++ b/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc @@ -142,6 +142,7 @@ Validate webhook endpoint for a specific provider using CRC secret.header: someheadername secret.value: secretheadertoken crc.provider: webhookProvider + crc.secret: secretToken ---- Validate a HMAC signature from a specific header @@ -273,6 +274,11 @@ This option copies the raw unmodified body of the incoming request to the event. This option defines the provider of the webhook that uses CRC (Challenge-Response Check) for validating the endpoint. The HTTP endpoint input is responsible for ensuring the authenticity of incoming webhook requests by generating and verifying a unique token. By specifying the `crc.provider`, you ensure that the system correctly handles the specific CRC validation process required by the chosen provider. +[float] +==== `crc.secret` + +The secret token provided by the webhook owner for the CRC validation. + [id="{beatname_lc}-input-{type}-common-options"] include::../../../../filebeat/docs/inputs/input-common-options.asciidoc[] diff --git a/x-pack/filebeat/filebeat.reference.yml b/x-pack/filebeat/filebeat.reference.yml index 4c6147ce3925..f63264412871 100644 --- a/x-pack/filebeat/filebeat.reference.yml +++ b/x-pack/filebeat/filebeat.reference.yml @@ -2558,8 +2558,14 @@ filebeat.modules: # The header Zoom uses to send its secret token, defaults to "Authorization" #secret.header: Authorization - # The secret token value created by Zoom - #secret.value: ZOOMTOKEN + # The custom secret token value created when configuring the Zoom webhook + #secret.value: my-custom-value + + # Enable the CRC webhook validation + #crc.enabled: false + + # The secret token value provided by Zoom for CRC validation + #crc.secret: ZOOMSECRETTOKEN #----------------------------- Zscaler NSS Module ----------------------------- - module: zscaler diff --git a/x-pack/filebeat/input/http_endpoint/config.go b/x-pack/filebeat/input/http_endpoint/config.go index 2a8a246460ef..d60ffdeb989e 100644 --- a/x-pack/filebeat/input/http_endpoint/config.go +++ b/x-pack/filebeat/input/http_endpoint/config.go @@ -40,6 +40,7 @@ type config struct { HMACType string `config:"hmac.type"` HMACPrefix string `config:"hmac.prefix"` CRCProvider string `config:"crc.provider"` + CRCSecret string `config:"crc.secret"` IncludeHeaders []string `config:"include_headers"` PreserveOriginalEvent bool `config:"preserve_original_event"` } @@ -63,6 +64,7 @@ func defaultConfig() config { HMACType: "", HMACPrefix: "", CRCProvider: "", + CRCSecret: "", } } @@ -92,9 +94,11 @@ func (c *config) Validate() error { if c.CRCProvider != "" { if !isValidCRCProvider(c.CRCProvider) { return fmt.Errorf("not a valid CRC provider: %q", c.CRCProvider) - } else if c.SecretValue == "" { - return errors.New("secret.value is required when crc.provider is defined") + } else if c.CRCSecret == "" { + return errors.New("crc.secret is required when crc.provider is defined") } + } else if c.CRCSecret != "" { + return errors.New("crc.provider is required when crc.secret is defined") } return nil diff --git a/x-pack/filebeat/input/http_endpoint/handler_test.go b/x-pack/filebeat/input/http_endpoint/handler_test.go index ec9533ff97c7..d5250881ae09 100644 --- a/x-pack/filebeat/input/http_endpoint/handler_test.go +++ b/x-pack/filebeat/input/http_endpoint/handler_test.go @@ -245,9 +245,8 @@ func Test_apiResponse(t *testing.T) { { name: "validate CRC request", conf: config{ - SecretHeader: "secretHeaderTest", - SecretValue: "secretValueTest", - CRCProvider: "Zoom", + CRCProvider: "Zoom", + CRCSecret: "secretValueTest", }, request: func() *http.Request { buf := bytes.NewBufferString( @@ -261,7 +260,6 @@ func Test_apiResponse(t *testing.T) { ) req := httptest.NewRequest(http.MethodPost, "/", buf) req.Header.Set("Content-Type", "application/json") - req.Header.Set("secretHeaderTest", "secretValueTest") return req }(), events: nil, @@ -271,9 +269,8 @@ func Test_apiResponse(t *testing.T) { { name: "malformed CRC request", conf: config{ - SecretHeader: "secretHeaderTest", - SecretValue: "secretValueTest", - CRCProvider: "Zoom", + CRCProvider: "Zoom", + CRCSecret: "secretValueTest", }, request: func() *http.Request { buf := bytes.NewBufferString( @@ -287,7 +284,6 @@ func Test_apiResponse(t *testing.T) { ) req := httptest.NewRequest(http.MethodPost, "/", buf) req.Header.Set("Content-Type", "application/json") - req.Header.Set("secretHeaderTest", "secretValueTest") return req }(), events: nil, @@ -297,9 +293,8 @@ func Test_apiResponse(t *testing.T) { { name: "empty CRC challenge", conf: config{ - SecretHeader: "secretHeaderTest", - SecretValue: "secretValueTest", - CRCProvider: "Zoom", + CRCProvider: "Zoom", + CRCSecret: "secretValueTest", }, request: func() *http.Request { buf := bytes.NewBufferString( @@ -313,7 +308,6 @@ func Test_apiResponse(t *testing.T) { ) req := httptest.NewRequest(http.MethodPost, "/", buf) req.Header.Set("Content-Type", "application/json") - req.Header.Set("secretHeaderTest", "secretValueTest") return req }(), events: nil, diff --git a/x-pack/filebeat/input/http_endpoint/input.go b/x-pack/filebeat/input/http_endpoint/input.go index e4d99806f5e9..4fe312a57264 100644 --- a/x-pack/filebeat/input/http_endpoint/input.go +++ b/x-pack/filebeat/input/http_endpoint/input.go @@ -259,7 +259,7 @@ func newHandler(c config, pub stateless.Publisher, log *logp.Logger) http.Handle responseBody: c.ResponseBody, includeHeaders: canonicalizeHeaders(c.IncludeHeaders), preserveOriginalEvent: c.PreserveOriginalEvent, - crc: newCRC(c.CRCProvider, c.SecretValue), + crc: newCRC(c.CRCProvider, c.CRCSecret), } return newAPIValidationHandler(http.HandlerFunc(handler.apiResponse), validator, log) diff --git a/x-pack/filebeat/module/zoom/_meta/config.yml b/x-pack/filebeat/module/zoom/_meta/config.yml index a010f43f3a99..f996405689a1 100644 --- a/x-pack/filebeat/module/zoom/_meta/config.yml +++ b/x-pack/filebeat/module/zoom/_meta/config.yml @@ -15,5 +15,11 @@ # The header Zoom uses to send its secret token, defaults to "Authorization" #secret.header: Authorization - # The secret token value created by Zoom - #secret.value: ZOOMTOKEN + # The custom secret token value created when configuring the Zoom webhook + #secret.value: my-custom-value + + # Enable the CRC webhook validation + #crc.enabled: false + + # The secret token value provided by Zoom for CRC validation + #crc.secret: ZOOMSECRETTOKEN diff --git a/x-pack/filebeat/module/zoom/_meta/docs.asciidoc b/x-pack/filebeat/module/zoom/_meta/docs.asciidoc index 4b3b0da5134d..28236e17140c 100644 --- a/x-pack/filebeat/module/zoom/_meta/docs.asciidoc +++ b/x-pack/filebeat/module/zoom/_meta/docs.asciidoc @@ -22,9 +22,11 @@ include::../include/config-option-intro.asciidoc[] [float] ==== `webhook` fileset settings -When a webhook integration is created on Zoom, it will show a special token used to ensure that filebeat only handles HTTP requests from the correct source. +When a webhook integration is created on Zoom, you can create a custom header to verify webhook events. See https://developers.zoom.us/docs/api/rest/webhook-reference/#custom-header[Custom Header] for more information about this process. This is configured with the `secret.header` and `secret.value` settings as shown below. +On the other hand, Zoom also requires webhook validation for created or modified webhooks after October, 2022. This follows a challenge-response check (CRC) algorithm which is configured with the `crc.enabled` and `crc.secret` settings. Learn more about it at https://developers.zoom.us/docs/api/rest/webhook-reference/#validate-your-webhook-endpoint[Validate your webhook endpoint]. + Example config: [source,yaml] @@ -35,8 +37,10 @@ Example config: var.input: http_endpoint var.listen_address: 0.0.0.0 var.listen_port: 8080 - var.secret.header: Authorization - var.secret.value: ZOOMTOKEN + var.secret.header: x-my-custom-key + var.secret.value: my-custom-value + var.crc.enabled: true + var.crc.secret: ZOOMSECRETTOKEN ---- include::../include/var-paths.asciidoc[] diff --git a/x-pack/filebeat/module/zoom/webhook/config/webhook.yml b/x-pack/filebeat/module/zoom/webhook/config/webhook.yml index 312ba2c208a6..d56dd9670d84 100644 --- a/x-pack/filebeat/module/zoom/webhook/config/webhook.yml +++ b/x-pack/filebeat/module/zoom/webhook/config/webhook.yml @@ -12,6 +12,11 @@ content_type: "{{ .content_type }}" secret: {{ .secret | tojson }} ssl: {{ .ssl | tojson }} +{{ if .crc.enabled }} +crc.provider: zoom +crc.secret: {{ .crc.secret }} +{{ end }} + {{ else if eq .input "file" }} type: log diff --git a/x-pack/filebeat/module/zoom/webhook/manifest.yml b/x-pack/filebeat/module/zoom/webhook/manifest.yml index 31f78e24e251..05a85691cfde 100644 --- a/x-pack/filebeat/module/zoom/webhook/manifest.yml +++ b/x-pack/filebeat/module/zoom/webhook/manifest.yml @@ -24,6 +24,10 @@ var: default: header: Authorization value: "" + - name: crc + default: + enabled: false + secret: "" - name: tags default: [zoom-webhook, forwarded] diff --git a/x-pack/filebeat/modules.d/zoom.yml.disabled b/x-pack/filebeat/modules.d/zoom.yml.disabled index 04e6613806b9..8fb6dffcaffb 100644 --- a/x-pack/filebeat/modules.d/zoom.yml.disabled +++ b/x-pack/filebeat/modules.d/zoom.yml.disabled @@ -18,5 +18,11 @@ # The header Zoom uses to send its secret token, defaults to "Authorization" #secret.header: Authorization - # The secret token value created by Zoom - #secret.value: ZOOMTOKEN + # The custom secret token value created when configuring the Zoom webhook + #secret.value: my-custom-value + + # Enable the CRC webhook validation + #crc.enabled: false + + # The secret token value provided by Zoom for CRC validation + #crc.secret: ZOOMSECRETTOKEN From f32bc484018f244c8a69db1f7f6b22552d423584 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Jun 2023 16:04:11 -0400 Subject: [PATCH 02/52] Bump github.com/elastic/go-elasticsearch/v8 from 8.2.0 to 8.8.0 (#35592) * Bump github.com/elastic/go-elasticsearch/v8 from 8.2.0 to 8.8.0 Bumps [github.com/elastic/go-elasticsearch/v8](https://github.com/elastic/go-elasticsearch) from 8.2.0 to 8.8.0. - [Release notes](https://github.com/elastic/go-elasticsearch/releases) - [Changelog](https://github.com/elastic/go-elasticsearch/blob/v8.8.0/CHANGELOG.md) - [Commits](https://github.com/elastic/go-elasticsearch/compare/v8.2.0...v8.8.0) --- updated-dependencies: - dependency-name: github.com/elastic/go-elasticsearch/v8 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] * Update NOTICE.txt * Fix modified check in post-dependabot action --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] Co-authored-by: Andrew Kroh --- .github/workflows/post-dependabot.yml | 2 +- NOTICE.txt | 4 ++-- go.mod | 2 +- go.sum | 6 +++--- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/post-dependabot.yml b/.github/workflows/post-dependabot.yml index 120558caa801..069f0d777e1f 100644 --- a/.github/workflows/post-dependabot.yml +++ b/.github/workflows/post-dependabot.yml @@ -27,7 +27,7 @@ jobs: - name: check for modified NOTICE.txt id: notice-check - run: echo "modified=$(if git diff-index --quiet HEAD -- NOTICE.txt; then echo "false"; else echo "true"; fi)" >> $GITHUB_OUTPUT + run: echo "modified=$(if git status --porcelain --untracked-files=no | grep -q -E ' NOTICE.txt$'; then echo "true"; else echo "false"; fi)" >> $GITHUB_OUTPUT - name: commit NOTICE.txt if: steps.notice-check.outputs.modified == 'true' diff --git a/NOTICE.txt b/NOTICE.txt index 09f790a04be3..3dbda5c6c1ac 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -13326,11 +13326,11 @@ Contents of probable licence file $GOMODCACHE/github.com/elastic/go-concert@v0.2 -------------------------------------------------------------------------------- Dependency : github.com/elastic/go-elasticsearch/v8 -Version: v8.2.0 +Version: v8.8.0 Licence type (autodetected): Apache-2.0 -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/go-elasticsearch/v8@v8.2.0/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/elastic/go-elasticsearch/v8@v8.8.0/LICENSE: Apache License Version 2.0, January 2004 diff --git a/go.mod b/go.mod index 8979b89cb455..652289108a93 100644 --- a/go.mod +++ b/go.mod @@ -199,7 +199,7 @@ require ( github.com/elastic/elastic-agent-libs v0.3.8 github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3 github.com/elastic/elastic-agent-system-metrics v0.6.1 - github.com/elastic/go-elasticsearch/v8 v8.2.0 + github.com/elastic/go-elasticsearch/v8 v8.8.0 github.com/elastic/mito v1.3.0 github.com/elastic/toutoumomoma v0.0.0-20221026030040-594ef30cb640 github.com/foxcpp/go-mockdns v0.0.0-20201212160233-ede2f9158d15 diff --git a/go.sum b/go.sum index 1e1f40959ab4..1f0c18ca9d89 100644 --- a/go.sum +++ b/go.sum @@ -512,7 +512,7 @@ github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b6 github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3/go.mod h1:rWarFM7qYxJKsi9WcV6ONcFjH/NA3niDNpTxO+8/GVI= github.com/elastic/elastic-agent-system-metrics v0.6.1 h1:LCN1lvQTkdUuU/rKlpKyVMDU/G/I8/iZWCaW6K+mo4o= github.com/elastic/elastic-agent-system-metrics v0.6.1/go.mod h1:Bj8XM/uNKm553blQHkGNEICRLGnVEtw8yttmV5vBngA= -github.com/elastic/elastic-transport-go/v8 v8.1.0/go.mod h1:87Tcz8IVNe6rVSLdBux1o/PEItLtyabHU3naC7IoqKI= +github.com/elastic/elastic-transport-go/v8 v8.0.0-20230329154755-1a3c63de0db6/go.mod h1:87Tcz8IVNe6rVSLdBux1o/PEItLtyabHU3naC7IoqKI= github.com/elastic/elastic-transport-go/v8 v8.2.0 h1:hkK5IIs/15mpSXzd5THWVlWTKJyMw6cbCWM3T/B2S5E= github.com/elastic/elastic-transport-go/v8 v8.2.0/go.mod h1:87Tcz8IVNe6rVSLdBux1o/PEItLtyabHU3naC7IoqKI= github.com/elastic/fsevents v0.0.0-20181029231046-e1d381a4d270 h1:cWPqxlPtir4RoQVCpGSRXmLqjEHpJKbR60rxh1nQZY4= @@ -520,8 +520,8 @@ github.com/elastic/fsevents v0.0.0-20181029231046-e1d381a4d270/go.mod h1:Msl1pdb github.com/elastic/glog v1.0.1-0.20210831205241-7d8b5c89dfc4/go.mod h1:EWib/APOK0SL3dFbYqvxE3UYd8E6s1ouQ7iEp/0LWV4= github.com/elastic/go-concert v0.2.0 h1:GAQrhRVXprnNjtvTP9pWJ1d4ToEA4cU5ci7TwTa20xg= github.com/elastic/go-concert v0.2.0/go.mod h1:HWjpO3IAEJUxOeaJOWXWEp7imKd27foxz9V5vegC/38= -github.com/elastic/go-elasticsearch/v8 v8.2.0 h1:oagGcb1gqxT7yWpQ3E7wMP3NhGRamsKVd7kRdbuI+/Y= -github.com/elastic/go-elasticsearch/v8 v8.2.0/go.mod h1:yY52i2Vj0unLz+N3Nwx1gM5LXwoj3h2dgptNGBYkMLA= +github.com/elastic/go-elasticsearch/v8 v8.8.0 h1:yNBPlXNo6wstMG7I3KiZPbLFgA82RMryYqkh1xBMV3A= +github.com/elastic/go-elasticsearch/v8 v8.8.0/go.mod h1:NGmpvohKiRHXI0Sw4fuUGn6hYOmAXlyCphKpzVBiqDE= github.com/elastic/go-libaudit/v2 v2.3.2 h1:qWNcA3nkwNEGh1UBDbDTVF55KR6SM1W2Ji1LGDqFEpw= github.com/elastic/go-libaudit/v2 v2.3.2/go.mod h1:+ZE0czqmbqtnRkl0fNgpI+HvVVRo/ZMJdcXv/PaKcOo= github.com/elastic/go-licenser v0.4.0/go.mod h1:V56wHMpmdURfibNBggaSBfqgPxyT1Tldns1i87iTEvU= From a818b6d15958d0d79c9f72f6effadf91cad56e0e Mon Sep 17 00:00:00 2001 From: Lalit Satapathy <69236064+lalit-satapathy@users.noreply.github.com> Date: Fri, 2 Jun 2023 14:41:56 +0530 Subject: [PATCH 03/52] CODEOWNER update for obs-infraobs-integrations. (#35545) * CODEOWNER update for obs-infraobs-integrations and related changes. --- .github/CODEOWNERS | 61 ++++++++++++++++++++++++++++++++++------------ 1 file changed, 46 insertions(+), 15 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 50fb92c88598..07b97dcc4e3d 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -24,25 +24,23 @@ CHANGELOG* /filebeat/input/syslog/ @elastic/security-external-integrations /filebeat/input/winlog/ @elastic/security-external-integrations /filebeat/module/ @elastic/integrations -/filebeat/module/apache @elastic/integrations +/filebeat/module/apache @elastic/obs-infraobs-integrations /filebeat/module/auditd @elastic/security-external-integrations /filebeat/module/elasticsearch/ @elastic/infra-monitoring-ui -/filebeat/module/haproxy @elastic/integrations +/filebeat/module/haproxy @elastic/obs-infraobs-integrations /filebeat/module/icinga @elastic/integrations -/filebeat/module/iis @elastic/integrations -/filebeat/module/kafka @elastic/integrations -/filebeat/module/kibana @elastic/integrations +/filebeat/module/iis @elastic/obs-infraobs-integrations +/filebeat/module/kafka @elastic/obs-infraobs-integrations /filebeat/module/kibana/ @elastic/infra-monitoring-ui -/filebeat/module/logstash @elastic/integrations /filebeat/module/logstash/ @elastic/infra-monitoring-ui -/filebeat/module/mongodb @elastic/integrations +/filebeat/module/mongodb @elastic/obs-infraobs-integrations /filebeat/module/mysql @elastic/security-external-integrations /filebeat/module/nats @elastic/integrations -/filebeat/module/nginx @elastic/integrations +/filebeat/module/nginx @elastic/obs-infraobs-integrations /filebeat/module/osquery @elastic/security-asset-management /filebeat/module/pensando @elastic/security-external-integrations -/filebeat/module/postgresql @elastic/integrations -/filebeat/module/redis @elastic/integrations +/filebeat/module/postgresql @elastic/obs-infraobs-integrations +/filebeat/module/redis @elastic/obs-infraobs-integrations /filebeat/module/santa @elastic/security-external-integrations /filebeat/module/system @elastic/elastic-agent-data-plane /filebeat/module/traefik @elastic/integrations @@ -63,14 +61,34 @@ CHANGELOG* /metricbeat/ @elastic/elastic-agent-data-plane /metricbeat/docs/ # Listed without an owner to avoid maintaining doc ownership for each input and module. /metricbeat/module/ @elastic/integrations +/metricbeat/module/apache @elastic/obs-infraobs-integrations /metricbeat/module/beat/ @elastic/infra-monitoring-ui +/metricbeat/module/ceph @elastic/obs-infraobs-integrations +/metricbeat/module/couchbase @elastic/obs-infraobs-integrations +/metricbeat/module/couchdb @elastic/obs-infraobs-integrations /metricbeat/module/elasticsearch/ @elastic/infra-monitoring-ui +/metricbeat/module/etcd @elastic/obs-infraobs-integrations +/metricbeat/module/golang @elastic/obs-infraobs-integrations +/metricbeat/module/haproxy @elastic/obs-infraobs-integrations +/metricbeat/module/http @elastic/obs-infraobs-integrations +/metricbeat/module/jolokia @elastic/obs-infraobs-integrations +/metricbeat/module/kafka @elastic/obs-infraobs-integrations /metricbeat/module/kibana/ @elastic/infra-monitoring-ui /metricbeat/module/kubernetes/ @elastic/obs-cloudnative-monitoring /metricbeat/module/logstash/ @elastic/infra-monitoring-ui +/metricbeat/module/memcached @elastic/obs-infraobs-integrations +/metricbeat/module/mongodb @elastic/obs-infraobs-integrations +/metricbeat/module/mysql @elastic/obs-infraobs-integrations /metricbeat/module/nats/ @elastic/obs-cloudnative-monitoring +/metricbeat/module/nginx @elastic/obs-infraobs-integrations +/metricbeat/module/php_fpm @elastic/obs-infraobs-integrations /metricbeat/module/prometheus/ @elastic/obs-cloudnative-monitoring +/metricbeat/module/postgresql @elastic/obs-infraobs-integrations +/metricbeat/module/rabbitmq @elastic/obs-infraobs-integrations +/metricbeat/module/redis @elastic/obs-infraobs-integrations /metricbeat/module/system/ @elastic/elastic-agent-data-plane +/metricbeat/module/vsphere @elastic/obs-infraobs-integrations +/metricbeat/module/zookeeper @elastic/obs-infraobs-integrations /packetbeat/ @elastic/security-external-integrations /script/ @elastic/elastic-agent-data-plane /testing/ @elastic/elastic-agent-data-plane @@ -94,7 +112,7 @@ CHANGELOG* /x-pack/filebeat/input/netflow/ @elastic/security-external-integrations /x-pack/filebeat/input/o365audit/ @elastic/security-external-integrations /x-pack/filebeat/module/ @elastic/integrations -/x-pack/filebeat/module/activemq @elastic/integrations +/x-pack/filebeat/module/activemq @elastic/obs-infraobs-integrations /x-pack/filebeat/module/aws @elastic/obs-cloud-monitoring /x-pack/filebeat/module/awsfargate @elastic/obs-cloud-monitoring /x-pack/filebeat/module/azure @elastic/obs-cloud-monitoring @@ -112,14 +130,14 @@ CHANGELOG* /x-pack/filebeat/module/fortinet @elastic/security-external-integrations /x-pack/filebeat/module/gcp @elastic/security-external-integrations /x-pack/filebeat/module/google_workspace @elastic/security-external-integrations -/x-pack/filebeat/module/ibmmq @elastic/integrations +/x-pack/filebeat/module/ibmmq @elastic/obs-infraobs-integrations /x-pack/filebeat/module/imperva @elastic/security-external-integrations /x-pack/filebeat/module/infoblox @elastic/security-external-integrations /x-pack/filebeat/module/iptables @elastic/security-external-integrations /x-pack/filebeat/module/juniper @elastic/security-external-integrations /x-pack/filebeat/module/microsoft @elastic/security-external-integrations /x-pack/filebeat/module/misp @elastic/security-external-integrations -/x-pack/filebeat/module/mssql @elastic/integrations +/x-pack/filebeat/module/mssql @elastic/obs-infraobs-integrations /x-pack/filebeat/module/mysqlenterprise @elastic/security-external-integrations /x-pack/filebeat/module/netflow @elastic/security-external-integrations /x-pack/filebeat/module/netscout @elastic/security-external-integrations @@ -128,7 +146,7 @@ CHANGELOG* /x-pack/filebeat/module/oracle @elastic/security-external-integrations /x-pack/filebeat/module/panw @elastic/security-external-integrations /x-pack/filebeat/module/proofpoint @elastic/security-external-integrations -/x-pack/filebeat/module/rabbitmq @elastic/integrations +/x-pack/filebeat/module/rabbitmq @elastic/obs-infraobs-integrations /x-pack/filebeat/module/radware @elastic/security-external-integrations /x-pack/filebeat/module/snort @elastic/security-external-integrations /x-pack/filebeat/module/snyk @elastic/security-external-integrations @@ -139,7 +157,7 @@ CHANGELOG* /x-pack/filebeat/module/threatintel @elastic/security-external-integrations /x-pack/filebeat/module/tomcat @elastic/security-external-integrations /x-pack/filebeat/module/zeek @elastic/security-external-integrations -/x-pack/filebeat/module/zookeeper @elastic/integrations +/x-pack/filebeat/module/zookeeper @elastic/obs-infraobs-integrations /x-pack/filebeat/module/zoom @elastic/security-external-integrations /x-pack/filebeat/module/zscaler @elastic/security-external-integrations /x-pack/filebeat/modules.d/zoom.yml.disabled @elastic/security-external-integrations @@ -148,11 +166,24 @@ CHANGELOG* /x-pack/metricbeat/ @elastic/elastic-agent-data-plane /x-pack/metricbeat/docs/ # Listed without an owner to avoid maintaining doc ownership for each input and module. /x-pack/metricbeat/module/ @elastic/integrations +/x-pack/metricbeat/module/activemq @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/airflow @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/cloudfoundry @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/cockroachdb @elastic/obs-infraobs-integrations /x-pack/metricbeat/module/containerd/ @elastic/obs-cloudnative-monitoring +/x-pack/metricbeat/module/coredns @elastic/obs-infraobs-integrations /x-pack/metricbeat/module/enterprisesearch @elastic/ent-search-application-backend +/x-pack/metricbeat/module/ibmmq @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/iis @elastic/obs-infraobs-integrations /x-pack/metricbeat/module/istio/ @elastic/obs-cloudnative-monitoring +/x-pack/metricbeat/module/mssql @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/oracle @elastic/obs-infraobs-integrations /x-pack/metricbeat/module/prometheus/ @elastic/obs-cloudnative-monitoring +/x-pack/metricbeat/module/redisenterprise @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/sql @elastic/obs-infraobs-integrations +/x-pack/metricbeat/module/statsd @elastic/obs-infraobs-integrations /x-pack/metricbeat/module/stan/ @elastic/obs-cloudnative-monitoring +/x-pack/metricbeat/module/tomcat @elastic/obs-infraobs-integrations /x-pack/osquerybeat/ @elastic/security-asset-management /x-pack/packetbeat/ @elastic/security-external-integrations /x-pack/winlogbeat/ @elastic/security-external-integrations From 295d2d5fbd55f8a656901b69dd768318ab5bdb55 Mon Sep 17 00:00:00 2001 From: Chris Berkhout Date: Fri, 2 Jun 2023 14:17:05 +0200 Subject: [PATCH 04/52] CI: unit testing of Auditbeat and Packetbeat on RHEL9 (#35634) CI: Run auditbeat (#34577) and packetbeat (#34576) unit tests on RHEL9 --- auditbeat/Jenkinsfile.yml | 5 +++++ packetbeat/Jenkinsfile.yml | 5 +++++ x-pack/auditbeat/Jenkinsfile.yml | 5 +++++ x-pack/packetbeat/Jenkinsfile.yml | 5 +++++ 4 files changed, 20 insertions(+) diff --git a/auditbeat/Jenkinsfile.yml b/auditbeat/Jenkinsfile.yml index 96b2aade727f..4ea656f174ea 100644 --- a/auditbeat/Jenkinsfile.yml +++ b/auditbeat/Jenkinsfile.yml @@ -60,6 +60,11 @@ stages: # - "macosM1Test" # tags: false ## for all the tags # stage: extended + rhel-9: + mage: "mage build unitTest" + platforms: ## override default labels in this specific stage. + - "rhel-9" + stage: mandatory windows-2022: mage: "mage build unitTest" platforms: ## override default labels in this specific stage. diff --git a/packetbeat/Jenkinsfile.yml b/packetbeat/Jenkinsfile.yml index 6f9488d7b944..f869315fe546 100644 --- a/packetbeat/Jenkinsfile.yml +++ b/packetbeat/Jenkinsfile.yml @@ -56,6 +56,11 @@ stages: - "macosM1Test" tags: false ## for all the tags stage: extended + rhel-9: + mage: "mage build unitTest" + platforms: ## override default labels in this specific stage. + - "rhel-9" + stage: mandatory windows-2022: mage: "mage build unitTest" platforms: ## override default labels in this specific stage. diff --git a/x-pack/auditbeat/Jenkinsfile.yml b/x-pack/auditbeat/Jenkinsfile.yml index 6fc17c49d074..a8038c4d4dc7 100644 --- a/x-pack/auditbeat/Jenkinsfile.yml +++ b/x-pack/auditbeat/Jenkinsfile.yml @@ -57,6 +57,11 @@ stages: - "macosM1Test" tags: false ## for all the tags stage: extended + rhel-9: + mage: "mage build unitTest" + platforms: ## override default labels in this specific stage. + - "rhel-9" + stage: mandatory windows-2022: mage: "mage build unitTest" platforms: ## override default labels in this specific stage. diff --git a/x-pack/packetbeat/Jenkinsfile.yml b/x-pack/packetbeat/Jenkinsfile.yml index 4c07c4c0221f..82b0274deabb 100644 --- a/x-pack/packetbeat/Jenkinsfile.yml +++ b/x-pack/packetbeat/Jenkinsfile.yml @@ -60,6 +60,11 @@ stages: - "macosM1Test" tags: false ## for all the tags stage: extended + rhel-9: + mage: "mage build unitTest" + platforms: ## override default labels in this specific stage. + - "rhel-9" + stage: mandatory windows-2022: mage: "mage build unitTest" platforms: ## override default labels in this specific stage. From 19df6950bbb59622622b801cdf9f4b0b4a524dde Mon Sep 17 00:00:00 2001 From: Gabriel Pop <94497545+gpop63@users.noreply.github.com> Date: Fri, 2 Jun 2023 16:52:49 +0300 Subject: [PATCH 05/52] [metricbeat] [azure] migrate to new azure sdk (#33585) * migrate to new azure SDK * add new azure SDKs libraries * use cost management type vars * rename paginator var to result * fix empty monitor filter value API call fails with bad request if filter is empty * add usage details startDate and endDate fields * replace armconsumption sdk with fork * remove usage details top and skipToken fields * use resource manager endpoint config param * add changelog entry * convert usage details floats to strings * fix billing data test * use more descriptive changelog entry * use one client options policy for services * Revert "convert usage details floats to strings" This reverts commit dbb363dc24237f918235db84c05224c8f3e1b2e6. * update NOTICE.txt * add resource manager audience config param * Add `resource_manager_audience` setting to the Metricbeat docs The new setting is optional, and it is managed by the Azure SDK in most cases. However, it is available for users working on hybrid Azure cloud environments. * Revert "Add `resource_manager_audience` setting to the Metricbeat docs" This reverts commit dc989eecda65e556947c891b92d0920036744a75. * Add `resource_manager_audience` setting to the Metricbeat docs * Test: trying to make the linter happy I can't reproduce the issue locally * fix deps * make linter happy * replace armconsumption fork * fix NOTICE.txt * return error in GetMetricDefinitions * fix CHANGELOG * remove azure-sdk-for-go fork * make update --------- Co-authored-by: Maurizio Branca Co-authored-by: Maurizio Branca --- CHANGELOG.next.asciidoc | 1 + NOTICE.txt | 725 ++++++++++-------- go.mod | 21 +- go.sum | 42 +- metricbeat/docs/modules/azure.asciidoc | 9 + .../module/azure/_meta/docs.asciidoc | 9 + .../metricbeat/module/azure/billing/client.go | 23 +- .../module/azure/billing/client_test.go | 12 +- .../metricbeat/module/azure/billing/data.go | 110 +-- .../module/azure/billing/data_test.go | 76 +- .../module/azure/billing/mock_service.go | 25 +- .../module/azure/billing/service.go | 152 +++- x-pack/metricbeat/module/azure/client.go | 39 +- x-pack/metricbeat/module/azure/client_test.go | 12 +- .../metricbeat/module/azure/client_utils.go | 40 +- .../module/azure/client_utils_test.go | 10 +- x-pack/metricbeat/module/azure/config.go | 10 +- .../metricbeat/module/azure/mock_service.go | 24 +- .../module/azure/monitor/client_helper.go | 58 +- .../azure/monitor/client_helper_test.go | 80 +- .../module/azure/monitor/monitor_test.go | 4 +- .../module/azure/monitor_service.go | 237 ++++-- .../module/azure/service_interface.go | 14 +- .../module/azure/storage/client_helper.go | 51 +- .../azure/storage/client_helper_test.go | 106 ++- .../module/azure/storage/storage_test.go | 6 +- 26 files changed, 1143 insertions(+), 753 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 18f502152886..40bf0d6af6f8 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -325,6 +325,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Add GCP Carbon Footprint metricbeat data {pull}34820[34820] - Add event loop utilization metric to Kibana module {pull}35020[35020] - Support collecting metrics from both the monitoring account and linked accounts from AWS CloudWatch. {pull}35540[35540] +- Migrate Azure Billing, Monitor, and Storage metricsets to the newer SDK. {pull}33585[33585] *Osquerybeat* diff --git a/NOTICE.txt b/NOTICE.txt index 3dbda5c6c1ac..7cb819b914b8 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -1498,12 +1498,12 @@ Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-event-hubs -------------------------------------------------------------------------------- -Dependency : github.com/elastic/azure-sdk-for-go -Version: v59.0.0-elastic-1+incompatible +Dependency : github.com/Azure/azure-sdk-for-go +Version: v59.0.0+incompatible Licence type (autodetected): MIT -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/azure-sdk-for-go@v59.0.0-elastic-1+incompatible/LICENSE.txt: +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go@v59.0.0+incompatible/LICENSE.txt: The MIT License (MIT) @@ -1528,6 +1528,188 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +-------------------------------------------------------------------------------- +Dependency : github.com/Azure/azure-sdk-for-go/sdk/azcore +Version: v1.4.0 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/azcore@v1.4.0/LICENSE.txt: + +MIT License + +Copyright (c) Microsoft Corporation. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE + + +-------------------------------------------------------------------------------- +Dependency : github.com/Azure/azure-sdk-for-go/sdk/azidentity +Version: v1.2.2 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/azidentity@v1.2.2/LICENSE.txt: + +MIT License + +Copyright (c) Microsoft Corporation. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE + + +-------------------------------------------------------------------------------- +Dependency : github.com/elastic/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption +Version: v1.0.1-0.20230529151645-4546c1b1f847 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/elastic/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption@v1.0.1-0.20230529151645-4546c1b1f847/LICENSE.txt: + +MIT License + +Copyright (c) Microsoft Corporation. All rights reserved. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + +-------------------------------------------------------------------------------- +Dependency : github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement +Version: v1.0.0 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement@v1.0.0/LICENSE.txt: + +MIT License + +Copyright (c) Microsoft Corporation. All rights reserved. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + +-------------------------------------------------------------------------------- +Dependency : github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor +Version: v0.8.0 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor@v0.8.0/LICENSE.txt: + +MIT License + +Copyright (c) Microsoft Corporation. All rights reserved. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + +-------------------------------------------------------------------------------- +Dependency : github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources +Version: v1.0.0 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources@v1.0.0/LICENSE.txt: + +MIT License + +Copyright (c) Microsoft Corporation. All rights reserved. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + -------------------------------------------------------------------------------- Dependency : github.com/Azure/azure-sdk-for-go/sdk/storage/azblob Version: v0.4.1 @@ -1990,207 +2172,6 @@ Contents of probable licence file $GOMODCACHE/github.com/!azure/go-autorest/auto limitations under the License. --------------------------------------------------------------------------------- -Dependency : github.com/Azure/go-autorest/autorest/azure/auth -Version: v0.4.2 -Licence type (autodetected): Apache-2.0 --------------------------------------------------------------------------------- - -Contents of probable licence file $GOMODCACHE/github.com/!azure/go-autorest/autorest/azure/auth@v0.4.2/LICENSE: - - - Apache License - Version 2.0, January 2004 - http://www.apache.org/licenses/ - - TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION - - 1. Definitions. - - "License" shall mean the terms and conditions for use, reproduction, - and distribution as defined by Sections 1 through 9 of this document. - - "Licensor" shall mean the copyright owner or entity authorized by - the copyright owner that is granting the License. - - "Legal Entity" shall mean the union of the acting entity and all - other entities that control, are controlled by, or are under common - control with that entity. For the purposes of this definition, - "control" means (i) the power, direct or indirect, to cause the - direction or management of such entity, whether by contract or - otherwise, or (ii) ownership of fifty percent (50%) or more of the - outstanding shares, or (iii) beneficial ownership of such entity. - - "You" (or "Your") shall mean an individual or Legal Entity - exercising permissions granted by this License. - - "Source" form shall mean the preferred form for making modifications, - including but not limited to software source code, documentation - source, and configuration files. - - "Object" form shall mean any form resulting from mechanical - transformation or translation of a Source form, including but - not limited to compiled object code, generated documentation, - and conversions to other media types. - - "Work" shall mean the work of authorship, whether in Source or - Object form, made available under the License, as indicated by a - copyright notice that is included in or attached to the work - (an example is provided in the Appendix below). - - "Derivative Works" shall mean any work, whether in Source or Object - form, that is based on (or derived from) the Work and for which the - editorial revisions, annotations, elaborations, or other modifications - represent, as a whole, an original work of authorship. For the purposes - of this License, Derivative Works shall not include works that remain - separable from, or merely link (or bind by name) to the interfaces of, - the Work and Derivative Works thereof. - - "Contribution" shall mean any work of authorship, including - the original version of the Work and any modifications or additions - to that Work or Derivative Works thereof, that is intentionally - submitted to Licensor for inclusion in the Work by the copyright owner - or by an individual or Legal Entity authorized to submit on behalf of - the copyright owner. For the purposes of this definition, "submitted" - means any form of electronic, verbal, or written communication sent - to the Licensor or its representatives, including but not limited to - communication on electronic mailing lists, source code control systems, - and issue tracking systems that are managed by, or on behalf of, the - Licensor for the purpose of discussing and improving the Work, but - excluding communication that is conspicuously marked or otherwise - designated in writing by the copyright owner as "Not a Contribution." - - "Contributor" shall mean Licensor and any individual or Legal Entity - on behalf of whom a Contribution has been received by Licensor and - subsequently incorporated within the Work. - - 2. Grant of Copyright License. Subject to the terms and conditions of - this License, each Contributor hereby grants to You a perpetual, - worldwide, non-exclusive, no-charge, royalty-free, irrevocable - copyright license to reproduce, prepare Derivative Works of, - publicly display, publicly perform, sublicense, and distribute the - Work and such Derivative Works in Source or Object form. - - 3. Grant of Patent License. Subject to the terms and conditions of - this License, each Contributor hereby grants to You a perpetual, - worldwide, non-exclusive, no-charge, royalty-free, irrevocable - (except as stated in this section) patent license to make, have made, - use, offer to sell, sell, import, and otherwise transfer the Work, - where such license applies only to those patent claims licensable - by such Contributor that are necessarily infringed by their - Contribution(s) alone or by combination of their Contribution(s) - with the Work to which such Contribution(s) was submitted. If You - institute patent litigation against any entity (including a - cross-claim or counterclaim in a lawsuit) alleging that the Work - or a Contribution incorporated within the Work constitutes direct - or contributory patent infringement, then any patent licenses - granted to You under this License for that Work shall terminate - as of the date such litigation is filed. - - 4. Redistribution. You may reproduce and distribute copies of the - Work or Derivative Works thereof in any medium, with or without - modifications, and in Source or Object form, provided that You - meet the following conditions: - - (a) You must give any other recipients of the Work or - Derivative Works a copy of this License; and - - (b) You must cause any modified files to carry prominent notices - stating that You changed the files; and - - (c) You must retain, in the Source form of any Derivative Works - that You distribute, all copyright, patent, trademark, and - attribution notices from the Source form of the Work, - excluding those notices that do not pertain to any part of - the Derivative Works; and - - (d) If the Work includes a "NOTICE" text file as part of its - distribution, then any Derivative Works that You distribute must - include a readable copy of the attribution notices contained - within such NOTICE file, excluding those notices that do not - pertain to any part of the Derivative Works, in at least one - of the following places: within a NOTICE text file distributed - as part of the Derivative Works; within the Source form or - documentation, if provided along with the Derivative Works; or, - within a display generated by the Derivative Works, if and - wherever such third-party notices normally appear. The contents - of the NOTICE file are for informational purposes only and - do not modify the License. You may add Your own attribution - notices within Derivative Works that You distribute, alongside - or as an addendum to the NOTICE text from the Work, provided - that such additional attribution notices cannot be construed - as modifying the License. - - You may add Your own copyright statement to Your modifications and - may provide additional or different license terms and conditions - for use, reproduction, or distribution of Your modifications, or - for any such Derivative Works as a whole, provided Your use, - reproduction, and distribution of the Work otherwise complies with - the conditions stated in this License. - - 5. Submission of Contributions. Unless You explicitly state otherwise, - any Contribution intentionally submitted for inclusion in the Work - by You to the Licensor shall be under the terms and conditions of - this License, without any additional terms or conditions. - Notwithstanding the above, nothing herein shall supersede or modify - the terms of any separate license agreement you may have executed - with Licensor regarding such Contributions. - - 6. Trademarks. This License does not grant permission to use the trade - names, trademarks, service marks, or product names of the Licensor, - except as required for reasonable and customary use in describing the - origin of the Work and reproducing the content of the NOTICE file. - - 7. Disclaimer of Warranty. Unless required by applicable law or - agreed to in writing, Licensor provides the Work (and each - Contributor provides its Contributions) on an "AS IS" BASIS, - WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or - implied, including, without limitation, any warranties or conditions - of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A - PARTICULAR PURPOSE. You are solely responsible for determining the - appropriateness of using or redistributing the Work and assume any - risks associated with Your exercise of permissions under this License. - - 8. Limitation of Liability. In no event and under no legal theory, - whether in tort (including negligence), contract, or otherwise, - unless required by applicable law (such as deliberate and grossly - negligent acts) or agreed to in writing, shall any Contributor be - liable to You for damages, including any direct, indirect, special, - incidental, or consequential damages of any character arising as a - result of this License or out of the use or inability to use the - Work (including but not limited to damages for loss of goodwill, - work stoppage, computer failure or malfunction, or any and all - other commercial damages or losses), even if such Contributor - has been advised of the possibility of such damages. - - 9. Accepting Warranty or Additional Liability. While redistributing - the Work or Derivative Works thereof, You may choose to offer, - and charge a fee for, acceptance of support, warranty, indemnity, - or other liability obligations and/or rights consistent with this - License. However, in accepting such obligations, You may act only - on Your own behalf and on Your sole responsibility, not on behalf - of any other Contributor, and only if You agree to indemnify, - defend, and hold each Contributor harmless for any liability - incurred by, or claims asserted against, such Contributor by reason - of your accepting any such warranty or additional liability. - - END OF TERMS AND CONDITIONS - - Copyright 2015 Microsoft Corporation - - Licensed under the Apache License, Version 2.0 (the "License"); - you may not use this file except in compliance with the License. - You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - - Unless required by applicable law or agreed to in writing, software - distributed under the License is distributed on an "AS IS" BASIS, - WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. - See the License for the specific language governing permissions and - limitations under the License. - - -------------------------------------------------------------------------------- Dependency : github.com/Azure/go-autorest/autorest/date Version: v0.3.0 @@ -22141,61 +22122,6 @@ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --------------------------------------------------------------------------------- -Dependency : github.com/shopspring/decimal -Version: v1.2.0 -Licence type (autodetected): MIT --------------------------------------------------------------------------------- - -Contents of probable licence file $GOMODCACHE/github.com/shopspring/decimal@v1.2.0/LICENSE: - -The MIT License (MIT) - -Copyright (c) 2015 Spring, Inc. - -Permission is hereby granted, free of charge, to any person obtaining a copy -of this software and associated documentation files (the "Software"), to deal -in the Software without restriction, including without limitation the rights -to use, copy, modify, merge, publish, distribute, sublicense, and/or sell -copies of the Software, and to permit persons to whom the Software is -furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in -all copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, -OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN -THE SOFTWARE. - -- Based on https://github.com/oguzbilgic/fpd, which has the following license: -""" -The MIT License (MIT) - -Copyright (c) 2013 Oguz Bilgic - -Permission is hereby granted, free of charge, to any person obtaining a copy of -this software and associated documentation files (the "Software"), to deal in -the Software without restriction, including without limitation the rights to -use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of -the Software, and to permit persons to whom the Software is furnished to do so, -subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all -copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS -FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR -COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER -IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN -CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -""" - - -------------------------------------------------------------------------------- Dependency : github.com/spf13/cobra Version: v1.3.0 @@ -24512,11 +24438,11 @@ THE SOFTWARE. -------------------------------------------------------------------------------- Dependency : golang.org/x/crypto -Version: v0.1.0 +Version: v0.6.0 Licence type (autodetected): BSD-3-Clause -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/golang.org/x/crypto@v0.1.0/LICENSE: +Contents of probable licence file $GOMODCACHE/golang.org/x/crypto@v0.6.0/LICENSE: Copyright (c) 2009 The Go Authors. All rights reserved. @@ -29040,75 +28966,13 @@ Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-pipeline-g OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE --------------------------------------------------------------------------------- -Dependency : github.com/Azure/azure-sdk-for-go/sdk/azcore -Version: v1.1.1 -Licence type (autodetected): MIT --------------------------------------------------------------------------------- - -Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/azcore@v1.1.1/LICENSE.txt: - -MIT License - -Copyright (c) Microsoft Corporation. - -Permission is hereby granted, free of charge, to any person obtaining a copy -of this software and associated documentation files (the "Software"), to deal -in the Software without restriction, including without limitation the rights -to use, copy, modify, merge, publish, distribute, sublicense, and/or sell -copies of the Software, and to permit persons to whom the Software is -furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all -copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, -OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE -SOFTWARE - - --------------------------------------------------------------------------------- -Dependency : github.com/Azure/azure-sdk-for-go/sdk/azidentity -Version: v1.0.0 -Licence type (autodetected): MIT --------------------------------------------------------------------------------- - -Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/azidentity@v1.0.0/LICENSE.txt: - -MIT License - -Copyright (c) Microsoft Corporation. - -Permission is hereby granted, free of charge, to any person obtaining a copy -of this software and associated documentation files (the "Software"), to deal -in the Software without restriction, including without limitation the rights -to use, copy, modify, merge, publish, distribute, sublicense, and/or sell -copies of the Software, and to permit persons to whom the Software is -furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all -copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, -OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE -SOFTWARE - - -------------------------------------------------------------------------------- Dependency : github.com/Azure/azure-sdk-for-go/sdk/internal -Version: v1.0.0 +Version: v1.2.0 Licence type (autodetected): MIT -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/internal@v1.0.0/LICENSE.txt: +Contents of probable licence file $GOMODCACHE/github.com/!azure/azure-sdk-for-go/sdk/internal@v1.2.0/LICENSE.txt: MIT License @@ -29397,6 +29261,207 @@ Contents of probable licence file $GOMODCACHE/github.com/!azure/go-autorest@v14. limitations under the License. +-------------------------------------------------------------------------------- +Dependency : github.com/Azure/go-autorest/autorest/azure/auth +Version: v0.4.2 +Licence type (autodetected): Apache-2.0 +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/!azure/go-autorest/autorest/azure/auth@v0.4.2/LICENSE: + + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + Copyright 2015 Microsoft Corporation + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. + + -------------------------------------------------------------------------------- Dependency : github.com/Azure/go-autorest/autorest/azure/cli Version: v0.3.1 @@ -30605,11 +30670,11 @@ Contents of probable licence file $GOMODCACHE/github.com/!azure/go-autorest/trac -------------------------------------------------------------------------------- Dependency : github.com/AzureAD/microsoft-authentication-library-for-go -Version: v0.5.1 +Version: v0.9.0 Licence type (autodetected): MIT -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/!azure!a!d/microsoft-authentication-library-for-go@v0.5.1/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/!azure!a!d/microsoft-authentication-library-for-go@v0.9.0/LICENSE: MIT License @@ -36543,12 +36608,12 @@ Contents of probable licence file $GOMODCACHE/github.com/godror/knownpb@v0.1.0/L -------------------------------------------------------------------------------- -Dependency : github.com/golang-jwt/jwt -Version: v3.2.1+incompatible +Dependency : github.com/golang-jwt/jwt/v4 +Version: v4.5.0 Licence type (autodetected): MIT -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/golang-jwt/jwt@v3.2.1+incompatible/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/golang-jwt/jwt/v4@v4.5.0/LICENSE: Copyright (c) 2012 Dave Grijalva Copyright (c) 2021 golang-jwt maintainers diff --git a/go.mod b/go.mod index 652289108a93..3a783635904b 100644 --- a/go.mod +++ b/go.mod @@ -14,7 +14,6 @@ require ( github.com/Azure/azure-storage-blob-go v0.8.0 github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect github.com/Azure/go-autorest/autorest v0.11.19 - github.com/Azure/go-autorest/autorest/azure/auth v0.4.2 github.com/Azure/go-autorest/autorest/date v0.3.0 github.com/Masterminds/semver v1.5.0 // indirect github.com/Microsoft/go-winio v0.6.1 @@ -138,7 +137,6 @@ require ( github.com/samuel/go-parser v0.0.0-20130731160455-ca8abbf65d0e // indirect github.com/samuel/go-thrift v0.0.0-20140522043831-2187045faa54 github.com/sanathkr/yaml v1.0.1-0.20170819201035-0056894fa522 // indirect - github.com/shopspring/decimal v1.2.0 github.com/spf13/cobra v1.3.0 github.com/spf13/pflag v1.0.5 github.com/stretchr/testify v1.8.2 @@ -153,7 +151,7 @@ require ( go.uber.org/atomic v1.10.0 go.uber.org/multierr v1.10.0 go.uber.org/zap v1.24.0 - golang.org/x/crypto v0.1.0 + golang.org/x/crypto v0.6.0 golang.org/x/lint v0.0.0-20210508222113-6edffad5e616 golang.org/x/mod v0.9.0 golang.org/x/net v0.9.0 @@ -185,6 +183,12 @@ require ( require ( cloud.google.com/go v0.105.0 cloud.google.com/go/redis v1.10.0 + github.com/Azure/azure-sdk-for-go/sdk/azcore v1.4.0 + github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.2.2 + github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption v1.0.0 + github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement v1.0.0 + github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.8.0 + github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0 github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1 github.com/Azure/go-autorest/autorest/adal v0.9.14 github.com/apache/arrow/go/v11 v11.0.0 @@ -225,16 +229,14 @@ require ( code.cloudfoundry.org/gofileutils v0.0.0-20170111115228-4d0c80011a0f // indirect github.com/Azure/azure-amqp-common-go/v3 v3.2.1 // indirect github.com/Azure/azure-pipeline-go v0.2.1 // indirect - github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.1 // indirect - github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 // indirect + github.com/Azure/azure-sdk-for-go/sdk/internal v1.2.0 // indirect github.com/Azure/go-amqp v0.16.0 // indirect github.com/Azure/go-autorest v14.2.0+incompatible // indirect - github.com/Azure/go-autorest/autorest/azure/cli v0.3.1 // indirect github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect github.com/Azure/go-autorest/autorest/validation v0.3.1 // indirect github.com/Azure/go-autorest/logger v0.2.1 // indirect github.com/Azure/go-autorest/tracing v0.6.0 // indirect - github.com/AzureAD/microsoft-authentication-library-for-go v0.5.1 // indirect + github.com/AzureAD/microsoft-authentication-library-for-go v0.9.0 // indirect github.com/JohnCGriffin/overflow v0.0.0-20211019200055-46fa312c352c // indirect github.com/andybalholm/brotli v1.0.5 // indirect github.com/antlr/antlr4/runtime/Go/antlr/v4 v4.0.0-20230305170008-8188dc5388df // indirect @@ -256,7 +258,6 @@ require ( github.com/cyphar/filepath-securejoin v0.2.3 // indirect github.com/davecgh/go-spew v1.1.1 // indirect github.com/dgraph-io/ristretto v0.1.0 // indirect - github.com/dimchansky/utfbom v1.1.0 // indirect github.com/dnephin/pflag v1.0.7 // indirect github.com/docker/go-metrics v0.0.1 // indirect github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21 // indirect @@ -274,6 +275,7 @@ require ( github.com/gobuffalo/here v0.6.7 // indirect github.com/goccy/go-json v0.9.11 // indirect github.com/godror/knownpb v0.1.0 // indirect + github.com/golang-jwt/jwt/v4 v4.5.0 // indirect github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe // indirect github.com/golang-sql/sqlexp v0.1.0 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect @@ -304,6 +306,7 @@ require ( github.com/klauspost/asmfmt v1.3.2 // indirect github.com/klauspost/compress v1.16.5 // indirect github.com/klauspost/cpuid/v2 v2.0.9 // indirect + github.com/kylelemons/godebug v1.1.0 // indirect github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect github.com/mailru/easyjson v0.7.6 // indirect github.com/markbates/pkger v0.17.1 // indirect @@ -371,7 +374,7 @@ require ( ) replace ( - github.com/Azure/azure-sdk-for-go => github.com/elastic/azure-sdk-for-go v59.0.0-elastic-1+incompatible + github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption => github.com/elastic/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption v1.0.1-0.20230529151645-4546c1b1f847 github.com/Microsoft/go-winio => github.com/bi-zone/go-winio v0.4.15 github.com/Shopify/sarama => github.com/elastic/sarama v1.19.1-0.20220310193331-ebc2b0d8eef3 github.com/apoydence/eachers => github.com/poy/eachers v0.0.0-20181020210610-23942921fe77 //indirect, see https://github.com/elastic/beats/pull/29780 for details. diff --git a/go.sum b/go.sum index 1f0c18ca9d89..392fee97012a 100644 --- a/go.sum +++ b/go.sum @@ -92,14 +92,26 @@ github.com/Azure/azure-pipeline-go v0.1.8/go.mod h1:XA1kFWRVhSK+KNFiOhfv83Fv8L9a github.com/Azure/azure-pipeline-go v0.1.9/go.mod h1:XA1kFWRVhSK+KNFiOhfv83Fv8L9achrP7OxIzeTn1Yg= github.com/Azure/azure-pipeline-go v0.2.1 h1:OLBdZJ3yvOn2MezlWvbrBMTEUQC72zAftRZOMdj5HYo= github.com/Azure/azure-pipeline-go v0.2.1/go.mod h1:UGSo8XybXnIGZ3epmeBw7Jdz+HiUVpqIlpz/HKHylF4= +github.com/Azure/azure-sdk-for-go v41.3.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc= +github.com/Azure/azure-sdk-for-go v51.1.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc= +github.com/Azure/azure-sdk-for-go v55.2.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc= +github.com/Azure/azure-sdk-for-go v59.0.0+incompatible h1:I1ULJqny1qQhUBFy11yDXHhW3pLvbhwV0PTn7mjp9V0= +github.com/Azure/azure-sdk-for-go v59.0.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc= github.com/Azure/azure-sdk-for-go/sdk/azcore v0.19.0/go.mod h1:h6H6c8enJmmocHUbLiiGY6sx7f9i+X3m1CHdd5c6Rdw= -github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.1 h1:tz19qLF65vuu2ibfTqGVJxG/zZAI27NEIIbvAOQwYbw= -github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.1/go.mod h1:uGG2W01BaETf0Ozp+QxxKJdMBNRWPdstHG0Fmdwn1/U= +github.com/Azure/azure-sdk-for-go/sdk/azcore v1.4.0 h1:rTnT/Jrcm+figWlYz4Ixzt0SJVR2cMC8lvZcimipiEY= +github.com/Azure/azure-sdk-for-go/sdk/azcore v1.4.0/go.mod h1:ON4tFdPTwRcgWEaVDrN3584Ef+b7GgSJaXxe5fW9t4M= github.com/Azure/azure-sdk-for-go/sdk/azidentity v0.11.0/go.mod h1:HcM1YX14R7CJcghJGOYCgdezslRSVzqwLf/q+4Y2r/0= -github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.0.0 h1:Yoicul8bnVdQrhDMTHxdEckRGX01XvwXDHUT9zYZ3k0= +github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.2.2 h1:uqM+VoHjVH6zdlkLF2b6O0ZANcHoj3rO0PoQ3jglUJA= +github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.2.2/go.mod h1:twTKAa1E6hLmSDjLhaCkbTMQKc7p/rNLU40rLxGEOCI= github.com/Azure/azure-sdk-for-go/sdk/internal v0.7.0/go.mod h1:yqy467j36fJxcRV2TzfVZ1pCb5vxm4BtZPUdYWe/Xo8= -github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0 h1:jp0dGvZ7ZK0mgqnTSClMxa5xuRL7NZgHameVYF6BurY= -github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0/go.mod h1:eWRD7oawr1Mu1sLCawqVc0CUiF43ia3qQMxLscsKQ9w= +github.com/Azure/azure-sdk-for-go/sdk/internal v1.2.0 h1:leh5DwKv6Ihwi+h60uHtn6UWAxBbZ0q8DwQVMzf61zw= +github.com/Azure/azure-sdk-for-go/sdk/internal v1.2.0/go.mod h1:eWRD7oawr1Mu1sLCawqVc0CUiF43ia3qQMxLscsKQ9w= +github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement v1.0.0 h1:8L7OWiGwm6qe2U3zDv3K3WDXwOOgurDu7qw6Mv86Nlw= +github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement v1.0.0/go.mod h1:A8BFugBY4i+NVB3A87dK5jR0q765uv4KY8fE8o+sCcM= +github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.8.0 h1:dKxKBzh+XIEoYNmx/c8HeiwghuRExXf61WmVotWESeA= +github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.8.0/go.mod h1:kzRLpzzlw6eBUXE7eBw3oqfmKR/kxaHOk4+h9sAe6Yo= +github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0 h1:ECsQtyERDVz3NP3kvDOTLvbQhqWp/x9EsGKtb4ogUr8= +github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0/go.mod h1:s1tW/At+xHqjNFvWU4G0c0Qv33KOhvbGNj0RCTQDV8s= github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1 h1:QSdcrd/UFJv6Bp/CfoVf2SrENpFn9P6Yh8yb+xNhYMM= github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1/go.mod h1:eZ4g6GUvXiGulfIbbhh1Xr4XwUYaYaWMqzGD/284wCA= github.com/Azure/azure-storage-blob-go v0.6.0/go.mod h1:oGfmITT1V6x//CswqY2gtAHND+xIP64/qL7a5QJix0Y= @@ -155,8 +167,8 @@ github.com/Azure/go-autorest/logger v0.2.1/go.mod h1:T9E3cAhj2VqvPOtCYAvby9aBXkZ github.com/Azure/go-autorest/tracing v0.5.0/go.mod h1:r/s2XiOKccPW3HrqB+W0TQzfbtp2fGCgRFtBroKn4Dk= github.com/Azure/go-autorest/tracing v0.6.0 h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo= github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBpUA79WCAKPPZVC2DeU= -github.com/AzureAD/microsoft-authentication-library-for-go v0.5.1 h1:BWe8a+f/t+7KY7zH2mqygeUD0t8hNFXe08p1Pb3/jKE= -github.com/AzureAD/microsoft-authentication-library-for-go v0.5.1/go.mod h1:Vt9sXTKwMyGcOxSmLDMnGPgqsUg7m8pe215qMLrDXw4= +github.com/AzureAD/microsoft-authentication-library-for-go v0.9.0 h1:UE9n9rkJF62ArLb1F3DEjRt8O3jLwMWdSoypKV4f3MU= +github.com/AzureAD/microsoft-authentication-library-for-go v0.9.0/go.mod h1:kgDmCTgBzIEPFElEF+FK0SdjAor06dRq2Go927dnQ6o= github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ= github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo= @@ -496,8 +508,8 @@ github.com/eclipse/paho.mqtt.golang v1.2.0/go.mod h1:H9keYFcgq3Qr5OUJm/JZI/i6U7j github.com/eclipse/paho.mqtt.golang v1.3.5 h1:sWtmgNxYM9P2sP+xEItMozsR3w0cqZFlqnNN1bdl41Y= github.com/eclipse/paho.mqtt.golang v1.3.5/go.mod h1:eTzb4gxwwyWpqBUHGQZ4ABAV7+Jgm1PklsYT/eo8Hcc= github.com/edsrzf/mmap-go v1.0.0/go.mod h1:YO35OhQPt3KJa3ryjFM5Bs14WD66h8eGKpfaBNrHW5M= -github.com/elastic/azure-sdk-for-go v59.0.0-elastic-1+incompatible h1:jlUO91EFZuvAO+2Zg+WdV0iTWe/x1X8maTxdYIKCWu4= -github.com/elastic/azure-sdk-for-go v59.0.0-elastic-1+incompatible/go.mod h1:4zuQekLQi489ShcqTmS1Zj1ta0qrcNBlSuGa+ziu2vM= +github.com/elastic/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption v1.0.1-0.20230529151645-4546c1b1f847 h1:mq1EgP1RJ86MiuFQa2M5/0d5raYAWeZ08ryDdq7zulg= +github.com/elastic/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption v1.0.1-0.20230529151645-4546c1b1f847/go.mod h1:0vCBR1wgGwZeGmloJ+eCWIZF2S47grTXRzj2mftg2Nk= github.com/elastic/bayeux v1.0.5 h1:UceFq01ipmT3S8DzFK+uVAkbCdiPR0Bqei8qIGmUeY0= github.com/elastic/bayeux v1.0.5/go.mod h1:CSI4iP7qeo5MMlkznGvYKftp8M7qqP/3nzmVZoXHY68= github.com/elastic/dhcp v0.0.0-20200227161230-57ec251c7eb3 h1:lnDkqiRFKm0rxdljqrj3lotWinO9+jFmeDXIC4gvIQs= @@ -793,8 +805,8 @@ github.com/gogo/protobuf v1.2.2-0.20190730201129-28a6bbf47e48/go.mod h1:SlYgWuQ5 github.com/gogo/protobuf v1.3.1/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q= -github.com/golang-jwt/jwt v3.2.1+incompatible h1:73Z+4BJcrTC+KczS6WvTPvRGOp1WmfEP4Q1lOd9Z/+c= -github.com/golang-jwt/jwt v3.2.1+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I= +github.com/golang-jwt/jwt/v4 v4.5.0 h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg= +github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0= github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe h1:lXe2qZdvpiX5WZkZR4hgp4KJVfY3nMkvmwbVkpv1rVY= github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe/go.mod h1:8vg3r2VgvsThLBIFL93Qb5yWzgyZWhEmBwUJWevAkK0= github.com/golang-sql/sqlexp v0.1.0 h1:ZCD6MBpcuOVfGVqsEmY5/4FtYiKz6tSyUv9LPEDei6A= @@ -1264,7 +1276,6 @@ github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9G github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk= github.com/modocache/gover v0.0.0-20171022184752-b58185e213c5/go.mod h1:caMODM3PzxT8aQXRPkAt8xlV/e7d7w8GM5g0fa5F0D8= github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc= -github.com/montanaflynn/stats v0.6.6/go.mod h1:etXPPgVO6n31NxCd9KQUMvCM+ve0ruNzt6R8Bnaayow= github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A= github.com/morikuni/aec v1.0.0/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc= github.com/mschoch/smat v0.0.0-20160514031455-90eadee771ae/go.mod h1:qAyveg+e4CE+eKJXWVjKXM4ck2QobLqTDytGJbLLhJg= @@ -1360,7 +1371,6 @@ github.com/pierrec/lz4/v4 v4.1.15/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFu github.com/pierrre/gotestcover v0.0.0-20160517101806-924dca7d15f0 h1:i5VIxp6QB8oWZ8IkK8zrDgeT6ORGIUeiN+61iETwJbI= github.com/pierrre/gotestcover v0.0.0-20160517101806-924dca7d15f0/go.mod h1:4xpMLz7RBWyB+ElzHu8Llua96TRCB3YwX+l5EP1wmHk= github.com/pkg/browser v0.0.0-20180916011732-0a3d74bf9ce4/go.mod h1:4OwLy04Bl9Ef3GJJCoec+30X3LQs/0/m4HFRt/2LUSA= -github.com/pkg/browser v0.0.0-20210115035449-ce105d075bb4/go.mod h1:N6UoU20jOqggOuDwUaBQpluzLNDqif3kq9z2wpdYEfQ= github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU= github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI= github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e h1:aoZm08cpOy4WuID//EZDgcC4zIxODThtZNPirFr42+A= @@ -1479,8 +1489,6 @@ github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKl github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/shirou/gopsutil/v3 v3.21.12 h1:VoGxEW2hpmz0Vt3wUvHIl9fquzYLNpVpgNNB7pGJimA= github.com/shirou/gopsutil/v3 v3.21.12/go.mod h1:BToYZVTlSVlfazpDDYFnsVZLaoRG+g8ufT6fPQLdJzA= -github.com/shopspring/decimal v1.2.0 h1:abSATXmQEYyShuxI4/vyW3tV1MrKAJzCZ/0zLUXYbsQ= -github.com/shopspring/decimal v1.2.0/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o= github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749/go.mod h1:ZY1cvUeJuFPAdZ/B6v7RHavJWZn2YPVFQ1OSXhCGOkg= github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc= github.com/shurcooL/vfsgen v0.0.0-20181202132449-6a9ea43bcacd/go.mod h1:TrYk7fJVaAttu97ZZKrO9UbRa8izdowaMIZcxYMbVaw= @@ -1734,8 +1742,8 @@ golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWP golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= -golang.org/x/crypto v0.1.0 h1:MDRAIl0xIo9Io2xV565hzXHw3zVseKrJKodhohM5CjU= -golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw= +golang.org/x/crypto v0.6.0 h1:qfktjS5LUO+fFKeJXZ+ikTRijMmljikvG68fpMMruSc= +golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58= golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= diff --git a/metricbeat/docs/modules/azure.asciidoc b/metricbeat/docs/modules/azure.asciidoc index d11ea704a1bf..f81da008502c 100644 --- a/metricbeat/docs/modules/azure.asciidoc +++ b/metricbeat/docs/modules/azure.asciidoc @@ -99,6 +99,15 @@ https://login.microsoftonline.us for azure GermanCloud https://login.chinacloudapi.cn for azure PublicCloud https://login.microsoftonline.de for azure USGovernmentCloud +`resource_manager_audience` :: +_string_ +Optional, by default we are using the azure public environment, to override, users can provide a specific resource manager audience in order to use a different azure environment. +Ex: +https://management.chinacloudapi.cn/ for azure ChinaCloud +https://management.microsoftazure.de/ for azure GermanCloud +https://management.azure.com/ for azure PublicCloud +https://management.usgovcloudapi.net/ for azure USGovernmentCloud +Users can also use this in case of a Hybrid Cloud model, where one may define their own audiences. [float] == Metricsets diff --git a/x-pack/metricbeat/module/azure/_meta/docs.asciidoc b/x-pack/metricbeat/module/azure/_meta/docs.asciidoc index 2ba2cf7a96d5..827b13c0c950 100644 --- a/x-pack/metricbeat/module/azure/_meta/docs.asciidoc +++ b/x-pack/metricbeat/module/azure/_meta/docs.asciidoc @@ -87,6 +87,15 @@ https://login.microsoftonline.us for azure GermanCloud https://login.chinacloudapi.cn for azure PublicCloud https://login.microsoftonline.de for azure USGovernmentCloud +`resource_manager_audience` :: +_string_ +Optional, by default we are using the azure public environment, to override, users can provide a specific resource manager audience in order to use a different azure environment. +Ex: +https://management.chinacloudapi.cn/ for azure ChinaCloud +https://management.microsoftazure.de/ for azure GermanCloud +https://management.azure.com/ for azure PublicCloud +https://management.usgovcloudapi.net/ for azure USGovernmentCloud +Users can also use this in case of a Hybrid Cloud model, where one may define their own audiences. [float] == Metricsets diff --git a/x-pack/metricbeat/module/azure/billing/client.go b/x-pack/metricbeat/module/azure/billing/client.go index 798b29d7eded..b15463e39d2c 100644 --- a/x-pack/metricbeat/module/azure/billing/client.go +++ b/x-pack/metricbeat/module/azure/billing/client.go @@ -5,12 +5,12 @@ package billing import ( - "context" "fmt" "time" - "github.com/Azure/azure-sdk-for-go/services/consumption/mgmt/2019-10-01/consumption" - "github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption" + + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement" "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" "github.com/elastic/elastic-agent-libs/logp" @@ -25,8 +25,8 @@ type Client struct { // Usage contains the usage details and forecast values. type Usage struct { - UsageDetails []consumption.BasicUsageDetail - Forecasts costmanagement.QueryResult + UsageDetails []armconsumption.UsageDetailClassification + Forecasts armcostmanagement.QueryResult } // NewClient builds a new client for the azure billing service @@ -74,13 +74,11 @@ func (client *Client) GetMetrics(timeOpts TimeIntervalOptions) (Usage, error) { timeOpts.usageEnd.Format(time.RFC3339Nano), ) - paginator, err := client.BillingService.GetUsageDetails( + result, err := client.BillingService.GetUsageDetails( scope, "properties/meterDetails", filter, - "", // skipToken, used for paging, not required on the first call. - nil, // result page size, defaults to ? - consumption.MetrictypeActualCostMetricType, + armconsumption.MetrictypeActualCostMetricType, timeOpts.usageStart.Format("2006-01-02"), // startDate timeOpts.usageEnd.Format("2006-01-02"), // endDate ) @@ -88,12 +86,7 @@ func (client *Client) GetMetrics(timeOpts TimeIntervalOptions) (Usage, error) { return usage, fmt.Errorf("retrieving usage details failed in client: %w", err) } - for paginator.NotDone() { - usage.UsageDetails = append(usage.UsageDetails, paginator.Values()...) - if err := paginator.NextWithContext(context.Background()); err != nil { - return usage, fmt.Errorf("retrieving usage details failed in client: %w", err) - } - } + usage.UsageDetails = append(usage.UsageDetails, result.Value...) // // Fetch the Forecast diff --git a/x-pack/metricbeat/module/azure/billing/client_test.go b/x-pack/metricbeat/module/azure/billing/client_test.go index d5a0c3343548..dd750dfa08ab 100644 --- a/x-pack/metricbeat/module/azure/billing/client_test.go +++ b/x-pack/metricbeat/module/azure/billing/client_test.go @@ -12,8 +12,8 @@ import ( "github.com/stretchr/testify/assert" "github.com/stretchr/testify/mock" - "github.com/Azure/azure-sdk-for-go/services/consumption/mgmt/2019-10-01/consumption" - "github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement" "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" ) @@ -36,8 +36,8 @@ func TestClient(t *testing.T) { client := NewMockClient() client.Config = config m := &MockService{} - m.On("GetForecast", mock.Anything, mock.Anything, mock.Anything).Return(costmanagement.QueryResult{}, errors.New("invalid query")) - m.On("GetUsageDetails", mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return(consumption.UsageDetailsListResultPage{}, nil) + m.On("GetForecast", mock.Anything, mock.Anything, mock.Anything).Return(armcostmanagement.QueryResult{}, errors.New("invalid query")) + m.On("GetUsageDetails", mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return(armconsumption.UsageDetailsListResult{}, nil) client.BillingService = m _, err := client.GetMetrics(opts) assert.Error(t, err) @@ -50,9 +50,9 @@ func TestClient(t *testing.T) { client := NewMockClient() client.Config = config m := &MockService{} - forecasts := costmanagement.QueryResult{} + forecasts := armcostmanagement.QueryResult{} m.On("GetForecast", mock.Anything, mock.Anything, mock.Anything).Return(forecasts, nil) - m.On("GetUsageDetails", mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return(consumption.UsageDetailsListResultPage{}, nil) + m.On("GetUsageDetails", mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return(armconsumption.UsageDetailsListResult{}, nil) client.BillingService = m _, err := client.GetMetrics(opts) assert.NoError(t, err) diff --git a/x-pack/metricbeat/module/azure/billing/data.go b/x-pack/metricbeat/module/azure/billing/data.go index df15261b7da2..73d2da05dd2b 100644 --- a/x-pack/metricbeat/module/azure/billing/data.go +++ b/x-pack/metricbeat/module/azure/billing/data.go @@ -10,7 +10,8 @@ import ( "strings" "time" - "github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement" "errors" @@ -21,7 +22,12 @@ import ( // EventsMapping maps the usage details and forecast data to a list of metricbeat events to // send to Elasticsearch. -func EventsMapping(subscriptionId string, results Usage, timeOpts TimeIntervalOptions, logger *logp.Logger) ([]mb.Event, error) { +func EventsMapping( + subscriptionId string, + results Usage, + timeOpts TimeIntervalOptions, + logger *logp.Logger, +) ([]mb.Event, error) { events := make([]mb.Event, 0, len(results.UsageDetails)) // @@ -37,81 +43,78 @@ func EventsMapping(subscriptionId string, results Usage, timeOpts TimeIntervalOp "cloud.provider": "azure", } - if legacy, isLegacy := ud.AsLegacyUsageDetail(); isLegacy { - + switch usageDetails := ud.(type) { + case *armconsumption.LegacyUsageDetail: // // legacy data format // + legacy := usageDetails + event.ModuleFields = mapstr.M{ - "subscription_id": legacy.SubscriptionID, - "subscription_name": legacy.SubscriptionName, + "subscription_id": legacy.Properties.SubscriptionID, + "subscription_name": legacy.Properties.SubscriptionName, "resource": mapstr.M{ - "name": legacy.ResourceName, - "type": legacy.ConsumedService, - "group": legacy.ResourceGroup, + "name": legacy.Properties.ResourceName, + "type": legacy.Properties.ConsumedService, + "group": legacy.Properties.ResourceGroup, }, } event.MetricSetFields = mapstr.M{ // original fields "billing_period_id": legacy.ID, - "product": legacy.Product, - "pretax_cost": legacy.Cost, - "currency": legacy.BillingCurrency, - "department_name": legacy.InvoiceSection, - "account_name": legacy.BillingAccountName, + "product": legacy.Properties.Product, + "pretax_cost": legacy.Properties.Cost, + "currency": legacy.Properties.BillingCurrency, + "department_name": legacy.Properties.InvoiceSection, + "account_name": legacy.Properties.BillingAccountName, "usage_start": timeOpts.usageStart, "usage_end": timeOpts.usageEnd, // additional fields - "usage_date": legacy.Date, // Date for the usage record. - "account_id": legacy.BillingAccountID, - "unit_price": legacy.UnitPrice, - "quantity": legacy.Quantity, + "usage_date": legacy.Properties.Date, // Date for the usage record. + "account_id": legacy.Properties.BillingAccountID, + "unit_price": legacy.Properties.UnitPrice, + "quantity": legacy.Properties.Quantity, } - _, _ = event.RootFields.Put("cloud.region", legacy.ResourceLocation) - _, _ = event.RootFields.Put("cloud.instance.name", legacy.ResourceName) - _, _ = event.RootFields.Put("cloud.instance.id", legacy.ResourceID) - - } else if modern, isModern := ud.AsModernUsageDetail(); isModern { - + _, _ = event.RootFields.Put("cloud.region", legacy.Properties.ResourceLocation) + _, _ = event.RootFields.Put("cloud.instance.name", legacy.Properties.ResourceName) + _, _ = event.RootFields.Put("cloud.instance.id", legacy.Properties.ResourceID) + case *armconsumption.ModernUsageDetail: // // modern data format // + modern := usageDetails + event.ModuleFields = mapstr.M{ - "subscription_id": modern.SubscriptionGUID, - "subscription_name": modern.SubscriptionName, + "subscription_id": modern.Properties.SubscriptionGUID, + "subscription_name": modern.Properties.SubscriptionName, "resource": mapstr.M{ - "name": getResourceNameFromPath(*modern.InstanceName), - "type": modern.ConsumedService, - "group": strings.ToLower(*modern.ResourceGroup), + "name": getResourceNameFromPath(*modern.Properties.InstanceName), + "type": modern.Properties.ConsumedService, + "group": strings.ToLower(*modern.Properties.ResourceGroup), }, } event.MetricSetFields = mapstr.M{ // original fields "billing_period_id": modern.ID, - "product": modern.Product, - "pretax_cost": modern.CostInBillingCurrency, - "currency": modern.BillingCurrencyCode, - "department_name": modern.InvoiceSectionName, - "account_name": modern.BillingAccountName, + "product": modern.Properties.Product, + "pretax_cost": modern.Properties.CostInBillingCurrency, + "currency": modern.Properties.BillingCurrencyCode, + "department_name": modern.Properties.InvoiceSectionName, + "account_name": modern.Properties.BillingAccountName, "usage_start": timeOpts.usageStart, "usage_end": timeOpts.usageEnd, // additional fields - "usage_date": modern.Date, // Date for the usage record. - "account_id": modern.BillingAccountID, - "unit_price": modern.UnitPrice, - "quantity": modern.Quantity, + "usage_date": modern.Properties.Date, // Date for the usage record. + "account_id": modern.Properties.BillingAccountID, + "unit_price": modern.Properties.UnitPrice, + "quantity": modern.Properties.Quantity, } - _, _ = event.RootFields.Put("cloud.region", modern.ResourceLocation) - - } else { - - // - // Unsupported data format - // + _, _ = event.RootFields.Put("cloud.region", modern.Properties.ResourceLocation) + default: return events, errors.New("unsupported usage details format: not legacy nor modern") } @@ -159,27 +162,27 @@ func getResourceNameFromPath(path string) string { // .Rows: // 0: []interface {}{0.11, 2.0200807e+07, "Actual", "USD"} // 1: []interface {}{0.11, 2.0200808e+07, "Forecast", "USD"} -func getEventsFromQueryResult(result costmanagement.QueryResult, subscriptionID string, logger *logp.Logger) ([]mb.Event, error) { +func getEventsFromQueryResult(result armcostmanagement.QueryResult, subscriptionID string, logger *logp.Logger) ([]mb.Event, error) { // The number of columns expected in the QueryResult supported by this input. // The structure of the QueryResult is determined by the value we set in // the `costmanagement.ForecastDefinition` struct at query time. const expectedNumberOfColumns = 4 - if result.QueryProperties == nil || result.Columns == nil { + if result.Properties == nil || result.Properties.Columns == nil { return []mb.Event{}, errors.New("unsupported forecasts QueryResult format: no columns") } - if len(*result.Columns) != expectedNumberOfColumns { - return []mb.Event{}, fmt.Errorf("unsupported forecasts QueryResult format: got %d columns instead of %d", len(*result.Columns), expectedNumberOfColumns) + if len(result.Properties.Columns) != expectedNumberOfColumns { + return []mb.Event{}, fmt.Errorf("unsupported forecasts QueryResult format: got %d columns instead of %d", len(result.Properties.Columns), expectedNumberOfColumns) } - if result.Rows == nil { + if result.Properties.Rows == nil { logger.Warn("no rows in forecasts QueryResult") return []mb.Event{}, nil } - events := make([]mb.Event, 0, len(*result.Rows)) - for _, row := range *result.Rows { + events := make([]mb.Event, 0, len(result.Properties.Rows)) + for _, row := range result.Properties.Rows { var cost float64 var currency string var costStatus string @@ -250,6 +253,9 @@ func getEventsFromQueryResult(result costmanagement.QueryResult, subscriptionID continue } + // test: trying to make the linter happy + _ = costFieldName + event := mb.Event{ RootFields: mapstr.M{ "cloud.provider": "azure", diff --git a/x-pack/metricbeat/module/azure/billing/data_test.go b/x-pack/metricbeat/module/azure/billing/data_test.go index 9632d5df68ce..49a16fcd617d 100644 --- a/x-pack/metricbeat/module/azure/billing/data_test.go +++ b/x-pack/metricbeat/module/azure/billing/data_test.go @@ -8,10 +8,8 @@ import ( "testing" "time" - "github.com/Azure/azure-sdk-for-go/services/consumption/mgmt/2019-10-01/consumption" - "github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" - "github.com/Azure/go-autorest/autorest/date" - "github.com/shopspring/decimal" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement" "github.com/stretchr/testify/assert" "github.com/elastic/beats/v7/metricbeat/mb" @@ -23,16 +21,20 @@ func TestEventMapping(t *testing.T) { logger := logp.NewLogger("TestEventMapping") ID := "ID" - kind := "legacy" + kind := armconsumption.UsageDetailsKindLegacy name := "test" billingAccountId := "123" - startDate := date.Time{} + startDate := time.Time{} // // Usage Details // - var charge = decimal.NewFromFloat(8.123456) - var props = consumption.LegacyUsageDetailProperties{ + + charge := 8.123456 + unitPrice := 1.25 + quantity := 12.5 + + var props = armconsumption.LegacyUsageDetailProperties{ BillingAccountID: &billingAccountId, BillingAccountName: &name, BillingPeriodStartDate: &startDate, @@ -40,11 +42,13 @@ func TestEventMapping(t *testing.T) { Cost: &charge, InvoiceSection: &name, Product: &name, + UnitPrice: &unitPrice, + Quantity: &quantity, } - var legacy = consumption.LegacyUsageDetail{ - ID: &ID, - Kind: consumption.Kind(kind), - LegacyUsageDetailProperties: &props, + var legacy = &armconsumption.LegacyUsageDetail{ + ID: &ID, + Kind: &kind, + Properties: &props, } // @@ -61,20 +65,20 @@ func TestEventMapping(t *testing.T) { {forecastCost, forecastUsageDate, "Forecast", "USD"}, } - var forecastQueryResult = costmanagement.QueryResult{ - QueryProperties: &costmanagement.QueryProperties{ - Columns: &[]costmanagement.QueryColumn{ + var forecastQueryResult = armcostmanagement.QueryResult{ + Properties: &armcostmanagement.QueryProperties{ + Columns: []*armcostmanagement.QueryColumn{ column("Cost", "Number"), column("UsageDate", "Number"), column("CostStatus", "String"), column("Currency", "String"), }, - Rows: &rows, + Rows: rows, }, } var usage = Usage{ - UsageDetails: []consumption.BasicUsageDetail{legacy}, + UsageDetails: []armconsumption.UsageDetailClassification{legacy}, Forecasts: forecastQueryResult, } @@ -139,7 +143,7 @@ func TestGetEventsFromQueryResult(t *testing.T) { logger := logp.NewLogger("TestGetEventsFromQueryResult") subscriptionID := "sub" - columns := []costmanagement.QueryColumn{ + columns := []*armcostmanagement.QueryColumn{ column("Cost", "Number"), column("UsageDate", "Number"), column("CostStatus", "String"), @@ -147,7 +151,7 @@ func TestGetEventsFromQueryResult(t *testing.T) { } t.Run("no columns", func(t *testing.T) { - queryResult := costmanagement.QueryResult{} + queryResult := armcostmanagement.QueryResult{} events, err := getEventsFromQueryResult(queryResult, subscriptionID, logger) assert.Equal(t, []mb.Event{}, events) @@ -155,16 +159,16 @@ func TestGetEventsFromQueryResult(t *testing.T) { }) t.Run("wrong number of column", func(t *testing.T) { - badColumns := []costmanagement.QueryColumn{ + badColumns := []*armcostmanagement.QueryColumn{ column("Cost", "Number"), column("UsageDate", "Number"), column("CostStatus", "String"), column("Currency", "String"), column("UnexpectedColumn", "String"), } - queryResult := costmanagement.QueryResult{ - QueryProperties: &costmanagement.QueryProperties{ - Columns: &badColumns, + queryResult := armcostmanagement.QueryResult{ + Properties: &armcostmanagement.QueryProperties{ + Columns: badColumns, Rows: nil, }, } @@ -175,9 +179,9 @@ func TestGetEventsFromQueryResult(t *testing.T) { }) t.Run("no rows", func(t *testing.T) { - queryResult := costmanagement.QueryResult{ - QueryProperties: &costmanagement.QueryProperties{ - Columns: &columns, + queryResult := armcostmanagement.QueryResult{ + Properties: &armcostmanagement.QueryProperties{ + Columns: columns, Rows: nil, }, } @@ -191,10 +195,10 @@ func TestGetEventsFromQueryResult(t *testing.T) { rows := [][]interface{}{ {float64(1), float64(2), "Actual", "USD", "UnexpectedValue"}, } - queryResult := costmanagement.QueryResult{ - QueryProperties: &costmanagement.QueryProperties{ - Columns: &columns, - Rows: &rows, + queryResult := armcostmanagement.QueryResult{ + Properties: &armcostmanagement.QueryProperties{ + Columns: columns, + Rows: rows, }, } @@ -211,10 +215,10 @@ func TestGetEventsFromQueryResult(t *testing.T) { {float64(1), float64(20220818), 42, "USD"}, // wrong cost status type {float64(1), float64(20220818), "Actual", 42}, // wrong currency type } - queryResult := costmanagement.QueryResult{ - QueryProperties: &costmanagement.QueryProperties{ - Columns: &columns, - Rows: &rows, + queryResult := armcostmanagement.QueryResult{ + Properties: &armcostmanagement.QueryProperties{ + Columns: columns, + Rows: rows, }, } @@ -224,6 +228,6 @@ func TestGetEventsFromQueryResult(t *testing.T) { }) } -func column(name, type_ string) costmanagement.QueryColumn { - return costmanagement.QueryColumn{Name: &name, Type: &type_} +func column(name, type_ string) *armcostmanagement.QueryColumn { + return &armcostmanagement.QueryColumn{Name: &name, Type: &type_} } diff --git a/x-pack/metricbeat/module/azure/billing/mock_service.go b/x-pack/metricbeat/module/azure/billing/mock_service.go index 180b277dfbf1..6e9cb6688608 100644 --- a/x-pack/metricbeat/module/azure/billing/mock_service.go +++ b/x-pack/metricbeat/module/azure/billing/mock_service.go @@ -9,8 +9,8 @@ import ( "github.com/stretchr/testify/mock" - "github.com/Azure/azure-sdk-for-go/services/consumption/mgmt/2019-10-01/consumption" - "github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement" "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" "github.com/elastic/elastic-agent-libs/logp" @@ -31,13 +31,24 @@ func NewMockClient() *Client { } // GetForecast is a mock function for the billing service -func (service *MockService) GetForecast(scope string, startTime, endTime time.Time) (costmanagement.QueryResult, error) { +func (service *MockService) GetForecast( + scope string, + startTime, + endTime time.Time, +) (armcostmanagement.QueryResult, error) { args := service.Called(scope, startTime, endTime) - return args.Get(0).(costmanagement.QueryResult), args.Error(1) + return args.Get(0).(armcostmanagement.QueryResult), args.Error(1) } // GetUsageDetails is a mock function for the billing service -func (service *MockService) GetUsageDetails(scope string, expand string, filter string, skiptoken string, top *int32, metricType consumption.Metrictype, startDate string, endDate string) (consumption.UsageDetailsListResultPage, error) { - args := service.Called(scope, expand, filter, skiptoken, top, metricType, startDate, endDate) - return args.Get(0).(consumption.UsageDetailsListResultPage), args.Error(1) +func (service *MockService) GetUsageDetails( + scope string, + expand string, + filter string, + metricType armconsumption.Metrictype, + startDate string, + endDate string, +) (armconsumption.UsageDetailsListResult, error) { + args := service.Called(scope, expand, filter, metricType, startDate, endDate) + return args.Get(0).(armconsumption.UsageDetailsListResult), args.Error(1) } diff --git a/x-pack/metricbeat/module/azure/billing/service.go b/x-pack/metricbeat/module/azure/billing/service.go index 4766993c0724..2f09321efbac 100644 --- a/x-pack/metricbeat/module/azure/billing/service.go +++ b/x-pack/metricbeat/module/azure/billing/service.go @@ -6,61 +6,92 @@ package billing import ( "context" + "fmt" "time" - "github.com/Azure/go-autorest/autorest/date" - - "github.com/Azure/azure-sdk-for-go/services/consumption/mgmt/2019-10-01/consumption" - //"github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" - "github.com/Azure/go-autorest/autorest/azure/auth" - "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" "github.com/elastic/elastic-agent-libs/logp" - "github.com/Azure/azure-sdk-for-go/services/costmanagement/mgmt/2019-11-01/costmanagement" + "github.com/Azure/azure-sdk-for-go/sdk/azcore/arm" + "github.com/Azure/azure-sdk-for-go/sdk/azcore/cloud" + "github.com/Azure/azure-sdk-for-go/sdk/azcore/policy" + "github.com/Azure/azure-sdk-for-go/sdk/azidentity" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/consumption/armconsumption" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/costmanagement/armcostmanagement" ) // Service offers access to Azure Usage Details and Forecast data. type Service interface { - GetForecast(scope string, startTime, endTime time.Time) (costmanagement.QueryResult, error) + GetForecast( + scope string, + startTime, + endTime time.Time, + ) (armcostmanagement.QueryResult, error) GetUsageDetails( scope string, expand string, filter string, - skipToken string, - top *int32, - metricType consumption.Metrictype, + metricType armconsumption.Metrictype, startDate string, - endDate string) (consumption.UsageDetailsListResultPage, error) + endDate string, + ) (armconsumption.UsageDetailsListResult, error) } // UsageService is a thin wrapper to the Usage Details API and the Forecast API from the Azure SDK for Go. type UsageService struct { - usageDetailsClient *consumption.UsageDetailsClient - forecastClient *costmanagement.ForecastClient + usageDetailsClient *armconsumption.UsageDetailsClient + forecastClient *armcostmanagement.ForecastClient context context.Context log *logp.Logger } // NewService builds a new UsageService using the given config. func NewService(config azure.Config) (*UsageService, error) { - clientConfig := auth.NewClientCredentialsConfig(config.ClientId, config.ClientSecret, config.TenantId) - clientConfig.AADEndpoint = config.ActiveDirectoryEndpoint - clientConfig.Resource = config.ResourceManagerEndpoint - authorizer, err := clientConfig.Authorizer() + cloudServicesConfig := cloud.AzurePublic.Services + + resourceManagerConfig := cloudServicesConfig[cloud.ResourceManager] + + if config.ResourceManagerEndpoint != "" && config.ResourceManagerEndpoint != azure.DefaultBaseURI { + resourceManagerConfig.Endpoint = config.ResourceManagerEndpoint + } + + if config.ResourceManagerAudience != "" { + resourceManagerConfig.Audience = config.ResourceManagerAudience + } + + cloudServicesConfig[cloud.ResourceManager] = resourceManagerConfig + + clientOptions := policy.ClientOptions{ + Cloud: cloud.Configuration{ + Services: cloudServicesConfig, + ActiveDirectoryAuthorityHost: config.ActiveDirectoryEndpoint, + }, + } + + credential, err := azidentity.NewClientSecretCredential(config.TenantId, config.ClientId, config.ClientSecret, &azidentity.ClientSecretCredentialOptions{ + ClientOptions: clientOptions, + }) if err != nil { - return nil, err + return nil, fmt.Errorf("couldn't create client credentials: %w", err) } - usageDetailsClient := consumption.NewUsageDetailsClientWithBaseURI(config.ResourceManagerEndpoint, config.SubscriptionId) - forecastsClient := costmanagement.NewForecastClientWithBaseURI(config.ResourceManagerEndpoint, config.SubscriptionId) + usageDetailsClient, err := armconsumption.NewUsageDetailsClient(credential, &arm.ClientOptions{ + ClientOptions: clientOptions, + }) + if err != nil { + return nil, fmt.Errorf("couldn't create usage details client: %w", err) + } - usageDetailsClient.Authorizer = authorizer - forecastsClient.Authorizer = authorizer + forecastsClient, err := armcostmanagement.NewForecastClient(credential, &arm.ClientOptions{ + ClientOptions: clientOptions, + }) + if err != nil { + return nil, fmt.Errorf("couldn't create forecast client: %w", err) + } service := UsageService{ - usageDetailsClient: &usageDetailsClient, - forecastClient: &forecastsClient, + usageDetailsClient: usageDetailsClient, + forecastClient: forecastsClient, context: context.Background(), log: logp.NewLogger("azure billing service"), } @@ -69,7 +100,11 @@ func NewService(config azure.Config) (*UsageService, error) { } // GetForecast fetches the forecast for the given scope and time interval. -func (service *UsageService) GetForecast(scope string, startTime, endTime time.Time) (costmanagement.QueryResult, error) { +func (service *UsageService) GetForecast( + scope string, + startTime, + endTime time.Time, +) (armcostmanagement.QueryResult, error) { // With this flag, the Forecast API will also return actual usage data // for the given time interval (usually the current month). // @@ -85,30 +120,35 @@ func (service *UsageService) GetForecast(scope string, startTime, endTime time.T // The aggregation is performed by the "sum" of "cost" for each day. aggregationName := "Cost" - aggregationFunction := costmanagement.FunctionTypeSum + aggregationFunction := armcostmanagement.FunctionTypeSum + + granularityDaily := armcostmanagement.GranularityTypeDaily + + forecastTimeframeCustom := armcostmanagement.ForecastTimeframeTypeCustom + forecastTypeActualCost := armcostmanagement.ForecastTypeActualCost - forecastDefinition := costmanagement.ForecastDefinition{ - Dataset: &costmanagement.QueryDataset{ - Aggregation: map[string]*costmanagement.QueryAggregation{ + forecastDefinition := armcostmanagement.ForecastDefinition{ + Dataset: &armcostmanagement.ForecastDataset{ + Aggregation: map[string]*armcostmanagement.QueryAggregation{ "totalCost": { - Function: aggregationFunction, + Function: &aggregationFunction, Name: &aggregationName, }, }, - Granularity: costmanagement.GranularityTypeDaily, + Granularity: &granularityDaily, }, // Time frame/period of the forecast. Required for MCA accounts. // // If omitted, EA users will get a forecast for the current month, and // MCA users will get an error. - Timeframe: costmanagement.ForecastTimeframeTypeCustom, - TimePeriod: &costmanagement.QueryTimePeriod{ - From: &date.Time{Time: startTime}, - To: &date.Time{Time: endTime}, + Timeframe: &forecastTimeframeCustom, + TimePeriod: &armcostmanagement.QueryTimePeriod{ + From: &startTime, + To: &endTime, }, - Type: costmanagement.ForecastTypeActualCost, + Type: &forecastTypeActualCost, IncludeActualCost: &includeActualCost, IncludeFreshPartialCost: &includeFreshPartialCost, } @@ -116,15 +156,43 @@ func (service *UsageService) GetForecast(scope string, startTime, endTime time.T // required, but I don't have a use for it, yet. filter := "" - queryResult, err := service.forecastClient.Usage(service.context, scope, forecastDefinition, filter) + queryResult, err := service.forecastClient.Usage(service.context, scope, forecastDefinition, &armcostmanagement.ForecastClientUsageOptions{ + Filter: &filter, + }) if err != nil { - return costmanagement.QueryResult{}, err + return armcostmanagement.QueryResult{}, err } - return queryResult, nil + return queryResult.QueryResult, nil } // GetUsageDetails fetches the usage details for the given filters. -func (service *UsageService) GetUsageDetails(scope string, expand string, filter string, skipToken string, top *int32, metrictype consumption.Metrictype, startDate string, endDate string) (consumption.UsageDetailsListResultPage, error) { - return service.usageDetailsClient.List(service.context, scope, expand, filter, skipToken, top, metrictype, startDate, endDate) +func (service *UsageService) GetUsageDetails( + scope string, + expand string, + filter string, + metrictype armconsumption.Metrictype, + startDate string, + endDate string, +) (armconsumption.UsageDetailsListResult, error) { + pager := service.usageDetailsClient.NewListPager(scope, &armconsumption.UsageDetailsClientListOptions{ + Expand: &expand, + Filter: &filter, + Metric: &metrictype, + StartDate: &startDate, + EndDate: &endDate, + }) + + usageDetails := armconsumption.UsageDetailsListResult{} + + for pager.More() { + nextPage, err := pager.NextPage(service.context) + if err != nil { + return armconsumption.UsageDetailsListResult{}, err + } + + usageDetails.Value = append(usageDetails.Value, nextPage.Value...) + } + + return usageDetails, nil } diff --git a/x-pack/metricbeat/module/azure/client.go b/x-pack/metricbeat/module/azure/client.go index 1971a62725e8..e9595425be39 100644 --- a/x-pack/metricbeat/module/azure/client.go +++ b/x-pack/metricbeat/module/azure/client.go @@ -9,9 +9,8 @@ import ( "strings" "time" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/elastic-agent-libs/logp" @@ -27,7 +26,7 @@ type Client struct { } // mapResourceMetrics function type will map the configuration options to client metrics (depending on the metricset) -type mapResourceMetrics func(client *Client, resources []resources.GenericResourceExpanded, resourceConfig ResourceConfig) ([]Metric, error) +type mapResourceMetrics func(client *Client, resources []*armresources.GenericResourceExpanded, resourceConfig ResourceConfig) ([]Metric, error) // NewClient instantiates the Azure monitoring client func NewClient(config Config) (*Client, error) { @@ -35,12 +34,15 @@ func NewClient(config Config) (*Client, error) { if err != nil { return nil, err } + client := &Client{ AzureMonitorService: azureMonitorService, Config: config, Log: logp.NewLogger("azure monitor client"), } + client.ResourceConfigurations.RefreshInterval = config.RefreshListInterval + return client, nil } @@ -167,13 +169,15 @@ func (client *Client) CreateMetric(resourceId string, subResourceId string, name } // MapMetricByPrimaryAggregation will map the primary aggregation of the metric definition to the client metric -func (client *Client) MapMetricByPrimaryAggregation(metrics []insights.MetricDefinition, resourceId string, subResourceId string, namespace string, dim []Dimension, timegrain string) []Metric { +func (client *Client) MapMetricByPrimaryAggregation(metrics []armmonitor.MetricDefinition, resourceId string, subResourceId string, namespace string, dim []Dimension, timegrain string) []Metric { var clientMetrics []Metric - metricGroups := make(map[string][]insights.MetricDefinition) + + metricGroups := make(map[string][]armmonitor.MetricDefinition) for _, met := range metrics { - metricGroups[string(met.PrimaryAggregationType)] = append(metricGroups[string(met.PrimaryAggregationType)], met) + metricGroups[string(*met.PrimaryAggregationType)] = append(metricGroups[string(*met.PrimaryAggregationType)], met) } + for key, metricGroup := range metricGroups { var metricNames []string for _, metricName := range metricGroup { @@ -186,9 +190,12 @@ func (client *Client) MapMetricByPrimaryAggregation(metrics []insights.MetricDef // GetVMForMetaData func will retrieve the vm details in order to fill in the cloud metadata and also update the client resources func (client *Client) GetVMForMetaData(resource *Resource, metricValues []MetricValue) VmResource { - var vm VmResource - resourceName := resource.Name - resourceId := resource.Id + var ( + vm VmResource + resourceName = resource.Name + resourceId = resource.Id + ) + // check first if this is a vm scaleset and the instance name is stored in the dimension value if dimension, ok := getDimension("VMName", metricValues[0].dimensions); ok { instanceId := getInstanceId(dimension.Value) @@ -197,17 +204,21 @@ func (client *Client) GetVMForMetaData(resource *Resource, metricValues []Metric resourceName = dimension.Value } } + // if vm has been already added to the resource then it should be returned if existingVM, ok := getVM(resourceName, resource.Vms); ok { return existingVM } + // an additional call is necessary in order to retrieve the vm specific details expandedResource, err := client.AzureMonitorService.GetResourceDefinitionById(resourceId) if err != nil { client.Log.Error(err, "could not retrieve the resource details by resource ID %s", resourceId) return VmResource{} } + vm.Name = *expandedResource.Name + if expandedResource.Properties != nil { if properties, ok := expandedResource.Properties.(map[string]interface{}); ok { if hardware, ok := properties["hardwareProfile"]; ok { @@ -220,12 +231,16 @@ func (client *Client) GetVMForMetaData(resource *Resource, metricValues []Metric } } } - if len(vm.Size) == 0 && expandedResource.Sku != nil && expandedResource.Sku.Name != nil { - vm.Size = *expandedResource.Sku.Name + + if len(vm.Size) == 0 && expandedResource.SKU != nil && expandedResource.SKU.Name != nil { + vm.Size = *expandedResource.SKU.Name } + // the client resource and selected resources are being updated in order to avoid additional calls client.AddVmToResource(resource.Id, vm) + resource.Vms = append(resource.Vms, vm) + return vm } diff --git a/x-pack/metricbeat/module/azure/client_test.go b/x-pack/metricbeat/module/azure/client_test.go index 11939b8c1ccc..1f95604e3b89 100644 --- a/x-pack/metricbeat/module/azure/client_test.go +++ b/x-pack/metricbeat/module/azure/client_test.go @@ -8,8 +8,8 @@ import ( "errors" "testing" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/mock" ) @@ -36,7 +36,7 @@ var ( } ) -func mockMapResourceMetrics(client *Client, resources []resources.GenericResourceExpanded, resourceConfig ResourceConfig) ([]Metric, error) { +func mockMapResourceMetrics(client *Client, resources []*armresources.GenericResourceExpanded, resourceConfig ResourceConfig) ([]Metric, error) { return nil, nil } @@ -50,7 +50,7 @@ func TestInitResources(t *testing.T) { client := NewMockClient() client.Config = resourceQueryConfig m := &MockService{} - m.On("GetResourceDefinitions", mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return([]resources.GenericResourceExpanded{}, errors.New("invalid resource query")) + m.On("GetResourceDefinitions", mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return([]*armresources.GenericResourceExpanded{}, errors.New("invalid resource query")) client.AzureMonitorService = m mr := MockReporterV2{} mr.On("Error", mock.Anything).Return(true) @@ -78,7 +78,7 @@ func TestGetMetricValues(t *testing.T) { } m := &MockService{} m.On("GetMetricValues", mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything).Once(). - Return([]insights.Metric{}, "", errors.New("invalid parameters or no metrics found")) + Return([]armmonitor.Metric{}, "", errors.New("invalid parameters or no metrics found")) client.AzureMonitorService = m mr := MockReporterV2{} mr.On("Error", mock.Anything).Return(true) @@ -100,7 +100,7 @@ func TestGetMetricValues(t *testing.T) { } m := &MockService{} m.On("GetMetricValues", mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything, mock.Anything). - Return([]insights.Metric{}, "", errors.New("invalid parameters or no metrics found")) + Return([]armmonitor.Metric{}, "", errors.New("invalid parameters or no metrics found")) client.AzureMonitorService = m mr := MockReporterV2{} mr.On("Error", mock.Anything).Return(true) diff --git a/x-pack/metricbeat/module/azure/client_utils.go b/x-pack/metricbeat/module/azure/client_utils.go index abfccfa75ec7..d96996c7215b 100644 --- a/x-pack/metricbeat/module/azure/client_utils.go +++ b/x-pack/metricbeat/module/azure/client_utils.go @@ -10,7 +10,7 @@ import ( "strings" "time" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" ) // DefaultTimeGrain is set as default timegrain for the azure metrics @@ -19,23 +19,23 @@ const DefaultTimeGrain = "PT5M" var instanceIdRegex = regexp.MustCompile(`.*?(\d+)$`) // mapMetricValues should map the metric values -func mapMetricValues(metrics []insights.Metric, previousMetrics []MetricValue, startTime time.Time, endTime time.Time) []MetricValue { +func mapMetricValues(metrics []armmonitor.Metric, previousMetrics []MetricValue, startTime time.Time, endTime time.Time) []MetricValue { var currentMetrics []MetricValue // compare with the previously returned values and filter out any double records for _, v := range metrics { - for _, t := range *v.Timeseries { - for _, mv := range *t.Data { - if metricExists(*v.Name.Value, mv, previousMetrics) || metricIsEmpty(mv) { + for _, t := range v.Timeseries { + for _, mv := range t.Data { + if metricExists(*v.Name.Value, *mv, previousMetrics) || metricIsEmpty(*mv) { continue } // remove metric values that are not part of the timeline selected - if mv.TimeStamp.Time.After(startTime) && mv.TimeStamp.Time.Before(endTime) { + if mv.TimeStamp.After(startTime) && mv.TimeStamp.Before(endTime) { continue } // define the new metric value and match aggregations values var val MetricValue val.name = *v.Name.Value - val.timestamp = mv.TimeStamp.Time + val.timestamp = *mv.TimeStamp if mv.Minimum != nil { val.min = mv.Minimum } @@ -52,7 +52,7 @@ func mapMetricValues(metrics []insights.Metric, previousMetrics []MetricValue, s val.count = mv.Count } if t.Metadatavalues != nil { - for _, dim := range *t.Metadatavalues { + for _, dim := range t.Metadatavalues { val.dimensions = append(val.dimensions, Dimension{Name: *dim.Name.Value, Value: *dim.Value}) } } @@ -64,7 +64,7 @@ func mapMetricValues(metrics []insights.Metric, previousMetrics []MetricValue, s } // metricExists will check if the metric value has been retrieved in the past -func metricExists(name string, metric insights.MetricValue, metrics []MetricValue) bool { +func metricExists(name string, metric armmonitor.MetricValue, metrics []MetricValue) bool { for _, met := range metrics { if name == met.name && metric.TimeStamp.Equal(met.timestamp) && @@ -80,7 +80,7 @@ func metricExists(name string, metric insights.MetricValue, metrics []MetricValu } // metricIsEmpty will check if the metric value is empty, this seems to be an issue with the azure sdk -func metricIsEmpty(metric insights.MetricValue) bool { +func metricIsEmpty(metric armmonitor.MetricValue) bool { if metric.Average == nil && metric.Total == nil && metric.Minimum == nil && metric.Maximum == nil && metric.Count == nil { return true } @@ -138,22 +138,22 @@ func convertTimegrainToDuration(timegrain string) time.Duration { var duration time.Duration switch timegrain { case "PT1M": - duration = time.Duration(time.Minute) - default: + duration = time.Minute case "PT5M": - duration = time.Duration(5 * time.Minute) + duration = 5 * time.Minute case "PT15M": - duration = time.Duration(15 * time.Minute) + duration = 15 * time.Minute case "PT30M": - duration = time.Duration(30 * time.Minute) + duration = 30 * time.Minute case "PT1H": - duration = time.Duration(time.Hour) + duration = time.Hour case "PT6H": - duration = time.Duration(6 * time.Hour) + duration = 6 * time.Hour case "PT12H": - duration = time.Duration(12 * time.Hour) + duration = 12 * time.Hour case "PT1D": - duration = time.Duration(24 * time.Hour) + duration = 24 * time.Hour + default: } return duration } @@ -173,7 +173,7 @@ func groupMetricsByResource(metrics []Metric) map[string][]Metric { // getDimension will check if the dimension value is found in the list func getDimension(dimension string, dimensions []Dimension) (Dimension, bool) { for _, dim := range dimensions { - if strings.ToLower(dim.Name) == strings.ToLower(dimension) { + if strings.EqualFold(dim.Name, dimension) { return dim, true } } diff --git a/x-pack/metricbeat/module/azure/client_utils_test.go b/x-pack/metricbeat/module/azure/client_utils_test.go index 37528540f705..e3e2de4f96fb 100644 --- a/x-pack/metricbeat/module/azure/client_utils_test.go +++ b/x-pack/metricbeat/module/azure/client_utils_test.go @@ -8,7 +8,7 @@ import ( "testing" "time" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" "github.com/Azure/go-autorest/autorest/date" "github.com/stretchr/testify/assert" ) @@ -22,8 +22,8 @@ func TestMetricExists(t *testing.T) { Time: date1, } var name = "Requests" - insightValue := insights.MetricValue{ - TimeStamp: &stamp, + insightValue := armmonitor.MetricValue{ + TimeStamp: &stamp.Time, Average: &fl, Minimum: &fl1, Maximum: nil, @@ -90,8 +90,8 @@ func TestMetricIsEmpty(t *testing.T) { stamp := date.Time{ Time: time.Date(2019, 12, 12, 12, 12, 12, 12, &location), } - insightValue := insights.MetricValue{ - TimeStamp: &stamp, + insightValue := armmonitor.MetricValue{ + TimeStamp: &stamp.Time, Average: &fl, Minimum: nil, Maximum: nil, diff --git a/x-pack/metricbeat/module/azure/config.go b/x-pack/metricbeat/module/azure/config.go index 3993cf16773b..a6e42ffce070 100644 --- a/x-pack/metricbeat/module/azure/config.go +++ b/x-pack/metricbeat/module/azure/config.go @@ -5,10 +5,9 @@ package azure import ( + "fmt" "time" - "github.com/pkg/errors" - "github.com/elastic/elastic-agent-libs/mapstr" ) @@ -35,6 +34,7 @@ type Config struct { SubscriptionId string `config:"subscription_id" validate:"required"` Period time.Duration `config:"period" validate:"nonzero,required"` ResourceManagerEndpoint string `config:"resource_manager_endpoint"` + ResourceManagerAudience string `config:"resource_manager_audience"` ActiveDirectoryEndpoint string `config:"active_directory_endpoint"` // specific to resource metrics Resources []ResourceConfig `config:"resources"` @@ -81,17 +81,17 @@ func (conf *Config) Validate() error { if conf.ActiveDirectoryEndpoint == "" { ok, err := AzureEnvs.HasKey(conf.ResourceManagerEndpoint) if err != nil { - return errors.Wrap(err, "No active directory endpoint found for the resource manager endpoint selected.") + return fmt.Errorf("no active directory endpoint found for the resource manager endpoint selected: %w", err) } if ok { add, err := AzureEnvs.GetValue(conf.ResourceManagerEndpoint) if err != nil { - return errors.Wrap(err, "No active directory endpoint found for the resource manager endpoint selected.") + return fmt.Errorf("no active directory endpoint found for the resource manager endpoint selected: %w", err) } conf.ActiveDirectoryEndpoint = add.(string) } if conf.ActiveDirectoryEndpoint == "" { - return errors.New("no active directory endpoint has been configured") + return fmt.Errorf("no active directory endpoint has been configured") } } return nil diff --git a/x-pack/metricbeat/module/azure/mock_service.go b/x-pack/metricbeat/module/azure/mock_service.go index 2bb591e9afe1..65f606dde128 100644 --- a/x-pack/metricbeat/module/azure/mock_service.go +++ b/x-pack/metricbeat/module/azure/mock_service.go @@ -5,8 +5,8 @@ package azure import ( - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/stretchr/testify/mock" "github.com/elastic/beats/v7/metricbeat/mb" @@ -18,33 +18,33 @@ type MockService struct { } // GetResourceDefinitionById is a mock function for the azure service -func (client *MockService) GetResourceDefinitionById(id string) (resources.GenericResource, error) { +func (client *MockService) GetResourceDefinitionById(id string) (armresources.GenericResource, error) { args := client.Called(id) - return args.Get(0).(resources.GenericResource), args.Error(1) + return args.Get(0).(armresources.GenericResource), args.Error(1) } // GetResourceDefinitions is a mock function for the azure service -func (client *MockService) GetResourceDefinitions(id []string, group []string, rType string, query string) ([]resources.GenericResourceExpanded, error) { +func (client *MockService) GetResourceDefinitions(id []string, group []string, rType string, query string) ([]*armresources.GenericResourceExpanded, error) { args := client.Called(id, group, rType, query) - return args.Get(0).([]resources.GenericResourceExpanded), args.Error(1) + return args.Get(0).([]*armresources.GenericResourceExpanded), args.Error(1) } // GetMetricDefinitions is a mock function for the azure service -func (client *MockService) GetMetricDefinitions(resourceId string, namespace string) (insights.MetricDefinitionCollection, error) { +func (client *MockService) GetMetricDefinitions(resourceId string, namespace string) (armmonitor.MetricDefinitionCollection, error) { args := client.Called(resourceId, namespace) - return args.Get(0).(insights.MetricDefinitionCollection), args.Error(1) + return args.Get(0).(armmonitor.MetricDefinitionCollection), args.Error(1) } // GetMetricNamespaces is a mock function for the azure service -func (client *MockService) GetMetricNamespaces(resourceId string) (insights.MetricNamespaceCollection, error) { +func (client *MockService) GetMetricNamespaces(resourceId string) (armmonitor.MetricNamespaceCollection, error) { args := client.Called(resourceId) - return args.Get(0).(insights.MetricNamespaceCollection), args.Error(1) + return args.Get(0).(armmonitor.MetricNamespaceCollection), args.Error(1) } // GetMetricValues is a mock function for the azure service -func (client *MockService) GetMetricValues(resourceId string, namespace string, timegrain string, timespan string, metricNames []string, aggregations string, filter string) ([]insights.Metric, string, error) { +func (client *MockService) GetMetricValues(resourceId string, namespace string, timegrain string, timespan string, metricNames []string, aggregations string, filter string) ([]armmonitor.Metric, string, error) { args := client.Called(resourceId, namespace) - return args.Get(0).([]insights.Metric), args.String(1), args.Error(2) + return args.Get(0).([]armmonitor.Metric), args.String(1), args.Error(2) } // MockReporterV2 mock implementation for testing purposes diff --git a/x-pack/metricbeat/module/azure/monitor/client_helper.go b/x-pack/metricbeat/module/azure/monitor/client_helper.go index c8ab62ca70c8..61254685bb7c 100644 --- a/x-pack/metricbeat/module/azure/monitor/client_helper.go +++ b/x-pack/metricbeat/module/azure/monitor/client_helper.go @@ -5,13 +5,12 @@ package monitor import ( + "fmt" "strings" - "github.com/pkg/errors" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" ) @@ -19,31 +18,31 @@ import ( const missingNamespace = "no metric definitions were found for resource %s and namespace %s. Verify if the namespace is spelled correctly or if it is supported by the resource in case." // mapMetrics should validate and map the metric related configuration to relevant azure monitor api parameters -func mapMetrics(client *azure.Client, resources []resources.GenericResourceExpanded, resourceConfig azure.ResourceConfig) ([]azure.Metric, error) { +func mapMetrics(client *azure.Client, resources []*armresources.GenericResourceExpanded, resourceConfig azure.ResourceConfig) ([]azure.Metric, error) { var metrics []azure.Metric for _, resource := range resources { for _, metric := range resourceConfig.Metrics { // get all metrics supported by the namespace provided metricDefinitions, err := client.AzureMonitorService.GetMetricDefinitions(*resource.ID, metric.Namespace) if err != nil { - return nil, errors.Wrapf(err, "no metric definitions were found for resource %s and namespace %s.", *resource.ID, metric.Namespace) + return nil, fmt.Errorf("no metric definitions were found for resource %s and namespace %s %w", *resource.ID, metric.Namespace, err) } - if len(*metricDefinitions.Value) == 0 { + if len(metricDefinitions.Value) == 0 { if metric.IgnoreUnsupported { client.Log.Infof(missingNamespace, *resource.ID, metric.Namespace) continue } - return nil, errors.Errorf(missingNamespace, *resource.ID, metric.Namespace) + return nil, fmt.Errorf("%s %s %s", missingNamespace, *resource.ID, metric.Namespace) } // validate metric names and filter on the supported metrics - supportedMetricNames, err := filterMetricNames(*resource.ID, metric, *metricDefinitions.Value) + supportedMetricNames, err := filterMetricNames(*resource.ID, metric, metricDefinitions.Value) if err != nil { return nil, err } //validate aggregations and filter on supported aggregations - metricGroups, err := filterOnSupportedAggregations(supportedMetricNames, metric, *metricDefinitions.Value) + metricGroups, err := filterOnSupportedAggregations(supportedMetricNames, metric, metricDefinitions.Value) if err != nil { return nil, err } @@ -52,7 +51,7 @@ func mapMetrics(client *azure.Client, resources []resources.GenericResourceExpan var dim []azure.Dimension if len(metric.Dimensions) > 0 { for _, dimension := range metric.Dimensions { - dim = append(dim, azure.Dimension{Name: dimension.Name, Value: dimension.Value}) + dim = append(dim, azure.Dimension(dimension)) } } for key, metricGroup := range metricGroups { @@ -68,7 +67,7 @@ func mapMetrics(client *azure.Client, resources []resources.GenericResourceExpan } // filterMetricNames func will verify if the metric names entered are valid and will also return the corresponding list of metrics -func filterMetricNames(resourceId string, metricConfig azure.MetricConfig, metricDefinitions []insights.MetricDefinition) ([]string, error) { +func filterMetricNames(resourceId string, metricConfig azure.MetricConfig, metricDefinitions []*armmonitor.MetricDefinition) ([]string, error) { var supportedMetricNames []string var unsupportedMetricNames []string // check if all metric names are selected (*) @@ -80,18 +79,18 @@ func filterMetricNames(resourceId string, metricConfig azure.MetricConfig, metri // verify if configured metric names are valid, return log error event for the invalid ones, map only the valid metric names supportedMetricNames, unsupportedMetricNames = filterConfiguredMetrics(metricConfig.Name, metricDefinitions) if len(unsupportedMetricNames) > 0 && !metricConfig.IgnoreUnsupported { - return nil, errors.Errorf("the metric names configured %s are not supported for the resource %s and namespace %s", + return nil, fmt.Errorf("the metric names configured %s are not supported for the resource %s and namespace %s", strings.Join(unsupportedMetricNames, ","), resourceId, metricConfig.Namespace) } } if len(supportedMetricNames) == 0 && !metricConfig.IgnoreUnsupported { - return nil, errors.Errorf("the metric names configured : %s are not supported for the resource %s and namespace %s ", strings.Join(metricConfig.Name, ","), resourceId, metricConfig.Namespace) + return nil, fmt.Errorf("the metric names configured : %s are not supported for the resource %s and namespace %s ", strings.Join(metricConfig.Name, ","), resourceId, metricConfig.Namespace) } return supportedMetricNames, nil } // filterConfiguredMetrics will filter out any unsupported metrics based on the namespace selected -func filterConfiguredMetrics(selectedRange []string, allRange []insights.MetricDefinition) ([]string, []string) { +func filterConfiguredMetrics(selectedRange []string, allRange []*armmonitor.MetricDefinition) ([]string, []string) { var inRange []string var notInRange []string var allMetrics string @@ -109,24 +108,28 @@ func filterConfiguredMetrics(selectedRange []string, allRange []insights.MetricD } // filterOnSupportedAggregations will verify if the aggregation values entered are supported and will also return the corresponding list of aggregations -func filterOnSupportedAggregations(metricNames []string, metricConfig azure.MetricConfig, metricDefinitions []insights.MetricDefinition) (map[string][]insights.MetricDefinition, error) { +func filterOnSupportedAggregations( + metricNames []string, + metricConfig azure.MetricConfig, + metricDefinitions []*armmonitor.MetricDefinition, +) (map[string][]*armmonitor.MetricDefinition, error) { var supportedAggregations []string var unsupportedAggregations []string - metricGroups := make(map[string][]insights.MetricDefinition) + metricGroups := make(map[string][]*armmonitor.MetricDefinition) metricDefs := getMetricDefinitionsByNames(metricDefinitions, metricNames) if len(metricConfig.Aggregations) == 0 { for _, metricDef := range metricDefs { - metricGroups[string(metricDef.PrimaryAggregationType)] = append(metricGroups[string(metricDef.PrimaryAggregationType)], metricDef) + metricGroups[string(*metricDef.PrimaryAggregationType)] = append(metricGroups[string(*metricDef.PrimaryAggregationType)], metricDef) } } else { supportedAggregations, unsupportedAggregations = filterAggregations(metricConfig.Aggregations, metricDefs) if len(unsupportedAggregations) > 0 { - return nil, errors.Errorf("the aggregations configured : %s are not supported for some of the metrics selected %s ", + return nil, fmt.Errorf("the aggregations configured : %s are not supported for some of the metrics selected %s ", strings.Join(unsupportedAggregations, ","), strings.Join(metricNames, ",")) } if len(supportedAggregations) == 0 { - return nil, errors.Errorf("no aggregations were found based on the aggregation values configured or supported between the metrics : %s", + return nil, fmt.Errorf("no aggregations were found based on the aggregation values configured or supported between the metrics : %s", strings.Join(metricNames, ",")) } key := strings.Join(supportedAggregations, ",") @@ -136,14 +139,14 @@ func filterOnSupportedAggregations(metricNames []string, metricConfig azure.Metr } // filterAggregations will filter out any unsupported aggregations based on the metrics selected -func filterAggregations(selectedRange []string, metrics []insights.MetricDefinition) ([]string, []string) { +func filterAggregations(selectedRange []string, metrics []*armmonitor.MetricDefinition) ([]string, []string) { var difference []string var supported = []string{"Average", "Maximum", "Minimum", "Count", "Total"} for _, metric := range metrics { var metricSupported []string - for _, agg := range *metric.SupportedAggregationTypes { - metricSupported = append(metricSupported, string(agg)) + for _, agg := range metric.SupportedAggregationTypes { + metricSupported = append(metricSupported, string(*agg)) } supported, _ = intersections(metricSupported, supported) } @@ -154,14 +157,15 @@ func filterAggregations(selectedRange []string, metrics []insights.MetricDefinit } // filter is a helper method, will filter out strings not part of a slice -func filter(src []string) (res []string) { +func filter(src []string) []string { + var res []string for _, s := range src { newStr := strings.Join(res, " ") if !strings.Contains(newStr, s) { res = append(res, s) } } - return + return res } // intersections is a helper method, will compare 2 slices and return their intersection and difference records @@ -180,8 +184,8 @@ func intersections(supported, selected []string) ([]string, []string) { } // getMetricDefinitionsByNames is a helper method, will compare 2 slices and return their intersection -func getMetricDefinitionsByNames(metricDefs []insights.MetricDefinition, names []string) []insights.MetricDefinition { - var metrics []insights.MetricDefinition +func getMetricDefinitionsByNames(metricDefs []*armmonitor.MetricDefinition, names []string) []*armmonitor.MetricDefinition { + var metrics []*armmonitor.MetricDefinition for _, def := range metricDefs { for _, supportedName := range names { if *def.Name.Value == supportedName { diff --git a/x-pack/metricbeat/module/azure/monitor/client_helper_test.go b/x-pack/metricbeat/module/azure/monitor/client_helper_test.go index 98305ec62555..d5c89bbbd781 100644 --- a/x-pack/metricbeat/module/azure/monitor/client_helper_test.go +++ b/x-pack/metricbeat/module/azure/monitor/client_helper_test.go @@ -9,20 +9,22 @@ import ( "github.com/stretchr/testify/mock" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" - "github.com/pkg/errors" + "fmt" + + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/stretchr/testify/assert" "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" ) -func MockResourceExpanded() resources.GenericResourceExpanded { +func MockResourceExpanded() *armresources.GenericResourceExpanded { id := "123" name := "resourceName" location := "resourceLocation" rType := "resourceType" - return resources.GenericResourceExpanded{ + + return &armresources.GenericResourceExpanded{ ID: &id, Name: &name, Location: &location, @@ -30,33 +32,55 @@ func MockResourceExpanded() resources.GenericResourceExpanded { } } -func MockMetricDefinitions() *[]insights.MetricDefinition { - metric1 := "TotalRequests" - metric2 := "Capacity" - metric3 := "BytesRead" - defs := []insights.MetricDefinition{ +func MockMetricDefinitions() []*armmonitor.MetricDefinition { + var ( + metric1 = "TotalRequests" + metric2 = "Capacity" + metric3 = "BytesRead" + + aggregationTypeAverage = armmonitor.AggregationTypeAverage + aggregationTypeCount = armmonitor.AggregationTypeCount + aggregationTypeMinimum = armmonitor.AggregationTypeMinimum + aggregationTypeMaximum = armmonitor.AggregationTypeMaximum + aggregationTypeTotal = armmonitor.AggregationTypeTotal + ) + + defs := []*armmonitor.MetricDefinition{ { - Name: &insights.LocalizableString{Value: &metric1}, - PrimaryAggregationType: insights.Average, - SupportedAggregationTypes: &[]insights.AggregationType{insights.Maximum, insights.Count, insights.Total, insights.Average}, + Name: &armmonitor.LocalizableString{Value: &metric1}, + PrimaryAggregationType: &aggregationTypeAverage, + SupportedAggregationTypes: []*armmonitor.AggregationType{ + &aggregationTypeMaximum, + &aggregationTypeCount, + &aggregationTypeTotal, + &aggregationTypeAverage, + }, }, { - Name: &insights.LocalizableString{Value: &metric2}, - PrimaryAggregationType: insights.Average, - SupportedAggregationTypes: &[]insights.AggregationType{insights.Average, insights.Count, insights.Minimum}, + Name: &armmonitor.LocalizableString{Value: &metric2}, + PrimaryAggregationType: &aggregationTypeAverage, + SupportedAggregationTypes: []*armmonitor.AggregationType{ + &aggregationTypeAverage, + &aggregationTypeCount, + &aggregationTypeMinimum, + }, }, { - Name: &insights.LocalizableString{Value: &metric3}, - PrimaryAggregationType: insights.Average, - SupportedAggregationTypes: &[]insights.AggregationType{insights.Average, insights.Count, insights.Minimum}, + Name: &armmonitor.LocalizableString{Value: &metric3}, + PrimaryAggregationType: &aggregationTypeAverage, + SupportedAggregationTypes: []*armmonitor.AggregationType{ + &aggregationTypeAverage, + &aggregationTypeCount, + &aggregationTypeMinimum, + }, }, } - return &defs + return defs } func TestMapMetric(t *testing.T) { resource := MockResourceExpanded() - metricDefinitions := insights.MetricDefinitionCollection{ + metricDefinitions := armmonitor.MetricDefinitionCollection{ Value: MockMetricDefinitions(), } metricConfig := azure.MetricConfig{Namespace: "namespace", Dimensions: []azure.DimensionConfig{{Name: "location", Value: "West Europe"}}} @@ -64,9 +88,9 @@ func TestMapMetric(t *testing.T) { client := azure.NewMockClient() t.Run("return error when no metric definitions were found", func(t *testing.T) { m := &azure.MockService{} - m.On("GetMetricDefinitions", mock.Anything, mock.Anything).Return(insights.MetricDefinitionCollection{}, errors.New("invalid resource ID")) + m.On("GetMetricDefinitions", mock.Anything, mock.Anything).Return(armmonitor.MetricDefinitionCollection{}, fmt.Errorf("invalid resource ID")) client.AzureMonitorService = m - metric, err := mapMetrics(client, []resources.GenericResourceExpanded{resource}, resourceConfig) + metric, err := mapMetrics(client, []*armresources.GenericResourceExpanded{resource}, resourceConfig) assert.Error(t, err) assert.Equal(t, metric, []azure.Metric(nil)) m.AssertExpectations(t) @@ -77,7 +101,7 @@ func TestMapMetric(t *testing.T) { client.AzureMonitorService = m metricConfig.Name = []string{"*"} resourceConfig.Metrics = []azure.MetricConfig{metricConfig} - metrics, err := mapMetrics(client, []resources.GenericResourceExpanded{resource}, resourceConfig) + metrics, err := mapMetrics(client, []*armresources.GenericResourceExpanded{resource}, resourceConfig) assert.NoError(t, err) assert.Equal(t, metrics[0].ResourceId, "123") assert.Equal(t, metrics[0].Namespace, "namespace") @@ -93,7 +117,7 @@ func TestMapMetric(t *testing.T) { metricConfig.Name = []string{"TotalRequests", "Capacity"} metricConfig.Aggregations = []string{"Average"} resourceConfig.Metrics = []azure.MetricConfig{metricConfig} - metrics, err := mapMetrics(client, []resources.GenericResourceExpanded{resource}, resourceConfig) + metrics, err := mapMetrics(client, []*armresources.GenericResourceExpanded{resource}, resourceConfig) assert.NoError(t, err) assert.True(t, len(metrics) > 0) @@ -108,14 +132,14 @@ func TestMapMetric(t *testing.T) { func TestFilterSConfiguredMetrics(t *testing.T) { selectedRange := []string{"TotalRequests", "Capacity", "CPUUsage"} - intersection, difference := filterConfiguredMetrics(selectedRange, *MockMetricDefinitions()) + intersection, difference := filterConfiguredMetrics(selectedRange, MockMetricDefinitions()) assert.Equal(t, intersection, []string{"TotalRequests", "Capacity"}) assert.Equal(t, difference, []string{"CPUUsage"}) } func TestFilterAggregations(t *testing.T) { selectedRange := []string{"Average", "Minimum"} - intersection, difference := filterAggregations(selectedRange, *MockMetricDefinitions()) + intersection, difference := filterAggregations(selectedRange, MockMetricDefinitions()) assert.Equal(t, intersection, []string{"Average"}) assert.Equal(t, difference, []string{"Minimum"}) } @@ -142,7 +166,7 @@ func TestIntersections(t *testing.T) { func TestGetMetricDefinitionsByNames(t *testing.T) { metrics := []string{"TotalRequests", "CPUUsage"} - result := getMetricDefinitionsByNames(*MockMetricDefinitions(), metrics) + result := getMetricDefinitionsByNames(MockMetricDefinitions(), metrics) assert.Equal(t, len(result), 1) assert.Equal(t, *result[0].Name.Value, "TotalRequests") } diff --git a/x-pack/metricbeat/module/azure/monitor/monitor_test.go b/x-pack/metricbeat/module/azure/monitor/monitor_test.go index eba7c3e9c9c4..cbc53541abcd 100644 --- a/x-pack/metricbeat/module/azure/monitor/monitor_test.go +++ b/x-pack/metricbeat/module/azure/monitor/monitor_test.go @@ -24,7 +24,7 @@ var ( "client_secret": "unique identifier", "client_id": "unique identifier", "subscription_id": "unique identifier", - "tenant_id": "unique identifier", + "tenant_id": "07482715-b847-4056-86e6-5eec1c7b5996", } resourceConfig = mapstr.M{ @@ -34,7 +34,7 @@ var ( "client_secret": "unique identifier", "client_id": "unique identifier", "subscription_id": "unique identifier", - "tenant_id": "unique identifier", + "tenant_id": "07482715-b847-4056-86e6-5eec1c7b5996", "resources": []mapstr.M{ { "resource_id": "test", diff --git a/x-pack/metricbeat/module/azure/monitor_service.go b/x-pack/metricbeat/module/azure/monitor_service.go index ee2e25aeaf92..9196a386c667 100644 --- a/x-pack/metricbeat/module/azure/monitor_service.go +++ b/x-pack/metricbeat/module/azure/monitor_service.go @@ -11,134 +11,269 @@ import ( "github.com/elastic/elastic-agent-libs/logp" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" - "github.com/Azure/go-autorest/autorest/azure/auth" + "github.com/Azure/azure-sdk-for-go/sdk/azcore/arm" + "github.com/Azure/azure-sdk-for-go/sdk/azcore/cloud" + "github.com/Azure/azure-sdk-for-go/sdk/azcore/policy" + "github.com/Azure/azure-sdk-for-go/sdk/azidentity" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" ) // MonitorService service wrapper to the azure sdk for go type MonitorService struct { - metricsClient *insights.MetricsClient - metricDefinitionClient *insights.MetricDefinitionsClient - metricNamespaceClient *insights.MetricNamespacesClient - resourceClient *resources.Client + metricsClient *armmonitor.MetricsClient + metricDefinitionClient *armmonitor.MetricDefinitionsClient + metricNamespaceClient *armmonitor.MetricNamespacesClient + resourceClient *armresources.Client context context.Context log *logp.Logger } const ( metricNameLimit = 20 - ApiVersion = "2019-12-01" + ApiVersion = "2021-04-01" ) // NewService instantiates the Azure monitoring service func NewService(config Config) (*MonitorService, error) { - clientConfig := auth.NewClientCredentialsConfig(config.ClientId, config.ClientSecret, config.TenantId) - clientConfig.AADEndpoint = config.ActiveDirectoryEndpoint - clientConfig.Resource = config.ResourceManagerEndpoint - authorizer, err := clientConfig.Authorizer() + cloudServicesConfig := cloud.AzurePublic.Services + + resourceManagerConfig := cloudServicesConfig[cloud.ResourceManager] + + if config.ResourceManagerEndpoint != "" && config.ResourceManagerEndpoint != DefaultBaseURI { + resourceManagerConfig.Endpoint = config.ResourceManagerEndpoint + } + + if config.ResourceManagerAudience != "" { + resourceManagerConfig.Audience = config.ResourceManagerAudience + } + + clientOptions := policy.ClientOptions{ + Cloud: cloud.Configuration{ + Services: cloudServicesConfig, + ActiveDirectoryAuthorityHost: config.ActiveDirectoryEndpoint, + }, + } + + credential, err := azidentity.NewClientSecretCredential(config.TenantId, config.ClientId, config.ClientSecret, + &azidentity.ClientSecretCredentialOptions{ + ClientOptions: clientOptions, + }) + if err != nil { + return nil, fmt.Errorf("couldn't create client credentials: %w", err) + } + + metricsClient, err := armmonitor.NewMetricsClient(credential, &arm.ClientOptions{ + ClientOptions: clientOptions, + }) + if err != nil { + return nil, fmt.Errorf("couldn't create metrics client: %w", err) + } + + metricsDefinitionClient, err := armmonitor.NewMetricDefinitionsClient(credential, &arm.ClientOptions{ + ClientOptions: clientOptions, + }) if err != nil { - return nil, err - } - metricsClient := insights.NewMetricsClientWithBaseURI(config.ResourceManagerEndpoint, config.SubscriptionId) - metricsDefinitionClient := insights.NewMetricDefinitionsClientWithBaseURI(config.ResourceManagerEndpoint, config.SubscriptionId) - resourceClient := resources.NewClientWithBaseURI(config.ResourceManagerEndpoint, config.SubscriptionId) - metricNamespaceClient := insights.NewMetricNamespacesClientWithBaseURI(config.ResourceManagerEndpoint, config.SubscriptionId) - metricsClient.Authorizer = authorizer - metricsDefinitionClient.Authorizer = authorizer - resourceClient.Authorizer = authorizer - metricNamespaceClient.Authorizer = authorizer + return nil, fmt.Errorf("couldn't create metric definitions client: %w", err) + } + + resourceClient, err := armresources.NewClient(config.SubscriptionId, credential, &arm.ClientOptions{ + ClientOptions: clientOptions, + }) + if err != nil { + return nil, fmt.Errorf("couldn't create resources client: %w", err) + } + + metricNamespaceClient, err := armmonitor.NewMetricNamespacesClient(credential, &arm.ClientOptions{ + ClientOptions: clientOptions, + }) + if err != nil { + return nil, fmt.Errorf("couldn't create metric namespaces client: %w", err) + } + service := &MonitorService{ - metricDefinitionClient: &metricsDefinitionClient, - metricsClient: &metricsClient, - metricNamespaceClient: &metricNamespaceClient, - resourceClient: &resourceClient, + metricDefinitionClient: metricsDefinitionClient, + metricsClient: metricsClient, + metricNamespaceClient: metricNamespaceClient, + resourceClient: resourceClient, context: context.Background(), log: logp.NewLogger("azure monitor service"), } + return service, nil } // GetResourceDefinitions will retrieve the azure resources based on the options entered -func (service MonitorService) GetResourceDefinitions(id []string, group []string, rType string, query string) ([]resources.GenericResourceExpanded, error) { +func (service MonitorService) GetResourceDefinitions(id []string, group []string, rType string, query string) ([]*armresources.GenericResourceExpanded, error) { var resourceQuery string - var resourceList []resources.GenericResourceExpanded + var resourceList []*armresources.GenericResourceExpanded + if len(id) > 0 { // listing multiple resourceId conditions does not seem to work with the API, extracting the name and resource type does not work as the position of the `resourceType` can move if a parent resource is involved, filtering by resource name and resource group (if extracted) is also not possible as // different types of resources can contain the same name. for _, id := range id { - resource, err := service.resourceClient.List(service.context, fmt.Sprintf("resourceId eq '%s'", id), "", nil) - if err != nil { - return nil, err - } - if len(resource.Values()) > 0 { - resourceList = append(resourceList, resource.Values()...) + filter := fmt.Sprintf("resourceId eq '%s'", id) + pager := service.resourceClient.NewListPager(&armresources.ClientListOptions{ + Filter: &filter, + }) + + for pager.More() { + nextResult, err := pager.NextPage(service.context) + if err != nil { + return nil, err + } + + if len(nextResult.Value) > 0 { + resourceList = append(resourceList, nextResult.Value...) + } } } + return resourceList, nil } - if len(group) > 0 { + + switch { + case len(group) > 0: var filterList []string + for _, gr := range group { filterList = append(filterList, fmt.Sprintf("resourceGroup eq '%s'", gr)) } + resourceQuery = strings.Join(filterList, " OR ") if rType != "" { resourceQuery = fmt.Sprintf("(%s) AND resourceType eq '%s'", resourceQuery, rType) } - } else if query != "" { + case query != "": resourceQuery = query } - result, err := service.resourceClient.List(service.context, resourceQuery, "", nil) - if err == nil { - resourceList = result.Values() + + var tempResourceList []*armresources.GenericResourceExpanded + + pager := service.resourceClient.NewListPager(&armresources.ClientListOptions{ + Filter: &resourceQuery, + }) + for pager.More() { + nextResult, err := pager.NextPage(service.context) + if err != nil { + return nil, err + } + + tempResourceList = append(tempResourceList, nextResult.Value...) } - return resourceList, err + + resourceList = tempResourceList + + return resourceList, nil } // GetResourceDefinitionById will retrieve the azure resource based on the resource Id -func (service MonitorService) GetResourceDefinitionById(id string) (resources.GenericResource, error) { - return service.resourceClient.GetByID(service.context, id, ApiVersion) +func (service MonitorService) GetResourceDefinitionById(id string) (armresources.GenericResource, error) { + resp, err := service.resourceClient.GetByID(service.context, id, ApiVersion, nil) + if err != nil { + return armresources.GenericResource{}, err + } + + return resp.GenericResource, nil } // GetMetricNamespaces will return all supported namespaces based on the resource id and namespace -func (service *MonitorService) GetMetricNamespaces(resourceId string) (insights.MetricNamespaceCollection, error) { - return service.metricNamespaceClient.List(service.context, resourceId, "") +func (service *MonitorService) GetMetricNamespaces(resourceId string) (armmonitor.MetricNamespaceCollection, error) { + pager := service.metricNamespaceClient.NewListPager(resourceId, nil) + + metricNamespaceCollection := armmonitor.MetricNamespaceCollection{} + + for pager.More() { + nextPage, err := pager.NextPage(service.context) + if err != nil { + return armmonitor.MetricNamespaceCollection{}, err + } + + metricNamespaceCollection.Value = append(metricNamespaceCollection.Value, nextPage.Value...) + } + + return metricNamespaceCollection, nil } // GetMetricDefinitions will return all supported metrics based on the resource id and namespace -func (service *MonitorService) GetMetricDefinitions(resourceId string, namespace string) (insights.MetricDefinitionCollection, error) { - return service.metricDefinitionClient.List(service.context, resourceId, namespace) +func (service *MonitorService) GetMetricDefinitions(resourceId string, namespace string) (armmonitor.MetricDefinitionCollection, error) { + pager := service.metricDefinitionClient.NewListPager(resourceId, &armmonitor.MetricDefinitionsClientListOptions{ + Metricnamespace: &namespace, + }) + + metricDefinitionCollection := armmonitor.MetricDefinitionCollection{} + + for pager.More() { + nextPage, err := pager.NextPage(service.context) + if err != nil { + return armmonitor.MetricDefinitionCollection{}, err + } + + metricDefinitionCollection.Value = append(metricDefinitionCollection.Value, nextPage.Value...) + } + + return metricDefinitionCollection, nil } // GetMetricValues will return the metric values based on the resource and metric details -func (service *MonitorService) GetMetricValues(resourceId string, namespace string, timegrain string, timespan string, metricNames []string, aggregations string, filter string) ([]insights.Metric, string, error) { +func (service *MonitorService) GetMetricValues(resourceId string, namespace string, timegrain string, timespan string, metricNames []string, aggregations string, filter string) ([]armmonitor.Metric, string, error) { var tg *string var interval string + if timegrain != "" { tg = &timegrain } + + // orderBy := "" + resultTypeData := armmonitor.ResultTypeData + // check for limit of requested metrics (20) - var metrics []insights.Metric + var metrics []armmonitor.Metric + + // API fails with bad request if filter value is sent empty. + var metricsFilter *string + + if filter != "" { + metricsFilter = &filter + } + for i := 0; i < len(metricNames); i += metricNameLimit { end := i + metricNameLimit + if end > len(metricNames) { end = len(metricNames) } - resp, err := service.metricsClient.List(service.context, resourceId, timespan, tg, strings.Join(metricNames[i:end], ","), - aggregations, nil, "", filter, insights.Data, namespace) + + metricNames := strings.Join(metricNames[i:end], ",") + + resp, err := service.metricsClient.List(service.context, resourceId, &armmonitor.MetricsClientListOptions{ + Aggregation: &aggregations, + Filter: metricsFilter, + Interval: tg, + Metricnames: &metricNames, + Metricnamespace: &namespace, + Timespan: ×pan, + Top: nil, + // Orderby: &orderBy, + ResultType: &resultTypeData, + }) // check for applied charges before returning any errors if resp.Cost != nil && *resp.Cost != 0 { service.log.Warnf("Charges amounted to %v are being applied while retrieving the metric values from the resource %s ", *resp.Cost, resourceId) } + if err != nil { return metrics, "", err } + interval = *resp.Interval - metrics = append(metrics, *resp.Value...) + for _, v := range resp.Value { + metrics = append(metrics, *v) + } } + return metrics, interval, nil } diff --git a/x-pack/metricbeat/module/azure/service_interface.go b/x-pack/metricbeat/module/azure/service_interface.go index 738484ede33e..39a7da636214 100644 --- a/x-pack/metricbeat/module/azure/service_interface.go +++ b/x-pack/metricbeat/module/azure/service_interface.go @@ -5,15 +5,15 @@ package azure import ( - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" ) // Service interface for the azure monitor service and mock for testing type Service interface { - GetResourceDefinitionById(id string) (resources.GenericResource, error) - GetResourceDefinitions(id []string, group []string, rType string, query string) ([]resources.GenericResourceExpanded, error) - GetMetricDefinitions(resourceId string, namespace string) (insights.MetricDefinitionCollection, error) - GetMetricNamespaces(resourceId string) (insights.MetricNamespaceCollection, error) - GetMetricValues(resourceId string, namespace string, timegrain string, timespan string, metricNames []string, aggregations string, filter string) ([]insights.Metric, string, error) + GetResourceDefinitionById(id string) (armresources.GenericResource, error) + GetResourceDefinitions(id []string, group []string, rType string, query string) ([]*armresources.GenericResourceExpanded, error) + GetMetricDefinitions(resourceId string, namespace string) (armmonitor.MetricDefinitionCollection, error) + GetMetricNamespaces(resourceId string) (armmonitor.MetricNamespaceCollection, error) + GetMetricValues(resourceId string, namespace string, timegrain string, timespan string, metricNames []string, aggregations string, filter string) ([]armmonitor.Metric, string, error) } diff --git a/x-pack/metricbeat/module/azure/storage/client_helper.go b/x-pack/metricbeat/module/azure/storage/client_helper.go index a5b3d333941d..393607be7ae9 100644 --- a/x-pack/metricbeat/module/azure/storage/client_helper.go +++ b/x-pack/metricbeat/module/azure/storage/client_helper.go @@ -7,9 +7,8 @@ package storage import ( "fmt" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" - "github.com/pkg/errors" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/elastic/beats/v7/x-pack/metricbeat/module/azure" ) @@ -18,7 +17,7 @@ const resourceIDExtension = "/default" const serviceTypeNamespaceExtension = "Services" // mapMetrics should validate and map the metric related configuration to relevant azure monitor api parameters -func mapMetrics(client *azure.Client, resources []resources.GenericResourceExpanded, resourceConfig azure.ResourceConfig) ([]azure.Metric, error) { +func mapMetrics(client *azure.Client, resources []*armresources.GenericResourceExpanded, resourceConfig azure.ResourceConfig) ([]azure.Metric, error) { var metrics []azure.Metric // list all storage account namespaces for this metricset namespaces := []string{defaultStorageAccountNamespace} @@ -36,31 +35,40 @@ func mapMetrics(client *azure.Client, resources []resources.GenericResourceExpan for _, namespace := range namespaces { // resourceID will be different for a serviceType namespace, format will be resourceID/service/default var resourceID = *resource.ID + if i := retrieveServiceNamespace(namespace); i != "" { resourceID += i + resourceIDExtension } + // get all metric definitions supported by the namespace provided metricDefinitions, err := client.AzureMonitorService.GetMetricDefinitions(resourceID, namespace) if err != nil { - return nil, errors.Wrapf(err, "no metric definitions were found for resource %s and namespace %s.", resourceID, namespace) + return nil, fmt.Errorf("no metric definitions were found for resource %s and namespace %s %w", resourceID, namespace, err) } - if len(*metricDefinitions.Value) == 0 { - return nil, errors.Errorf("no metric definitions were found for resource %s and namespace %s.", resourceID, namespace) + + if len(metricDefinitions.Value) == 0 { + return nil, fmt.Errorf("no metric definitions were found for resource %s and namespace %s %w", resourceID, namespace, err) } - var filteredMetricDefinitions []insights.MetricDefinition - for _, metricDefinition := range *metricDefinitions.Value { - filteredMetricDefinitions = append(filteredMetricDefinitions, metricDefinition) + + var filteredMetricDefinitions []armmonitor.MetricDefinition + for _, metricDefinition := range metricDefinitions.Value { + filteredMetricDefinitions = append(filteredMetricDefinitions, *metricDefinition) } + // some metrics do not support the default PT5M timegrain so they will have to be grouped in a different API call, else call will fail groupedMetrics := groupOnTimeGrain(filteredMetricDefinitions) + for time, groupedMetricList := range groupedMetrics { // metrics will have to be grouped by allowed dimensions dimMetrics := groupMetricsByAllowedDimensions(groupedMetricList) + for dimension, mets := range dimMetrics { var dimensions []azure.Dimension + if dimension != azure.NoDimension { dimensions = []azure.Dimension{{Name: dimension, Value: "*"}} } + metrics = append(metrics, client.MapMetricByPrimaryAggregation(mets, *resource.ID, resourceID, namespace, dimensions, time)...) } } @@ -70,12 +78,13 @@ func mapMetrics(client *azure.Client, resources []resources.GenericResourceExpan } // groupOnTimeGrain - some metrics do not support the default timegrain value so the closest supported timegrain will be selected -func groupOnTimeGrain(list []insights.MetricDefinition) map[string][]insights.MetricDefinition { - var groupedList = make(map[string][]insights.MetricDefinition) +func groupOnTimeGrain(list []armmonitor.MetricDefinition) map[string][]armmonitor.MetricDefinition { + var groupedList = make(map[string][]armmonitor.MetricDefinition) + for _, metric := range list { - timegrain := retrieveSupportedMetricAvailability(*metric.MetricAvailabilities) + timegrain := retrieveSupportedMetricAvailability(metric.MetricAvailabilities) if _, ok := groupedList[timegrain]; !ok { - groupedList[timegrain] = make([]insights.MetricDefinition, 0) + groupedList[timegrain] = make([]armmonitor.MetricDefinition, 0) } groupedList[timegrain] = append(groupedList[timegrain], metric) } @@ -83,7 +92,7 @@ func groupOnTimeGrain(list []insights.MetricDefinition) map[string][]insights.Me } // retrieveSupportedMetricAvailability func will return the default timegrain if supported, else will return the next timegrain -func retrieveSupportedMetricAvailability(availabilities []insights.MetricAvailability) string { +func retrieveSupportedMetricAvailability(availabilities []*armmonitor.MetricAvailability) string { // common case in metrics supported by storage account - one availability if len(availabilities) == 1 { return *availabilities[0].TimeGrain @@ -112,12 +121,12 @@ func retrieveServiceNamespace(item string) string { } // filterAllowedDimension func will filter out all unallowed dimensions -func filterAllowedDimension(metric insights.MetricDefinition) []string { +func filterAllowedDimension(metric armmonitor.MetricDefinition) []string { if metric.Dimensions == nil { return nil } var dimensions []string - for _, dimension := range *metric.Dimensions { + for _, dimension := range metric.Dimensions { for _, dim := range allowedDimensions { if dim == *dimension.Value { dimensions = append(dimensions, dim) @@ -128,19 +137,19 @@ func filterAllowedDimension(metric insights.MetricDefinition) []string { } // groupMetricsByAllowedDimensions will group metrics by dimension names in order to reduce the number of api calls -func groupMetricsByAllowedDimensions(metrics []insights.MetricDefinition) map[string][]insights.MetricDefinition { - var groupedMetrics = make(map[string][]insights.MetricDefinition) +func groupMetricsByAllowedDimensions(metrics []armmonitor.MetricDefinition) map[string][]armmonitor.MetricDefinition { + var groupedMetrics = make(map[string][]armmonitor.MetricDefinition) for _, metric := range metrics { if dimensions := filterAllowedDimension(metric); len(dimensions) > 0 { for _, dimension := range dimensions { if _, ok := groupedMetrics[dimension]; !ok { - groupedMetrics[dimension] = make([]insights.MetricDefinition, 0) + groupedMetrics[dimension] = make([]armmonitor.MetricDefinition, 0) } groupedMetrics[dimension] = append(groupedMetrics[dimension], metric) } } else { if _, ok := groupedMetrics[azure.NoDimension]; !ok { - groupedMetrics[azure.NoDimension] = make([]insights.MetricDefinition, 0) + groupedMetrics[azure.NoDimension] = make([]armmonitor.MetricDefinition, 0) } groupedMetrics[azure.NoDimension] = append(groupedMetrics[azure.NoDimension], metric) } diff --git a/x-pack/metricbeat/module/azure/storage/client_helper_test.go b/x-pack/metricbeat/module/azure/storage/client_helper_test.go index f136f867b378..ecdf4941ac90 100644 --- a/x-pack/metricbeat/module/azure/storage/client_helper_test.go +++ b/x-pack/metricbeat/module/azure/storage/client_helper_test.go @@ -8,8 +8,8 @@ import ( "reflect" "testing" - "github.com/Azure/azure-sdk-for-go/services/preview/monitor/mgmt/2019-06-01/insights" - "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2019-10-01/resources" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor" + "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/mock" @@ -20,25 +20,25 @@ var ( time1 = "PT1M" time2 = "PT5M" time3 = "PT1H" - availability1 = []insights.MetricAvailability{ + availability1 = []*armmonitor.MetricAvailability{ {TimeGrain: &time1}, {TimeGrain: &time2}, } - availability2 = []insights.MetricAvailability{ + availability2 = []*armmonitor.MetricAvailability{ {TimeGrain: &time3}, } - availability3 = []insights.MetricAvailability{ + availability3 = []*armmonitor.MetricAvailability{ {TimeGrain: &time1}, {TimeGrain: &time3}, } ) -func MockResource() resources.GenericResourceExpanded { +func MockResource() *armresources.GenericResourceExpanded { id := "123" name := "resourceName" location := "resourceLocation" rType := "resourceType" - return resources.GenericResourceExpanded{ + return &armresources.GenericResourceExpanded{ ID: &id, Name: &name, Location: &location, @@ -46,50 +46,74 @@ func MockResource() resources.GenericResourceExpanded { } } -func MockNamespace() insights.MetricNamespaceCollection { +func MockNamespace() armmonitor.MetricNamespaceCollection { name := "namespace" - property := insights.MetricNamespaceName{ + property := armmonitor.MetricNamespaceName{ MetricNamespaceName: &name, } - namespace := insights.MetricNamespace{ + namespace := &armmonitor.MetricNamespace{ Name: &name, Properties: &property, } - list := []insights.MetricNamespace{namespace} - return insights.MetricNamespaceCollection{ - Value: &list, + + list := []*armmonitor.MetricNamespace{namespace} + + return armmonitor.MetricNamespaceCollection{ + Value: list, } } -func MockMetricDefinitions() *[]insights.MetricDefinition { - metric1 := "TotalRequests" - metric2 := "Capacity" - defs := []insights.MetricDefinition{ +func MockMetricDefinitions() []*armmonitor.MetricDefinition { + var ( + metric1 = "TotalRequests" + metric2 = "Capacity" + + aggregationTypeAverage = armmonitor.AggregationTypeAverage + aggregationTypeCount = armmonitor.AggregationTypeCount + aggregationTypeMinimum = armmonitor.AggregationTypeMinimum + aggregationTypeMaximum = armmonitor.AggregationTypeMaximum + aggregationTypeTotal = armmonitor.AggregationTypeTotal + ) + + defs := []*armmonitor.MetricDefinition{ { - Name: &insights.LocalizableString{Value: &metric1}, - PrimaryAggregationType: insights.Average, - MetricAvailabilities: &availability1, - SupportedAggregationTypes: &[]insights.AggregationType{insights.Maximum, insights.Count, insights.Total, insights.Average}, + Name: &armmonitor.LocalizableString{Value: &metric1}, + PrimaryAggregationType: &aggregationTypeAverage, + MetricAvailabilities: availability1, + SupportedAggregationTypes: []*armmonitor.AggregationType{ + &aggregationTypeMaximum, + &aggregationTypeCount, + &aggregationTypeTotal, + &aggregationTypeAverage, + }, }, { - Name: &insights.LocalizableString{Value: &metric2}, - PrimaryAggregationType: insights.Average, - MetricAvailabilities: &availability2, - SupportedAggregationTypes: &[]insights.AggregationType{insights.Average, insights.Count, insights.Minimum}, + Name: &armmonitor.LocalizableString{Value: &metric2}, + PrimaryAggregationType: &aggregationTypeAverage, + MetricAvailabilities: availability2, + SupportedAggregationTypes: []*armmonitor.AggregationType{ + &aggregationTypeAverage, + &aggregationTypeCount, + &aggregationTypeMinimum, + }, }, } - return &defs + + return defs } func TestMapMetric(t *testing.T) { resource := MockResource() - metricDefinitions := insights.MetricDefinitionCollection{ + metricDefinitions := armmonitor.MetricDefinitionCollection{ Value: MockMetricDefinitions(), } - emptyList := []insights.MetricDefinition{} - emptyMetricDefinitions := insights.MetricDefinitionCollection{ - Value: &emptyList, + + emptyList := []*armmonitor.MetricDefinition{} + + emptyMetricDefinitions := armmonitor.MetricDefinitionCollection{ + Value: emptyList, } + metricConfig := azure.MetricConfig{Name: []string{"*"}} resourceConfig := azure.ResourceConfig{Metrics: []azure.MetricConfig{metricConfig}, ServiceType: []string{"blob"}} client := azure.NewMockClient() @@ -97,9 +121,9 @@ func TestMapMetric(t *testing.T) { m := &azure.MockService{} m.On("GetMetricDefinitions", mock.Anything, mock.Anything).Return(emptyMetricDefinitions, nil) client.AzureMonitorService = m - metric, err := mapMetrics(client, []resources.GenericResourceExpanded{resource}, resourceConfig) + metric, err := mapMetrics(client, []*armresources.GenericResourceExpanded{resource}, resourceConfig) assert.Error(t, err) - assert.Equal(t, err.Error(), "no metric definitions were found for resource 123 and namespace Microsoft.Storage/storageAccounts.") + assert.Equal(t, err.Error(), "no metric definitions were found for resource 123 and namespace Microsoft.Storage/storageAccounts %!w()") assert.Equal(t, metric, []azure.Metric(nil)) m.AssertExpectations(t) }) @@ -107,7 +131,7 @@ func TestMapMetric(t *testing.T) { m := &azure.MockService{} m.On("GetMetricDefinitions", mock.Anything, mock.Anything).Return(metricDefinitions, nil) client.AzureMonitorService = m - metrics, err := mapMetrics(client, []resources.GenericResourceExpanded{resource}, resourceConfig) + metrics, err := mapMetrics(client, []*armresources.GenericResourceExpanded{resource}, resourceConfig) assert.NoError(t, err) assert.Equal(t, metrics[0].ResourceId, "123") assert.Equal(t, metrics[0].Namespace, "Microsoft.Storage/storageAccounts") @@ -133,20 +157,20 @@ func TestMapMetric(t *testing.T) { } func TestFilterOnTimeGrain(t *testing.T) { - var list = []insights.MetricDefinition{ - {MetricAvailabilities: &availability1}, - {MetricAvailabilities: &availability2}, - {MetricAvailabilities: &availability3}, + var list = []armmonitor.MetricDefinition{ + {MetricAvailabilities: availability1}, + {MetricAvailabilities: availability2}, + {MetricAvailabilities: availability3}, } response := groupOnTimeGrain(list) assert.Equal(t, len(response), 2) - result := [][]insights.MetricDefinition{ + result := [][]armmonitor.MetricDefinition{ { - {MetricAvailabilities: &availability1}, + {MetricAvailabilities: availability1}, }, { - {MetricAvailabilities: &availability2}, - {MetricAvailabilities: &availability3}, + {MetricAvailabilities: availability2}, + {MetricAvailabilities: availability3}, }, } for key, availabilities := range response { diff --git a/x-pack/metricbeat/module/azure/storage/storage_test.go b/x-pack/metricbeat/module/azure/storage/storage_test.go index 6203a4040732..2e2e991664bd 100644 --- a/x-pack/metricbeat/module/azure/storage/storage_test.go +++ b/x-pack/metricbeat/module/azure/storage/storage_test.go @@ -24,7 +24,7 @@ var ( "client_secret": "unique identifier", "client_id": "unique identifier", "subscription_id": "unique identifier", - "tenant_id": "unique identifier", + "tenant_id": "07482715-b847-4056-86e6-5eec1c7b5996", } resourceConfig = mapstr.M{ @@ -34,7 +34,7 @@ var ( "client_secret": "unique identifier", "client_id": "unique identifier", "subscription_id": "unique identifier", - "tenant_id": "unique identifier", + "tenant_id": "07482715-b847-4056-86e6-5eec1c7b5996", "resources": []mapstr.M{ { "resource_id": "test", @@ -56,6 +56,7 @@ func TestFetch(t *testing.T) { assert.NotNil(t, metricsets) assert.NoError(t, err) ms, ok := metricsets[0].(*MetricSet) + assert.True(t, ok) assert.Equal(t, len(ms.Client.Config.Resources), 1) assert.Equal(t, ms.Client.Config.Resources[0].Query, fmt.Sprintf("resourceType eq '%s'", defaultStorageAccountNamespace)) @@ -64,6 +65,7 @@ func TestFetch(t *testing.T) { t.Fatal(err) } module, metricsets, err = mb.NewModule(c, mb.Registry) + assert.NoError(t, err) assert.NotNil(t, module) assert.NotNil(t, metricsets) ms, ok = metricsets[0].(*MetricSet) From c64f433f995106aabc28292eaee1590e3c53989e Mon Sep 17 00:00:00 2001 From: Fae Charlton Date: Fri, 2 Jun 2023 10:25:21 -0400 Subject: [PATCH 06/52] Bump elastic-agent-client to v7.1.2 (#35638) --- NOTICE.txt | 4 ++-- go.mod | 2 +- go.sum | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/NOTICE.txt b/NOTICE.txt index 7cb819b914b8..77f3a71a60ab 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -12338,11 +12338,11 @@ Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-agent-a -------------------------------------------------------------------------------- Dependency : github.com/elastic/elastic-agent-client/v7 -Version: v7.1.1 +Version: v7.1.2 Licence type (autodetected): Elastic -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-agent-client/v7@v7.1.1/LICENSE.txt: +Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-agent-client/v7@v7.1.2/LICENSE.txt: ELASTIC LICENSE AGREEMENT diff --git a/go.mod b/go.mod index 3a783635904b..2298cd0b0457 100644 --- a/go.mod +++ b/go.mod @@ -69,7 +69,7 @@ require ( github.com/dustin/go-humanize v1.0.0 github.com/eapache/go-resiliency v1.2.0 github.com/eclipse/paho.mqtt.golang v1.3.5 - github.com/elastic/elastic-agent-client/v7 v7.1.1 + github.com/elastic/elastic-agent-client/v7 v7.1.2 github.com/elastic/go-concert v0.2.0 github.com/elastic/go-libaudit/v2 v2.3.2 github.com/elastic/go-licenser v0.4.1 diff --git a/go.sum b/go.sum index 392fee97012a..f48536f9c9df 100644 --- a/go.sum +++ b/go.sum @@ -516,8 +516,8 @@ github.com/elastic/dhcp v0.0.0-20200227161230-57ec251c7eb3 h1:lnDkqiRFKm0rxdljqr github.com/elastic/dhcp v0.0.0-20200227161230-57ec251c7eb3/go.mod h1:aPqzac6AYkipvp4hufTyMj5PDIphF3+At8zr7r51xjY= github.com/elastic/elastic-agent-autodiscover v0.6.1 h1:vXR+3QVDL7Ij7IMKul13iIiDmM66HsX6MS6I0T4O8gw= github.com/elastic/elastic-agent-autodiscover v0.6.1/go.mod h1:yXYKFAG+Py+TcE4CCR8EAbJiYb+6Dz9sCDoWgOveqtU= -github.com/elastic/elastic-agent-client/v7 v7.1.1 h1:Mob9Nme43P2FGyTQqLWQOWB1d5b54quXc7FPTPyzIic= -github.com/elastic/elastic-agent-client/v7 v7.1.1/go.mod h1:zz0T6l1XcG3kLyDrW8hY8bpI9fES9qkXI3vanY9e0d8= +github.com/elastic/elastic-agent-client/v7 v7.1.2 h1:p6KvvDMoFCBPvchxcx9cRXpRjsDaii0m/wE3lqQxpmM= +github.com/elastic/elastic-agent-client/v7 v7.1.2/go.mod h1:G3Mk1pHXxvj3wC5FvsGUlPOsvapTB5SfrUmWiJDXT6Q= github.com/elastic/elastic-agent-libs v0.3.8 h1:kj8yNIu/dYrAfxXZKTmCsEgP6agAvmCra22TKTGsU+M= github.com/elastic/elastic-agent-libs v0.3.8/go.mod h1:h48hzjQcn6XPwfWRM5HimAKlsG0J92ULgAzdX+WedA8= github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3 h1:sb+25XJn/JcC9/VL8HX4r4QXSUq4uTNzGS2kxOE7u1U= From e35a094c0cf432732391a536d079f2b763771dfc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Jun 2023 11:14:32 -0400 Subject: [PATCH 07/52] Bump github.com/elastic/go-sysinfo from 1.10.2 to 1.11.0 (#35652) Bumps [github.com/elastic/go-sysinfo](https://github.com/elastic/go-sysinfo) from 1.10.2 to 1.11.0. - [Release notes](https://github.com/elastic/go-sysinfo/releases) - [Commits](https://github.com/elastic/go-sysinfo/compare/v1.10.2...v1.11.0) --- updated-dependencies: - dependency-name: github.com/elastic/go-sysinfo dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] --- NOTICE.txt | 4 ++-- go.mod | 2 +- go.sum | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/NOTICE.txt b/NOTICE.txt index 77f3a71a60ab..8271fce1601c 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -14825,11 +14825,11 @@ Contents of probable licence file $GOMODCACHE/github.com/elastic/go-structform@v -------------------------------------------------------------------------------- Dependency : github.com/elastic/go-sysinfo -Version: v1.10.2 +Version: v1.11.0 Licence type (autodetected): Apache-2.0 -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/go-sysinfo@v1.10.2/LICENSE.txt: +Contents of probable licence file $GOMODCACHE/github.com/elastic/go-sysinfo@v1.11.0/LICENSE.txt: Apache License diff --git a/go.mod b/go.mod index 2298cd0b0457..efd4084c8d8a 100644 --- a/go.mod +++ b/go.mod @@ -78,7 +78,7 @@ require ( github.com/elastic/go-perf v0.0.0-20191212140718-9c656876f595 github.com/elastic/go-seccomp-bpf v1.3.0 github.com/elastic/go-structform v0.0.10 - github.com/elastic/go-sysinfo v1.10.2 + github.com/elastic/go-sysinfo v1.11.0 github.com/elastic/go-ucfg v0.8.6 github.com/elastic/gosigar v0.14.2 github.com/fatih/color v1.13.0 diff --git a/go.sum b/go.sum index f48536f9c9df..b56e110efcff 100644 --- a/go.sum +++ b/go.sum @@ -552,8 +552,8 @@ github.com/elastic/go-seccomp-bpf v1.3.0/go.mod h1:wIMxjTbKpWGQk4CV9WltlG6haB4br github.com/elastic/go-structform v0.0.10 h1:oy08o/Ih2hHTkNcRY/1HhaYvIp5z6t8si8gnCJPDo1w= github.com/elastic/go-structform v0.0.10/go.mod h1:CZWf9aIRYY5SuKSmOhtXScE5uQiLZNqAFnwKR4OrIM4= github.com/elastic/go-sysinfo v1.7.1/go.mod h1:i1ZYdU10oLNfRzq4vq62BEwD2fH8KaWh6eh0ikPT9F0= -github.com/elastic/go-sysinfo v1.10.2 h1:DK4pBq7AHwUY+3gcBykvFmWJQWEtv01Jes3v7ss1RVI= -github.com/elastic/go-sysinfo v1.10.2/go.mod h1:6KQb31j0QeWBDF88jIdWSxE8cwoOB9tO4Y4osN7Q70E= +github.com/elastic/go-sysinfo v1.11.0 h1:QW+6BF1oxBoAprH3w2yephF7xLkrrSXj7gl2xC2BM4w= +github.com/elastic/go-sysinfo v1.11.0/go.mod h1:6KQb31j0QeWBDF88jIdWSxE8cwoOB9tO4Y4osN7Q70E= github.com/elastic/go-ucfg v0.8.6 h1:stUeyh2goTgGX+/wb9gzKvTv0YB0231LTpKUgCKj4U0= github.com/elastic/go-ucfg v0.8.6/go.mod h1:4E8mPOLSUV9hQ7sgLEJ4bvt0KhMuDJa8joDT2QGAEKA= github.com/elastic/go-windows v1.0.0/go.mod h1:TsU0Nrp7/y3+VwE82FoZF8gC/XFg/Elz6CcloAxnPgU= From 1dcc62aeee614fffc788cab721602f71bc34b8a7 Mon Sep 17 00:00:00 2001 From: kaiyan-sheng Date: Fri, 2 Jun 2023 15:19:02 -0600 Subject: [PATCH 08/52] [AWS] Add include_linked_accounts config parameter for ListMetrics API (#35648) --- CHANGELOG.next.asciidoc | 1 + metricbeat/docs/modules/aws.asciidoc | 15 +++- x-pack/metricbeat/metricbeat.reference.yml | 6 ++ .../module/aws/_meta/config.reference.yml | 6 ++ x-pack/metricbeat/module/aws/_meta/config.yml | 1 + .../metricbeat/module/aws/_meta/docs.asciidoc | 9 +- x-pack/metricbeat/module/aws/aws.go | 85 ++++++++++++++----- .../metricbeat/module/aws/billing/billing.go | 31 +++---- .../aws/billing/billing_integration_test.go | 1 + .../module/aws/cloudwatch/cloudwatch.go | 77 ++++++++--------- .../module/aws/cloudwatch/cloudwatch_test.go | 10 +-- x-pack/metricbeat/module/aws/utils.go | 12 ++- x-pack/metricbeat/module/aws/utils_test.go | 9 +- x-pack/metricbeat/modules.d/aws.yml.disabled | 1 + 14 files changed, 166 insertions(+), 98 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 40bf0d6af6f8..58e0f2652536 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -325,6 +325,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Add GCP Carbon Footprint metricbeat data {pull}34820[34820] - Add event loop utilization metric to Kibana module {pull}35020[35020] - Support collecting metrics from both the monitoring account and linked accounts from AWS CloudWatch. {pull}35540[35540] +- Add new parameter `include_linked_accounts` to enable/disable metrics collection from multiple linked AWS Accounts {pull}35648[35648] - Migrate Azure Billing, Monitor, and Storage metricsets to the newer SDK. {pull}33585[33585] *Osquerybeat* diff --git a/metricbeat/docs/modules/aws.asciidoc b/metricbeat/docs/modules/aws.asciidoc index 9b8c4e5ac686..d67dfb41eee2 100644 --- a/metricbeat/docs/modules/aws.asciidoc +++ b/metricbeat/docs/modules/aws.asciidoc @@ -73,7 +73,14 @@ services do not include a region. In `aws` module, `endpoint` config is to set the `endpoint-code` part, such as `amazonaws.com`, `amazonaws.com.cn`, `c2s.ic.gov`, `sc2s.sgov.gov`. -If endpoint is specified, `regions` config becomes required. For example: +If endpoint is specified, `regions` config becomes required. + +* *include_linked_accounts* + +The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html[Cross-Account Cross-Region feature in Amazon CloudWatch]. +By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring account are collected. When set to true, the parameter allows the CloudWatch service to access and retrieve metrics from the linked accounts, providing a comprehensive view of metrics across multiple accounts. + +*_Note_:* Enabling the include_linked_accounts parameter requires appropriate permissions and authentication credentials for the linked accounts. Users should ensure that the necessary IAM roles and policies are properly set up to establish the necessary trust and access between accounts. * *tags_filter* @@ -413,6 +420,12 @@ metricbeat.modules: - transitgateway - usage - vpn +- module: aws + period: 1m + latency: 5m + include_linked_accounts: false + metricsets: + - s3_request ---- [float] diff --git a/x-pack/metricbeat/metricbeat.reference.yml b/x-pack/metricbeat/metricbeat.reference.yml index 3a275347ff00..dfd6edc07260 100644 --- a/x-pack/metricbeat/metricbeat.reference.yml +++ b/x-pack/metricbeat/metricbeat.reference.yml @@ -237,6 +237,12 @@ metricbeat.modules: - transitgateway - usage - vpn +- module: aws + period: 1m + latency: 5m + include_linked_accounts: false + metricsets: + - s3_request #----------------------------- AWS Fargate Module ----------------------------- - module: awsfargate diff --git a/x-pack/metricbeat/module/aws/_meta/config.reference.yml b/x-pack/metricbeat/module/aws/_meta/config.reference.yml index de3f9f1ed347..12866939b98b 100644 --- a/x-pack/metricbeat/module/aws/_meta/config.reference.yml +++ b/x-pack/metricbeat/module/aws/_meta/config.reference.yml @@ -51,3 +51,9 @@ - transitgateway - usage - vpn +- module: aws + period: 1m + latency: 5m + include_linked_accounts: false + metricsets: + - s3_request diff --git a/x-pack/metricbeat/module/aws/_meta/config.yml b/x-pack/metricbeat/module/aws/_meta/config.yml index 68293513b027..6adf3af2fcd5 100644 --- a/x-pack/metricbeat/module/aws/_meta/config.yml +++ b/x-pack/metricbeat/module/aws/_meta/config.yml @@ -49,5 +49,6 @@ - module: aws period: 1m latency: 5m + include_linked_accounts: false metricsets: - s3_request diff --git a/x-pack/metricbeat/module/aws/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/_meta/docs.asciidoc index c19e80d5db3f..c55570b3d356 100644 --- a/x-pack/metricbeat/module/aws/_meta/docs.asciidoc +++ b/x-pack/metricbeat/module/aws/_meta/docs.asciidoc @@ -61,7 +61,14 @@ services do not include a region. In `aws` module, `endpoint` config is to set the `endpoint-code` part, such as `amazonaws.com`, `amazonaws.com.cn`, `c2s.ic.gov`, `sc2s.sgov.gov`. -If endpoint is specified, `regions` config becomes required. For example: +If endpoint is specified, `regions` config becomes required. + +* *include_linked_accounts* + +The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html[Cross-Account Cross-Region feature in Amazon CloudWatch]. +By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring account are collected. When set to true, the parameter allows the CloudWatch service to access and retrieve metrics from the linked accounts, providing a comprehensive view of metrics across multiple accounts. + +*_Note_:* Enabling the include_linked_accounts parameter requires appropriate permissions and authentication credentials for the linked accounts. Users should ensure that the necessary IAM roles and policies are properly set up to establish the necessary trust and access between accounts. * *tags_filter* diff --git a/x-pack/metricbeat/module/aws/aws.go b/x-pack/metricbeat/module/aws/aws.go index 70934dd0f407..76f0b9d83d84 100644 --- a/x-pack/metricbeat/module/aws/aws.go +++ b/x-pack/metricbeat/module/aws/aws.go @@ -29,26 +29,28 @@ type describeRegionsClient interface { // Config defines all required and optional parameters for aws metricsets type Config struct { - Period time.Duration `config:"period" validate:"nonzero,required"` - DataGranularity time.Duration `config:"data_granularity"` - Regions []string `config:"regions"` - Latency time.Duration `config:"latency"` - AWSConfig awscommon.ConfigAWS `config:",inline"` - TagsFilter []Tag `config:"tags_filter"` + Period time.Duration `config:"period" validate:"nonzero,required"` + DataGranularity time.Duration `config:"data_granularity"` + Regions []string `config:"regions"` + Latency time.Duration `config:"latency"` + AWSConfig awscommon.ConfigAWS `config:",inline"` + TagsFilter []Tag `config:"tags_filter"` + IncludeLinkedAccounts *bool `config:"include_linked_accounts"` } // MetricSet is the base metricset for all aws metricsets type MetricSet struct { mb.BaseMetricSet - RegionsList []string - Endpoint string - Period time.Duration - DataGranularity time.Duration - Latency time.Duration - AwsConfig *awssdk.Config - AccountName string - AccountID string - TagsFilter []Tag + RegionsList []string + Endpoint string + Period time.Duration + DataGranularity time.Duration + Latency time.Duration + AwsConfig *awssdk.Config + MonitoringAccountName string + MonitoringAccountID string + TagsFilter []Tag + IncludeLinkedAccounts bool } // Tag holds a configuration specific for ec2 and cloudwatch metricset. @@ -60,6 +62,39 @@ type Tag struct { // ModuleName is the name of this module. const ModuleName = "aws" +// IncludeLinkedAccountsDefault defines if we should include metrics from linked AWS accounts or not. Default is false. +// More information about cross-account Cloudwatch monitoring can be found at +// https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html +const IncludeLinkedAccountsDefault = false + +type LabelConstants struct { + AccountIdIdx int + AccountLabelIdx int + MetricNameIdx int + NamespaceIdx int + StatisticIdx int + IdentifierNameIdx int + IdentifierValueIdx int + LabelLengthTotal int + LabelSeparator string + AccountLabel string + BillingDimensionStartIdx int +} + +var LabelConst = LabelConstants{ + AccountIdIdx: 0, + AccountLabelIdx: 1, + MetricNameIdx: 2, + NamespaceIdx: 3, + StatisticIdx: 4, + IdentifierNameIdx: 5, + IdentifierValueIdx: 6, + LabelLengthTotal: 7, + LabelSeparator: "|", + AccountLabel: "${PROP('AccountLabel')}", + BillingDimensionStartIdx: 3, +} + func init() { if err := mb.Registry.AddModule(ModuleName, newModule); err != nil { panic(err) @@ -112,10 +147,16 @@ func NewMetricSet(base mb.BaseMetricSet) (*MetricSet, error) { Endpoint: config.AWSConfig.Endpoint, } + metricSet.IncludeLinkedAccounts = IncludeLinkedAccountsDefault + if config.IncludeLinkedAccounts != nil { + metricSet.IncludeLinkedAccounts = *config.IncludeLinkedAccounts + } + base.Logger().Debug("Metricset level config for period: ", metricSet.Period) base.Logger().Debug("Metricset level config for data granularity: ", metricSet.DataGranularity) base.Logger().Debug("Metricset level config for tags filter: ", metricSet.TagsFilter) base.Logger().Warn("extra charges on AWS API requests will be generated by this metricset") + base.Logger().Debug("Metricset level config for including linked accounts: ", metricSet.IncludeLinkedAccounts) // If regions in config is not empty, then overwrite the awsConfig.Region if len(config.Regions) > 0 { @@ -134,8 +175,8 @@ func NewMetricSet(base mb.BaseMetricSet) (*MetricSet, error) { if err != nil { base.Logger().Warn("failed to get caller identity, please check permission setting: ", err) } else { - metricSet.AccountID = *outputIdentity.Account - base.Logger().Debug("AWS Credentials belong to account ID: ", metricSet.AccountID) + metricSet.MonitoringAccountID = *outputIdentity.Account + base.Logger().Debug("AWS Credentials belong to monitoring account ID: ", metricSet.MonitoringAccountID) } // Get account name/alias svcIam := iam.NewFromConfig(awsConfig, func(o *iam.Options) { @@ -144,7 +185,7 @@ func NewMetricSet(base mb.BaseMetricSet) (*MetricSet, error) { } }) - metricSet.AccountName = getAccountName(svcIam, base, metricSet) + metricSet.MonitoringAccountName = getAccountName(svcIam, base, metricSet) // Construct MetricSet with a full regions list if config.Regions == nil { @@ -188,7 +229,7 @@ func getAccountName(svc *iam.Client, base mb.BaseMetricSet, metricSet MetricSet) defer cancel() output, err := svc.ListAccountAliases(ctx, &iam.ListAccountAliasesInput{}) - accountName := metricSet.AccountID + accountName := metricSet.MonitoringAccountID if err != nil { base.Logger().Warn("failed to list account aliases, please check permission setting: ", err) return accountName @@ -196,15 +237,15 @@ func getAccountName(svc *iam.Client, base mb.BaseMetricSet, metricSet MetricSet) // When there is no account alias, account ID will be used as cloud.account.name if len(output.AccountAliases) == 0 { - accountName = metricSet.AccountID - base.Logger().Debug("AWS Credentials belong to account ID: ", metricSet.AccountID) + accountName = metricSet.MonitoringAccountID + base.Logger().Debug("AWS Credentials belong to account ID: ", metricSet.MonitoringAccountID) return accountName } // There can be more than one aliases for each account, for now we are only // collecting the first one. accountName = output.AccountAliases[0] - base.Logger().Debug("AWS Credentials belong to account name: ", metricSet.AccountName) + base.Logger().Debug("AWS Credentials belong to account name: ", metricSet.MonitoringAccountName) return accountName } diff --git a/x-pack/metricbeat/module/aws/billing/billing.go b/x-pack/metricbeat/module/aws/billing/billing.go index c5d3d368dc63..75b500839ef5 100644 --- a/x-pack/metricbeat/module/aws/billing/billing.go +++ b/x-pack/metricbeat/module/aws/billing/billing.go @@ -28,9 +28,8 @@ import ( ) var ( - metricsetName = "billing" - regionName = "us-east-1" - labelSeparator = "|" + metricsetName = "billing" + regionName = "us-east-1" // This list is from https://github.com/aws/aws-sdk-go-v2/blob/master/service/costexplorer/api_enums.go#L60-L90 supportedDimensionKeys = []string{ @@ -42,11 +41,7 @@ var ( "RESERVATION_ID", } - dateLayout = "2006-01-02" - accountIdIdx = 0 - accountLabelIdx = 1 - metricDataValueIdx = 2 - dimensionStartIdx = 3 + dateLayout = "2006-01-02" ) // init registers the MetricSet with the central registry as soon as the program @@ -175,7 +170,7 @@ func (m *MetricSet) getCloudWatchBillingMetrics( endTime time.Time) []mb.Event { var events []mb.Event namespace := "AWS/Billing" - listMetricsOutput, err := aws.GetListMetricsOutput(namespace, regionName, m.Period, svcCloudwatch) + listMetricsOutput, err := aws.GetListMetricsOutput(namespace, regionName, m.Period, m.IncludeLinkedAccounts, m.MonitoringAccountID, svcCloudwatch) if err != nil { m.Logger().Error(err.Error()) return nil @@ -198,17 +193,17 @@ func (m *MetricSet) getCloudWatchBillingMetrics( continue } for valI, metricDataResultValue := range output.Values { - labels := strings.Split(*output.Label, labelSeparator) + labels := strings.Split(*output.Label, aws.LabelConst.LabelSeparator) event := mb.Event{} - if labels[accountIdIdx] != "" { - event = aws.InitEvent("", labels[accountLabelIdx], labels[accountIdIdx], output.Timestamps[valI]) + if labels[aws.LabelConst.AccountIdIdx] != "" { + event = aws.InitEvent("", labels[aws.LabelConst.AccountLabelIdx], labels[aws.LabelConst.AccountIdIdx], output.Timestamps[valI]) } else { - event = aws.InitEvent("", m.AccountName, m.AccountID, output.Timestamps[valI]) + event = aws.InitEvent("", m.MonitoringAccountName, m.MonitoringAccountID, output.Timestamps[valI]) } - _, _ = event.MetricSetFields.Put(labels[metricDataValueIdx], metricDataResultValue) + _, _ = event.MetricSetFields.Put(labels[aws.LabelConst.MetricNameIdx], metricDataResultValue) - i := dimensionStartIdx + i := aws.LabelConst.BillingDimensionStartIdx for i < len(labels)-1 { _, _ = event.MetricSetFields.Put(labels[i], labels[i+1]) i += 2 @@ -318,7 +313,7 @@ func (m *MetricSet) getCostGroupBy(svcCostExplorer *costexplorer.Client, groupBy } func (m *MetricSet) addCostMetrics(metrics map[string]costexplorertypes.MetricValue, groupDefinition costexplorertypes.GroupDefinition, startDate string, endDate string) mb.Event { - event := aws.InitEvent("", m.AccountName, m.AccountID, time.Now()) + event := aws.InitEvent("", m.MonitoringAccountName, m.MonitoringAccountID, time.Now()) // add group definition _, _ = event.MetricSetFields.Put("group_definition", mapstr.M{ @@ -367,9 +362,9 @@ func createMetricDataQuery(metric aws.MetricWithID, index int, dataGranularity t metricDims := metric.Metric.Dimensions metricName := *metric.Metric.MetricName - label := metric.AccountID + labelSeparator + "${PROP('AccountLabel')}" + labelSeparator + metricName + labelSeparator + label := strings.Join([]string{metric.AccountID, aws.LabelConst.AccountLabel, metricName}, aws.LabelConst.LabelSeparator) for _, dim := range metricDims { - label += *dim.Name + labelSeparator + *dim.Value + labelSeparator + label += aws.LabelConst.LabelSeparator + *dim.Name + aws.LabelConst.LabelSeparator + *dim.Value } metricDataQuery := types.MetricDataQuery{ diff --git a/x-pack/metricbeat/module/aws/billing/billing_integration_test.go b/x-pack/metricbeat/module/aws/billing/billing_integration_test.go index d01c6378a88e..6da4437f788f 100644 --- a/x-pack/metricbeat/module/aws/billing/billing_integration_test.go +++ b/x-pack/metricbeat/module/aws/billing/billing_integration_test.go @@ -24,6 +24,7 @@ func TestFetch(t *testing.T) { metricSet := mbtest.NewReportingMetricSetV2Error(t, config) events, errs := mbtest.ReportingFetchV2Error(metricSet) + fmt.Println("events = ", events) if len(errs) > 0 { t.Fatalf("Expected 0 error, had %d. %v\n", len(errs), errs) } diff --git a/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch.go b/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch.go index b0bf1dd229f5..e25ea2d37434 100644 --- a/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch.go +++ b/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch.go @@ -25,18 +25,9 @@ import ( var ( metricsetName = "cloudwatch" - accountIdIdx = 0 - accountLabelIdx = 1 - metricNameIdx = 2 - namespaceIdx = 3 - statisticIdx = 4 - identifierNameIdx = 5 - identifierValueIdx = 6 defaultStatistics = []string{"Average", "Maximum", "Minimum", "Sum", "SampleCount"} - labelSeparator = "|" dimensionSeparator = "," dimensionValueWildcard = "*" - labelLengthTotal = 7 ) // init registers the MetricSet with the central registry as soon as the program @@ -51,7 +42,7 @@ func init() { // MetricSet holds any configuration or state information. It must implement // the mb.MetricSet interface. And this is best achieved by embedding -// mb.BaseMetricSet because it implements all of the required mb.MetricSet +// mb.BaseMetricSet because it implements all the required mb.MetricSet // interface methods except for Fetch. type MetricSet struct { *aws.MetricSet @@ -186,7 +177,7 @@ func (m *MetricSet) Fetch(report mb.ReporterV2) error { } // retrieve all the details for all the metrics available in the current region - listMetricsOutput, err := aws.GetListMetricsOutput("*", regionName, m.Period, svcCloudwatch) + listMetricsOutput, err := aws.GetListMetricsOutput("*", regionName, m.Period, m.IncludeLinkedAccounts, m.MonitoringAccountID, svcCloudwatch) if err != nil { m.Logger().Errorf("Error while retrieving the list of metrics for region %s: %w", regionName, err) } @@ -327,17 +318,17 @@ func (m *MetricSet) readCloudwatchConfig() (listMetricWithDetail, map[string][]n !configDimensionValueContainsWildcard(config.Dimensions) { namespace := config.Namespace for i := range config.MetricName { - cwMetric := aws.MetricWithID{ - Metric: types.Metric{ - Namespace: &namespace, - MetricName: &config.MetricName[i], - Dimensions: cloudwatchDimensions, - }, + metric := types.Metric{ + Namespace: &namespace, + MetricName: &config.MetricName[i], + Dimensions: cloudwatchDimensions, } metricsWithStats := metricsWithStatistics{ - cloudwatchMetric: cwMetric, - statistic: config.Statistic, + cloudwatchMetric: aws.MetricWithID{ + Metric: metric, + }, + statistic: config.Statistic, } metricsWithStatsTotal = append(metricsWithStatsTotal, metricsWithStats) @@ -396,7 +387,7 @@ func createMetricDataQueries(listMetricsTotal []metricsWithStatistics, dataGranu func constructLabel(metric aws.MetricWithID, statistic string) string { // label = accountID + accountLabel + metricName + namespace + statistic + dimKeys + dimValues - label := strings.Join([]string{metric.AccountID, "${PROP('AccountLabel')}", *metric.Metric.MetricName, *metric.Metric.Namespace, statistic}, labelSeparator) + label := strings.Join([]string{metric.AccountID, aws.LabelConst.AccountLabel, *metric.Metric.MetricName, *metric.Metric.Namespace, statistic}, aws.LabelConst.LabelSeparator) dimNames := "" dimValues := "" for i, dim := range metric.Metric.Dimensions { @@ -409,8 +400,8 @@ func constructLabel(metric aws.MetricWithID, statistic string) string { } if dimNames != "" && dimValues != "" { - label += labelSeparator + dimNames - label += labelSeparator + dimValues + label += aws.LabelConst.LabelSeparator + dimNames + label += aws.LabelConst.LabelSeparator + dimValues } return label } @@ -432,12 +423,12 @@ func statisticLookup(stat string) (string, bool) { } func generateFieldName(namespace string, labels []string) string { - stat := labels[statisticIdx] + stat := labels[aws.LabelConst.StatisticIdx] // Check if statistic method is one of Sum, SampleCount, Minimum, Maximum, Average // With checkStatistics function, no need to check bool return value here statMethod, _ := statisticLookup(stat) // By default, replace dot "." using underscore "_" for metric names - return "aws." + stripNamespace(namespace) + ".metrics." + common.DeDot(labels[metricNameIdx]) + "." + statMethod + return "aws." + stripNamespace(namespace) + ".metrics." + common.DeDot(labels[aws.LabelConst.MetricNameIdx]) + "." + statMethod } // stripNamespace converts Cloudwatch namespace into the root field we will use for metrics @@ -448,15 +439,15 @@ func stripNamespace(namespace string) string { } func insertRootFields(event mb.Event, metricValue float64, labels []string) mb.Event { - namespace := labels[namespaceIdx] + namespace := labels[aws.LabelConst.NamespaceIdx] _, _ = event.RootFields.Put(generateFieldName(namespace, labels), metricValue) _, _ = event.RootFields.Put("aws.cloudwatch.namespace", namespace) - if len(labels) != labelLengthTotal { + if len(labels) != aws.LabelConst.LabelLengthTotal { return event } - dimNames := strings.Split(labels[identifierNameIdx], ",") - dimValues := strings.Split(labels[identifierValueIdx], ",") + dimNames := strings.Split(labels[aws.LabelConst.IdentifierNameIdx], ",") + dimValues := strings.Split(labels[aws.LabelConst.IdentifierValueIdx], ",") for i := 0; i < len(dimNames); i++ { _, _ = event.RootFields.Put("aws.dimensions."+dimNames[i], dimValues[i]) } @@ -487,25 +478,25 @@ func (m *MetricSet) createEvents(svcCloudwatch cloudwatch.GetMetricDataAPIClient if len(metricDataResult.Values) == 0 { continue } - labels := strings.Split(*metricDataResult.Label, labelSeparator) + labels := strings.Split(*metricDataResult.Label, aws.LabelConst.LabelSeparator) for valI, metricDataResultValue := range metricDataResult.Values { - if len(labels) != labelLengthTotal { + if len(labels) != aws.LabelConst.LabelLengthTotal { // when there is no identifier value in label, use id+label+region+accountID+namespace+index instead - identifier := labels[accountIdIdx] + labels[accountLabelIdx] + regionName + m.AccountID + labels[namespaceIdx] + fmt.Sprint("-", valI) + identifier := labels[aws.LabelConst.AccountIdIdx] + labels[aws.LabelConst.AccountLabelIdx] + regionName + m.MonitoringAccountID + labels[aws.LabelConst.NamespaceIdx] + fmt.Sprint("-", valI) if _, ok := events[identifier]; !ok { - if labels[accountIdIdx] != "" { - events[identifier] = aws.InitEvent(regionName, labels[accountLabelIdx], labels[accountIdIdx], metricDataResult.Timestamps[valI]) + if labels[aws.LabelConst.AccountIdIdx] != "" { + events[identifier] = aws.InitEvent(regionName, labels[aws.LabelConst.AccountLabelIdx], labels[aws.LabelConst.AccountIdIdx], metricDataResult.Timestamps[valI]) } else { - events[identifier] = aws.InitEvent(regionName, m.AccountName, m.AccountID, metricDataResult.Timestamps[valI]) + events[identifier] = aws.InitEvent(regionName, m.MonitoringAccountName, m.MonitoringAccountID, metricDataResult.Timestamps[valI]) } } events[identifier] = insertRootFields(events[identifier], metricDataResultValue, labels) continue } - identifierValue := labels[identifierValueIdx] + fmt.Sprint("-", valI) + identifierValue := labels[aws.LabelConst.IdentifierValueIdx] + fmt.Sprint("-", valI) if _, ok := events[identifierValue]; !ok { - events[identifierValue] = aws.InitEvent(regionName, labels[accountLabelIdx], labels[accountIdIdx], metricDataResult.Timestamps[valI]) + events[identifierValue] = aws.InitEvent(regionName, labels[aws.LabelConst.AccountLabelIdx], labels[aws.LabelConst.AccountIdIdx], metricDataResult.Timestamps[valI]) } events[identifierValue] = insertRootFields(events[identifierValue], metricDataResultValue, labels) } @@ -542,7 +533,7 @@ func (m *MetricSet) createEvents(svcCloudwatch cloudwatch.GetMetricDataAPIClient continue } - labels := strings.Split(*output.Label, labelSeparator) + labels := strings.Split(*output.Label, aws.LabelConst.LabelSeparator) for valI, metricDataResultValue := range output.Values { if len(labels) != 7 { // if there is no tag in labels but there is a tagsFilter, then no event should be reported. @@ -551,19 +542,19 @@ func (m *MetricSet) createEvents(svcCloudwatch cloudwatch.GetMetricDataAPIClient } // when there is no identifier value in label, use id+label+region+accountID+namespace+index instead - identifier := labels[accountIdIdx] + labels[accountLabelIdx] + regionName + m.AccountID + labels[namespaceIdx] + fmt.Sprint("-", valI) + identifier := labels[aws.LabelConst.AccountIdIdx] + labels[aws.LabelConst.AccountLabelIdx] + regionName + m.MonitoringAccountID + labels[aws.LabelConst.NamespaceIdx] + fmt.Sprint("-", valI) if _, ok := events[identifier]; !ok { - if labels[accountIdIdx] != "" { - events[identifier] = aws.InitEvent(regionName, labels[accountLabelIdx], labels[accountIdIdx], output.Timestamps[valI]) + if labels[aws.LabelConst.AccountIdIdx] != "" { + events[identifier] = aws.InitEvent(regionName, labels[aws.LabelConst.AccountLabelIdx], labels[aws.LabelConst.AccountIdIdx], output.Timestamps[valI]) } else { - events[identifier] = aws.InitEvent(regionName, m.AccountName, m.AccountID, output.Timestamps[valI]) + events[identifier] = aws.InitEvent(regionName, m.MonitoringAccountName, m.MonitoringAccountID, output.Timestamps[valI]) } } events[identifier] = insertRootFields(events[identifier], metricDataResultValue, labels) continue } - identifierValue := labels[identifierValueIdx] + identifierValue := labels[aws.LabelConst.IdentifierValueIdx] uniqueIdentifierValue := identifierValue + fmt.Sprint("-", valI) // add tags to event based on identifierValue @@ -580,7 +571,7 @@ func (m *MetricSet) createEvents(svcCloudwatch cloudwatch.GetMetricDataAPIClient if len(tagsFilter) != 0 && resourceTagMap[subIdentifier] == nil { continue } - events[uniqueIdentifierValue] = aws.InitEvent(regionName, labels[accountLabelIdx], labels[accountIdIdx], output.Timestamps[valI]) + events[uniqueIdentifierValue] = aws.InitEvent(regionName, labels[aws.LabelConst.AccountLabelIdx], labels[aws.LabelConst.AccountIdIdx], output.Timestamps[valI]) } events[uniqueIdentifierValue] = insertRootFields(events[uniqueIdentifierValue], metricDataResultValue, labels) insertTags(events, uniqueIdentifierValue, subIdentifier, resourceTagMap) diff --git a/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch_test.go b/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch_test.go index 6550b85cdf97..054e9d8d55a2 100644 --- a/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch_test.go +++ b/x-pack/metricbeat/module/aws/cloudwatch/cloudwatch_test.go @@ -775,7 +775,7 @@ func TestGenerateFieldName(t *testing.T) { for _, c := range cases { t.Run(c.title, func(t *testing.T) { - fieldName := generateFieldName(c.label[namespaceIdx], c.label) + fieldName := generateFieldName(c.label[aws.LabelConst.NamespaceIdx], c.label) assert.Equal(t, c.expectedFieldName, fieldName) }) } @@ -1287,7 +1287,7 @@ func TestCreateEventsWithIdentifier(t *testing.T) { func TestCreateEventsWithoutIdentifier(t *testing.T) { m := MetricSet{} m.CloudwatchConfigs = []Config{{Statistic: []string{"Average"}}} - m.MetricSet = &aws.MetricSet{Period: 5, AccountID: accountID} + m.MetricSet = &aws.MetricSet{Period: 5, MonitoringAccountID: accountID} m.logger = logp.NewLogger("test") mockTaggingSvc := &MockResourceGroupsTaggingClient{} @@ -1332,7 +1332,7 @@ func TestCreateEventsWithoutIdentifier(t *testing.T) { func TestCreateEventsWithDataGranularity(t *testing.T) { m := MetricSet{} m.CloudwatchConfigs = []Config{{Statistic: []string{"Average"}}} - m.MetricSet = &aws.MetricSet{Period: 10, AccountID: accountID, DataGranularity: 5} + m.MetricSet = &aws.MetricSet{Period: 10, MonitoringAccountID: accountID, DataGranularity: 5} m.logger = logp.NewLogger("test") mockTaggingSvc := &MockResourceGroupsTaggingClient{} @@ -1373,7 +1373,7 @@ func TestCreateEventsWithDataGranularity(t *testing.T) { func TestCreateEventsWithTagsFilter(t *testing.T) { m := MetricSet{} m.CloudwatchConfigs = []Config{{Statistic: []string{"Average"}}} - m.MetricSet = &aws.MetricSet{Period: 5, AccountID: accountID} + m.MetricSet = &aws.MetricSet{Period: 5, MonitoringAccountID: accountID} m.logger = logp.NewLogger("test") mockTaggingSvc := &MockResourceGroupsTaggingClient{} @@ -1534,7 +1534,7 @@ func TestCreateEventsTimestamp(t *testing.T) { m := MetricSet{ logger: logp.NewLogger("test"), CloudwatchConfigs: []Config{{Statistic: []string{"Average"}}}, - MetricSet: &aws.MetricSet{Period: 5, AccountID: accountID}, + MetricSet: &aws.MetricSet{Period: 5, MonitoringAccountID: accountID}, } listMetricWithStatsTotal := []metricsWithStatistics{ diff --git a/x-pack/metricbeat/module/aws/utils.go b/x-pack/metricbeat/module/aws/utils.go index e0bc5289c478..caf695f1cb9f 100644 --- a/x-pack/metricbeat/module/aws/utils.go +++ b/x-pack/metricbeat/module/aws/utils.go @@ -51,13 +51,13 @@ type MetricWithID struct { // API call per metric name and set of dimensions. This will increase API cost. // IncludeLinkedAccounts is set to true for ListMetrics API to include metrics from source accounts in addition to the // monitoring account. -func GetListMetricsOutput(namespace string, regionName string, period time.Duration, svcCloudwatch cloudwatch.ListMetricsAPIClient) ([]MetricWithID, error) { +func GetListMetricsOutput(namespace string, regionName string, period time.Duration, includeLinkedAccounts bool, monitoringAccountID string, svcCloudwatch cloudwatch.ListMetricsAPIClient) ([]MetricWithID, error) { var metricWithAccountID []MetricWithID var nextToken *string listMetricsInput := &cloudwatch.ListMetricsInput{ NextToken: nextToken, - IncludeLinkedAccounts: true, + IncludeLinkedAccounts: includeLinkedAccounts, } // To filter the results to show only metrics that have had data points published @@ -80,6 +80,14 @@ func GetListMetricsOutput(namespace string, regionName string, period time.Durat return metricWithAccountID, fmt.Errorf("error ListMetrics with Paginator, skipping region %s: %w", regionName, err) } + // when IncludeLinkedAccounts is set to false, ListMetrics API does not return any OwningAccounts + if page.OwningAccounts == nil { + for _, metric := range page.Metrics { + metricWithAccountID = append(metricWithAccountID, MetricWithID{metric, monitoringAccountID}) + } + return metricWithAccountID, nil + } + for i, metric := range page.Metrics { metricWithAccountID = append(metricWithAccountID, MetricWithID{metric, page.OwningAccounts[i]}) } diff --git a/x-pack/metricbeat/module/aws/utils_test.go b/x-pack/metricbeat/module/aws/utils_test.go index 3d082858b414..5fe62b5c80cc 100644 --- a/x-pack/metricbeat/module/aws/utils_test.go +++ b/x-pack/metricbeat/module/aws/utils_test.go @@ -123,9 +123,6 @@ func (m *MockCloudWatchClient) ListMetrics(context.Context, *cloudwatch.ListMetr Dimensions: []cloudwatchtypes.Dimension{dim1}, }, }, - OwningAccounts: []string{ - "1234", - }, NextToken: awssdk.String(""), }, nil } @@ -201,7 +198,7 @@ func (m *MockResourceGroupsTaggingClient) GetResources(_ context.Context, _ *res func TestGetListMetricsOutput(t *testing.T) { svcCloudwatch := &MockCloudWatchClient{} - listMetricsOutput, err := GetListMetricsOutput("AWS/EC2", "us-west-1", time.Minute*5, svcCloudwatch) + listMetricsOutput, err := GetListMetricsOutput("AWS/EC2", "us-west-1", time.Minute*5, false, "123", svcCloudwatch) assert.NoError(t, err) assert.Equal(t, 1, len(listMetricsOutput)) assert.Equal(t, namespace, *listMetricsOutput[0].Metric.Namespace) @@ -213,7 +210,7 @@ func TestGetListMetricsOutput(t *testing.T) { func TestGetListMetricsCrossAccountsOutput(t *testing.T) { svcCloudwatch := &MockCloudwatchClientCrossAccounts{} - listMetricsOutput, err := GetListMetricsOutput("AWS/EC2", "us-west-1", time.Minute*5, svcCloudwatch) + listMetricsOutput, err := GetListMetricsOutput("AWS/EC2", "us-west-1", time.Minute*5, true, "123", svcCloudwatch) assert.NoError(t, err) assert.Equal(t, 2, len(listMetricsOutput)) assert.Equal(t, namespace, *listMetricsOutput[0].Metric.Namespace) @@ -226,7 +223,7 @@ func TestGetListMetricsCrossAccountsOutput(t *testing.T) { func TestGetListMetricsOutputWithWildcard(t *testing.T) { svcCloudwatch := &MockCloudWatchClient{} - listMetricsOutput, err := GetListMetricsOutput("*", "us-west-1", time.Minute*5, svcCloudwatch) + listMetricsOutput, err := GetListMetricsOutput("*", "us-west-1", time.Minute*5, false, "123", svcCloudwatch) assert.NoError(t, err) assert.Equal(t, 1, len(listMetricsOutput)) assert.Equal(t, namespace, *listMetricsOutput[0].Metric.Namespace) diff --git a/x-pack/metricbeat/modules.d/aws.yml.disabled b/x-pack/metricbeat/modules.d/aws.yml.disabled index 8841991b7be8..ddd36a4c3269 100644 --- a/x-pack/metricbeat/modules.d/aws.yml.disabled +++ b/x-pack/metricbeat/modules.d/aws.yml.disabled @@ -52,5 +52,6 @@ - module: aws period: 1m latency: 5m + include_linked_accounts: false metricsets: - s3_request From 7788a6dcd414fcecfab25a65d0ebb1431c9a44f4 Mon Sep 17 00:00:00 2001 From: ShourieG <105607378+ShourieG@users.noreply.github.com> Date: Sat, 3 Jun 2023 15:02:50 +0530 Subject: [PATCH 09/52] [filebeat][gcs] Fix for concurrency issues and context timeouts in the GCS input (#35605) * enhancement and bugfix for gcs input * updated changelog * addressed go lint errors * updated changelog and addresses PR suggestions * addressed PR suggestions * updated PR to contain only bugfixes * updated changelog --- CHANGELOG.next.asciidoc | 1 + x-pack/filebeat/input/gcs/input.go | 3 +- x-pack/filebeat/input/gcs/input_stateless.go | 2 +- x-pack/filebeat/input/gcs/input_test.go | 60 +++++++------------- x-pack/filebeat/input/gcs/job.go | 29 +++++----- x-pack/filebeat/input/gcs/scheduler.go | 18 +++--- x-pack/filebeat/input/gcs/state.go | 26 +++++---- 7 files changed, 62 insertions(+), 77 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 58e0f2652536..977088d85770 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -124,6 +124,7 @@ https://github.com/elastic/beats/compare/v8.7.1\...main[Check the HEAD diff] - Fix crash when loading azurewebstorage cursor with no partially processed data. {pull}35433[35433] - RFC5424 syslog timestamps with offset 'Z' will be treated as UTC rather than using the default timezone. {pull}35360[35360] - [system] sync system/auth dataset with system integration 1.29.0. {pull}35581[35581] +- [GCS Input] - Fixed an issue where bucket_timeout was being applied to the entire bucket poll interval and not individual bucket object read operations. Fixed a map write concurrency issue arising from data races when using a high number of workers. Fixed the flaky tests that were present in the GCS test suit. {pull}35605[35605] - Fix filestream false positive log error "filestream input with ID 'xyz' already exists" {issue}31767[31767] *Heartbeat* diff --git a/x-pack/filebeat/input/gcs/input.go b/x-pack/filebeat/input/gcs/input.go index 9bc897f64fc8..b5e4c23b8b2b 100644 --- a/x-pack/filebeat/input/gcs/input.go +++ b/x-pack/filebeat/input/gcs/input.go @@ -9,7 +9,7 @@ import ( "time" "cloud.google.com/go/storage" - "github.com/googleapis/gax-go/v2" + gax "github.com/googleapis/gax-go/v2" v2 "github.com/elastic/beats/v7/filebeat/input/v2" cursor "github.com/elastic/beats/v7/filebeat/input/v2/input-cursor" @@ -127,7 +127,6 @@ func (input *gcsInput) Run(inputCtx v2.Context, src cursor.Source, log := inputCtx.Logger.With("project_id", currentSource.ProjectId).With("bucket", currentSource.BucketName) log.Infof("Running google cloud storage for project: %s", input.config.ProjectId) - var cp *Checkpoint if !cursor.IsNew() { if err := cursor.Unpack(&cp); err != nil { diff --git a/x-pack/filebeat/input/gcs/input_stateless.go b/x-pack/filebeat/input/gcs/input_stateless.go index b6b3b14cda7c..b81ccf79b125 100644 --- a/x-pack/filebeat/input/gcs/input_stateless.go +++ b/x-pack/filebeat/input/gcs/input_stateless.go @@ -9,7 +9,7 @@ import ( "time" "cloud.google.com/go/storage" - "github.com/googleapis/gax-go/v2" + gax "github.com/googleapis/gax-go/v2" v2 "github.com/elastic/beats/v7/filebeat/input/v2" cursor "github.com/elastic/beats/v7/filebeat/input/v2/input-cursor" diff --git a/x-pack/filebeat/input/gcs/input_test.go b/x-pack/filebeat/input/gcs/input_test.go index 1cb658377ab4..bd9028d6bf9a 100644 --- a/x-pack/filebeat/input/gcs/input_test.go +++ b/x-pack/filebeat/input/gcs/input_test.go @@ -37,15 +37,13 @@ const ( ) func Test_StorageClient(t *testing.T) { - t.Skip("Flaky test: issue (could possibly affect this also) - https://github.com/elastic/beats/issues/34332") tests := []struct { - name string - baseConfig map[string]interface{} - mockHandler func() http.Handler - expected map[string]bool - checkJSON bool - isError error - unexpectedError error + name string + baseConfig map[string]interface{} + mockHandler func() http.Handler + expected map[string]bool + checkJSON bool + isError error }{ { name: "SingleBucketWithPoll_NoErr", @@ -67,7 +65,6 @@ func Test_StorageClient(t *testing.T) { mock.Gcs_test_new_object_data3_json: true, mock.Gcs_test_new_object_docs_ata_json: true, }, - unexpectedError: context.Canceled, }, { name: "SingleBucketWithoutPoll_NoErr", @@ -89,7 +86,6 @@ func Test_StorageClient(t *testing.T) { mock.Gcs_test_new_object_data3_json: true, mock.Gcs_test_new_object_docs_ata_json: true, }, - unexpectedError: nil, }, { name: "TwoBucketsWithPoll_NoErr", @@ -116,7 +112,6 @@ func Test_StorageClient(t *testing.T) { mock.Gcs_test_latest_object_ata_json: true, mock.Gcs_test_latest_object_data3_json: true, }, - unexpectedError: context.Canceled, }, { name: "TwoBucketsWithoutPoll_NoErr", @@ -143,7 +138,6 @@ func Test_StorageClient(t *testing.T) { mock.Gcs_test_latest_object_ata_json: true, mock.Gcs_test_latest_object_data3_json: true, }, - unexpectedError: nil, }, { name: "SingleBucketWithPoll_InvalidBucketErr", @@ -159,10 +153,9 @@ func Test_StorageClient(t *testing.T) { }, }, }, - mockHandler: mock.GCSServer, - expected: map[string]bool{}, - isError: errors.New("storage: bucket doesn't exist"), - unexpectedError: nil, + mockHandler: mock.GCSServer, + expected: map[string]bool{}, + isError: errors.New("storage: bucket doesn't exist"), }, { name: "SingleBucketWithoutPoll_InvalidBucketErr", @@ -178,10 +171,9 @@ func Test_StorageClient(t *testing.T) { }, }, }, - mockHandler: mock.GCSServer, - expected: map[string]bool{}, - isError: errors.New("storage: bucket doesn't exist"), - unexpectedError: nil, + mockHandler: mock.GCSServer, + expected: map[string]bool{}, + isError: errors.New("storage: bucket doesn't exist"), }, { name: "TwoBucketsWithPoll_InvalidBucketErr", @@ -200,10 +192,9 @@ func Test_StorageClient(t *testing.T) { }, }, }, - mockHandler: mock.GCSServer, - expected: map[string]bool{}, - isError: errors.New("storage: bucket doesn't exist"), - unexpectedError: nil, + mockHandler: mock.GCSServer, + expected: map[string]bool{}, + isError: errors.New("storage: bucket doesn't exist"), }, { name: "SingleBucketWithPoll_InvalidConfigValue", @@ -219,10 +210,9 @@ func Test_StorageClient(t *testing.T) { }, }, }, - mockHandler: mock.GCSServer, - expected: map[string]bool{}, - isError: errors.New("requires value <= 5000 accessing 'max_workers'"), - unexpectedError: nil, + mockHandler: mock.GCSServer, + expected: map[string]bool{}, + isError: errors.New("requires value <= 5000 accessing 'max_workers'"), }, { name: "TwoBucketWithPoll_InvalidConfigValue", @@ -241,10 +231,9 @@ func Test_StorageClient(t *testing.T) { }, }, }, - mockHandler: mock.GCSServer, - expected: map[string]bool{}, - isError: errors.New("requires value <= 5000 accessing 'max_workers'"), - unexpectedError: nil, + mockHandler: mock.GCSServer, + expected: map[string]bool{}, + isError: errors.New("requires value <= 5000 accessing 'max_workers'"), }, { name: "SingleBucketWithPoll_parseJSON", @@ -267,7 +256,6 @@ func Test_StorageClient(t *testing.T) { mock.Gcs_test_latest_object_ata_json_parsed: true, mock.Gcs_test_latest_object_data3_json_parsed: true, }, - unexpectedError: context.Canceled, }, { name: "ReadJSON", @@ -289,7 +277,6 @@ func Test_StorageClient(t *testing.T) { mock.BeatsFilesBucket_log_json[1]: true, mock.BeatsFilesBucket_log_json[2]: true, }, - unexpectedError: context.Canceled, }, { name: "ReadOctetStreamJSON", @@ -310,7 +297,6 @@ func Test_StorageClient(t *testing.T) { mock.BeatsFilesBucket_multiline_json[0]: true, mock.BeatsFilesBucket_multiline_json[1]: true, }, - unexpectedError: context.Canceled, }, { name: "ReadNDJSON", @@ -331,7 +317,6 @@ func Test_StorageClient(t *testing.T) { mock.BeatsFilesBucket_log_ndjson[0]: true, mock.BeatsFilesBucket_log_ndjson[1]: true, }, - unexpectedError: context.Canceled, }, { name: "ReadMultilineGzJSON", @@ -352,7 +337,6 @@ func Test_StorageClient(t *testing.T) { mock.BeatsFilesBucket_multiline_json_gz[0]: true, mock.BeatsFilesBucket_multiline_json_gz[1]: true, }, - unexpectedError: context.Canceled, }, { name: "ReadJSONWithRootAsArray", @@ -375,7 +359,6 @@ func Test_StorageClient(t *testing.T) { mock.BeatsFilesBucket_json_array[2]: true, mock.BeatsFilesBucket_json_array[3]: true, }, - unexpectedError: context.Canceled, }, } for _, tt := range tests { @@ -462,7 +445,6 @@ func Test_StorageClient(t *testing.T) { } } } - assert.ErrorIs(t, g.Wait(), tt.unexpectedError) }) } } diff --git a/x-pack/filebeat/input/gcs/job.go b/x-pack/filebeat/input/gcs/job.go index 118e89287acf..edcb7fe976ac 100644 --- a/x-pack/filebeat/input/gcs/job.go +++ b/x-pack/filebeat/input/gcs/job.go @@ -15,7 +15,6 @@ import ( "errors" "fmt" "io" - "sync" "time" "unicode" @@ -28,8 +27,6 @@ import ( ) type job struct { - // Mutex lock for concurrent publishes - mu sync.Mutex // gcs bucket handle bucket *storage.BucketHandle // gcs object attribute struct @@ -109,13 +106,13 @@ func (j *job) do(ctx context.Context, id string) { Fields: fields, } event.SetID(objectID(j.hash, 0)) - j.state.save(j.object.Name, j.object.Updated) - // locks while data is being published to avoid concurrent map read/writes - j.mu.Lock() - if err := j.publisher.Publish(event, j.state.checkpoint()); err != nil { + // locks while data is being saved and published to avoid concurrent map read/writes + cp, done := j.state.saveForTx(j.object.Name, j.object.Updated) + if err := j.publisher.Publish(event, cp); err != nil { j.log.Errorw("job encountered an error", "gcs.jobId", id, "error", err) } - j.mu.Unlock() + // unlocks after data is saved and published + done() } } @@ -216,19 +213,23 @@ func (j *job) readJsonAndPublish(ctx context.Context, r io.Reader, id string) er // updates the offset after reading the file // this avoids duplicates for the last read when resuming operation offset = dec.InputOffset() + // locks while data is being saved and published to avoid concurrent map read/writes + var ( + done func() + cp *Checkpoint + ) if !dec.More() { // if this is the last object, then peform a complete state save - j.state.save(j.object.Name, j.object.Updated) + cp, done = j.state.saveForTx(j.object.Name, j.object.Updated) } else { // partially saves read state using offset - j.state.savePartial(j.object.Name, offset+relativeOffset) + cp, done = j.state.savePartialForTx(j.object.Name, offset+relativeOffset) } - // locks while data is being published to avoid concurrent map read/writes - j.mu.Lock() - if err := j.publisher.Publish(evt, j.state.checkpoint()); err != nil { + if err := j.publisher.Publish(evt, cp); err != nil { j.log.Errorw("job encountered an error", "gcs.jobId", id, "error", err) } - j.mu.Unlock() + // unlocks after data is saved and published + done() } return nil } diff --git a/x-pack/filebeat/input/gcs/scheduler.go b/x-pack/filebeat/input/gcs/scheduler.go index 7feb57f7c1e5..a5da0b9576d7 100644 --- a/x-pack/filebeat/input/gcs/scheduler.go +++ b/x-pack/filebeat/input/gcs/scheduler.go @@ -55,16 +55,11 @@ func newScheduler(ctx context.Context, publisher cursor.Publisher, bucket *stora // Schedule, is responsible for fetching & scheduling jobs using the workerpool model func (s *scheduler) schedule() error { if !s.src.Poll { - ctxWithTimeout, cancel := context.WithTimeout(s.parentCtx, s.src.BucketTimeOut) - defer cancel() - return s.scheduleOnce(ctxWithTimeout) + return s.scheduleOnce(s.parentCtx) } for { - ctxWithTimeout, cancel := context.WithTimeout(s.parentCtx, s.src.BucketTimeOut) - defer cancel() - - err := s.scheduleOnce(ctxWithTimeout) + err := s.scheduleOnce(s.parentCtx) if err != nil { return err } @@ -92,9 +87,9 @@ func (l *limiter) release() { l.wg.Done() } -func (s *scheduler) scheduleOnce(ctxWithTimeout context.Context) error { +func (s *scheduler) scheduleOnce(ctx context.Context) error { defer s.limiter.wait() - pager := s.fetchObjectPager(ctxWithTimeout, s.src.MaxWorkers) + pager := s.fetchObjectPager(ctx, *s.cfg.MaxWorkers) for { var objects []*storage.ObjectAttrs nextPageToken, err := pager.NextPage(&objects) @@ -107,7 +102,7 @@ func (s *scheduler) scheduleOnce(ctxWithTimeout context.Context) error { if !s.state.checkpoint().LatestEntryTime.IsZero() { jobs = s.moveToLastSeenJob(jobs) if len(s.state.checkpoint().FailedJobs) > 0 { - jobs = s.addFailedJobs(ctxWithTimeout, jobs) + jobs = s.addFailedJobs(ctx, jobs) } } @@ -118,7 +113,7 @@ func (s *scheduler) scheduleOnce(ctxWithTimeout context.Context) error { s.limiter.acquire() go func() { defer s.limiter.release() - job.do(s.parentCtx, id) + job.do(ctx, id) }() } @@ -126,6 +121,7 @@ func (s *scheduler) scheduleOnce(ctxWithTimeout context.Context) error { break } } + return nil } diff --git a/x-pack/filebeat/input/gcs/state.go b/x-pack/filebeat/input/gcs/state.go index 6b2a269481f4..afa20e5d52dd 100644 --- a/x-pack/filebeat/input/gcs/state.go +++ b/x-pack/filebeat/input/gcs/state.go @@ -47,8 +47,11 @@ func newState() *state { } } -// save, saves/updates the current state for cursor checkpoint -func (s *state) save(name string, lastModifiedOn time.Time) { +// saveForTx updates and returns the current state checkpoint, locks the state +// and returns an unlock function, done. The caller must call done when +// s and cp are no longer needed in a locked state. done may not be called +// more than once. +func (s *state) saveForTx(name string, lastModifiedOn time.Time) (cp *Checkpoint, done func()) { s.mu.Lock() delete(s.cp.LastProcessedOffset, name) delete(s.cp.IsRootArray, name) @@ -68,20 +71,23 @@ func (s *state) save(name string, lastModifiedOn time.Time) { // clear entry if this is a failed job delete(s.cp.FailedJobs, name) } - s.mu.Unlock() + return s.cp, func() { s.mu.Unlock() } } -// setRootArray, sets boolean true for objects that have their roots defined as an array type -func (s *state) setRootArray(name string) { +// savePartialForTx partially updates and returns the current state checkpoint, locks the state +// and returns an unlock function, done. The caller must call done when +// s and cp are no longer needed in a locked state. done may not be called +// more than once. +func (s *state) savePartialForTx(name string, offset int64) (cp *Checkpoint, done func()) { s.mu.Lock() - s.cp.IsRootArray[name] = true - s.mu.Unlock() + s.cp.LastProcessedOffset[name] = offset + return s.cp, func() { s.mu.Unlock() } } -// savePartial, partially saves/updates the current state for cursor checkpoint -func (s *state) savePartial(name string, offset int64) { +// setRootArray, sets boolean true for objects that have their roots defined as an array type +func (s *state) setRootArray(name string) { s.mu.Lock() - s.cp.LastProcessedOffset[name] = offset + s.cp.IsRootArray[name] = true s.mu.Unlock() } From 8abdf326f86be7467fb89df1c76dd2ef13e544d5 Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Mon, 5 Jun 2023 16:09:30 +0930 Subject: [PATCH 10/52] libbeat/monitoring/inputmon: log key, id and input type when registering/deregistering metrics (#35647) This notes under "metric_registry" all inputmon-handled metric registration and deregistration, linking register and deregister operations by use of a unique ID unrelated to the request. --- CHANGELOG-developer.next.asciidoc | 1 + libbeat/monitoring/inputmon/input.go | 17 ++++++++++++++++- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index 5d009736c342..ae799e2592ac 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -154,6 +154,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Add the file path of the instance lock on the error when it's is already locked {pull}33788[33788] - Add DropFields processor to js API {pull}33458[33458] - Add support for different folders when testing data {pull}34467[34467] +- Add logging of metric registration in inputmon. {pull}35647[35647] ==== Deprecated diff --git a/libbeat/monitoring/inputmon/input.go b/libbeat/monitoring/inputmon/input.go index 51c79fc35017..39d51d94cbe8 100644 --- a/libbeat/monitoring/inputmon/input.go +++ b/libbeat/monitoring/inputmon/input.go @@ -20,6 +20,9 @@ package inputmon import ( "strings" + "github.com/google/uuid" + + "github.com/elastic/elastic-agent-libs/logp" "github.com/elastic/elastic-agent-libs/monitoring" ) @@ -49,11 +52,23 @@ func NewInputRegistry(inputType, id string, optionalParent *monitoring.Registry) // the monitoring registry, and we want a consistent flat level of nesting key := sanitizeID(id) + // Log the registration to ease tracking down duplicate ID registrations. + // Logged at INFO rather than DEBUG since it is not in a hot path and having + // the information available by default can short-circuit requests for debug + // logs during support interactions. + log := logp.NewLogger("metric_registry") + // Make an orthogonal ID to allow tracking register/deregister pairs. + uuid := uuid.New().String() + log.Infow("registering", "input_type", inputType, "id", id, "key", key, "uuid", uuid) + reg = parentRegistry.NewRegistry(key) monitoring.NewString(reg, "input").Set(inputType) monitoring.NewString(reg, "id").Set(id) - return reg, func() { parentRegistry.Remove(key) } + return reg, func() { + log.Infow("unregistering", "input_type", inputType, "id", id, "key", key, "uuid", uuid) + parentRegistry.Remove(key) + } } func sanitizeID(id string) string { From 54d151437695a0c5bbde9a9d7ef777c5c96fa6d9 Mon Sep 17 00:00:00 2001 From: ShourieG <105607378+ShourieG@users.noreply.github.com> Date: Mon, 5 Jun 2023 14:27:53 +0530 Subject: [PATCH 11/52] [filebeat][gcs] - Enhanced context passing and added scheduler debug logs (#35674) * enhanced context passing and added debug logs * updated changelog * addressed pr comments --- CHANGELOG.next.asciidoc | 1 + x-pack/filebeat/input/gcs/input.go | 4 +-- x-pack/filebeat/input/gcs/input_stateless.go | 4 +-- x-pack/filebeat/input/gcs/scheduler.go | 29 ++++++++++++++------ 4 files changed, 26 insertions(+), 12 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 977088d85770..0f27b6c36bb9 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -298,6 +298,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Add support for collecting `httpjson` metrics. {pull}35392[35392] - Add XML decoding support to CEL. {issue}34438[34438] {pull}35372[35372] - Mark CEL input as GA. {pull}35559[35559] +- [GCS] Added scheduler debug logs and improved the context passing mechanism by removing them from struct params and passing them as function arguments. {pull}35674[35674] *Auditbeat* - Migration of system/package module storage from gob encoding to flatbuffer encoding in bolt db. {pull}34817[34817] diff --git a/x-pack/filebeat/input/gcs/input.go b/x-pack/filebeat/input/gcs/input.go index b5e4c23b8b2b..81ed1b822107 100644 --- a/x-pack/filebeat/input/gcs/input.go +++ b/x-pack/filebeat/input/gcs/input.go @@ -155,7 +155,7 @@ func (input *gcsInput) Run(inputCtx v2.Context, src cursor.Source, // Since we are only reading, the operation is always idempotent storage.WithPolicy(storage.RetryAlways), ) - scheduler := newScheduler(ctx, publisher, bucket, currentSource, &input.config, st, log) + scheduler := newScheduler(publisher, bucket, currentSource, &input.config, st, log) - return scheduler.schedule() + return scheduler.schedule(ctx) } diff --git a/x-pack/filebeat/input/gcs/input_stateless.go b/x-pack/filebeat/input/gcs/input_stateless.go index b81ccf79b125..d31f0875262d 100644 --- a/x-pack/filebeat/input/gcs/input_stateless.go +++ b/x-pack/filebeat/input/gcs/input_stateless.go @@ -79,9 +79,9 @@ func (in *statelessInput) Run(inputCtx v2.Context, publisher stateless.Publisher storage.WithPolicy(storage.RetryAlways), ) - scheduler := newScheduler(ctx, pub, bkt, currentSource, &in.config, st, log) + scheduler := newScheduler(pub, bkt, currentSource, &in.config, st, log) - return scheduler.schedule() + return scheduler.schedule(ctx) } return nil } diff --git a/x-pack/filebeat/input/gcs/scheduler.go b/x-pack/filebeat/input/gcs/scheduler.go index a5da0b9576d7..8e1ba95ae8e7 100644 --- a/x-pack/filebeat/input/gcs/scheduler.go +++ b/x-pack/filebeat/input/gcs/scheduler.go @@ -26,7 +26,6 @@ type limiter struct { limit chan struct{} } type scheduler struct { - parentCtx context.Context publisher cursor.Publisher bucket *storage.BucketHandle src *Source @@ -37,11 +36,10 @@ type scheduler struct { } // newScheduler, returns a new scheduler instance -func newScheduler(ctx context.Context, publisher cursor.Publisher, bucket *storage.BucketHandle, src *Source, cfg *config, +func newScheduler(publisher cursor.Publisher, bucket *storage.BucketHandle, src *Source, cfg *config, state *state, log *logp.Logger, ) *scheduler { return &scheduler{ - parentCtx: ctx, publisher: publisher, bucket: bucket, src: src, @@ -53,18 +51,18 @@ func newScheduler(ctx context.Context, publisher cursor.Publisher, bucket *stora } // Schedule, is responsible for fetching & scheduling jobs using the workerpool model -func (s *scheduler) schedule() error { +func (s *scheduler) schedule(ctx context.Context) error { if !s.src.Poll { - return s.scheduleOnce(s.parentCtx) + return s.scheduleOnce(ctx) } for { - err := s.scheduleOnce(s.parentCtx) + err := s.scheduleOnce(ctx) if err != nil { return err } - err = timed.Wait(s.parentCtx, s.src.PollInterval) + err = timed.Wait(ctx, s.src.PollInterval) if err != nil { return err } @@ -90,13 +88,16 @@ func (l *limiter) release() { func (s *scheduler) scheduleOnce(ctx context.Context) error { defer s.limiter.wait() pager := s.fetchObjectPager(ctx, *s.cfg.MaxWorkers) + var numObs, numJobs int for { var objects []*storage.ObjectAttrs nextPageToken, err := pager.NextPage(&objects) if err != nil { return err } + numObs += len(objects) jobs := s.createJobs(objects, s.log) + s.log.Debugf("scheduler: %d objects fetched for current batch", len(objects)) // If previous checkpoint was saved then look up starting point for new jobs if !s.state.checkpoint().LatestEntryTime.IsZero() { @@ -105,9 +106,11 @@ func (s *scheduler) scheduleOnce(ctx context.Context) error { jobs = s.addFailedJobs(ctx, jobs) } } + s.log.Debugf("scheduler: %d jobs scheduled for current batch", len(jobs)) // distributes jobs among workers with the help of a limiter for i, job := range jobs { + numJobs++ id := fetchJobID(i, s.src.BucketName, job.Name()) job := job s.limiter.acquire() @@ -117,6 +120,11 @@ func (s *scheduler) scheduleOnce(ctx context.Context) error { }() } + s.log.Debugf("scheduler: total objects read till now: %d\nscheduler: total jobs scheduled till now: %d", numObs, numJobs) + if len(jobs) != 0 { + s.log.Debugf("scheduler: first job in current batch: %s\nscheduler: last job in current batch: %s", jobs[0].Name(), jobs[len(jobs)-1].Name()) + } + if nextPageToken == "" { break } @@ -212,7 +220,10 @@ func (s *scheduler) addFailedJobs(ctx context.Context, jobs []*job) []*job { jobMap[j.Name()] = true } - for name := range s.state.checkpoint().FailedJobs { + failedJobs := s.state.checkpoint().FailedJobs + s.log.Debugf("scheduler: %d failed jobs found", len(failedJobs)) + fj := 0 + for name := range failedJobs { if !jobMap[name] { obj, err := s.bucket.Object(name).Attrs(ctx) if err != nil { @@ -222,6 +233,8 @@ func (s *scheduler) addFailedJobs(ctx context.Context, jobs []*job) []*job { objectURI := "gs://" + s.src.BucketName + "/" + obj.Name job := newJob(s.bucket, obj, objectURI, s.state, s.src, s.publisher, s.log, true) jobs = append(jobs, job) + s.log.Debugf("scheduler: adding failed job number %d with name %s to job current list", fj, job.Name()) + fj++ } } return jobs From 1458378ef499c6c9127e29c3f29c4caf244b508f Mon Sep 17 00:00:00 2001 From: Tiago Queiroz Date: Mon, 5 Jun 2023 12:56:48 +0200 Subject: [PATCH 12/52] Add `include_message` to the parser config validation (#35660) This commit adds the `include_message` parser to `parser.NewConfig` validation logic. --- CHANGELOG.next.asciidoc | 1 + libbeat/reader/parser/parser.go | 7 ++++++ libbeat/reader/parser/parser_test.go | 34 ++++++++++++++++++++++++++++ 3 files changed, 42 insertions(+) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 0f27b6c36bb9..a38ca68dd73f 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -126,6 +126,7 @@ https://github.com/elastic/beats/compare/v8.7.1\...main[Check the HEAD diff] - [system] sync system/auth dataset with system integration 1.29.0. {pull}35581[35581] - [GCS Input] - Fixed an issue where bucket_timeout was being applied to the entire bucket poll interval and not individual bucket object read operations. Fixed a map write concurrency issue arising from data races when using a high number of workers. Fixed the flaky tests that were present in the GCS test suit. {pull}35605[35605] - Fix filestream false positive log error "filestream input with ID 'xyz' already exists" {issue}31767[31767] +- Fix error when trying to use `include_message` parser {issue}35440[35440] *Heartbeat* diff --git a/libbeat/reader/parser/parser.go b/libbeat/reader/parser/parser.go index d8279656a16e..21363df2dba9 100644 --- a/libbeat/reader/parser/parser.go +++ b/libbeat/reader/parser/parser.go @@ -121,6 +121,13 @@ func NewConfig(pCfg CommonConfig, parsers []config.Namespace) (*Config, error) { if err != nil { return nil, fmt.Errorf("error while parsing syslog parser config: %w", err) } + case "include_message": + config := filter.DefaultConfig() + cfg := ns.Config() + err := cfg.Unpack(&config) + if err != nil { + return nil, fmt.Errorf("error while parsing include_message parser config: %w", err) + } default: return nil, fmt.Errorf("%s: %w", name, ErrNoSuchParser) } diff --git a/libbeat/reader/parser/parser_test.go b/libbeat/reader/parser/parser_test.go index 3b3d95218370..50b416a11d41 100644 --- a/libbeat/reader/parser/parser_test.go +++ b/libbeat/reader/parser/parser_test.go @@ -686,6 +686,40 @@ func TestContainerParser(t *testing.T) { } } +func TestParserIncludeMessages(t *testing.T) { + parserConfig := map[string]interface{}{ + "parsers": []map[string]interface{}{ + { + "include_message": map[string]interface{}{ + "patterns": []string{"^INCLUDE"}, + }, + }, + }, + } + + lines := "INCLUDE - FOO\ndo not include this line\n\nINCLUDE BAR\n" + expectedMessages := []string{ + "INCLUDE - FOO\n", + "INCLUDE BAR\n", + } + + cfg := config.MustNewConfigFrom(parserConfig) + var c inputParsersConfig + err := cfg.Unpack(&c) + require.NoError(t, err) + + p := c.Parsers.Create(testReader(lines)) + + readMsgs := []string{} + msg, err := p.Next() + for err == nil { + readMsgs = append(readMsgs, string(msg.Content)) + msg, err = p.Next() + } + + require.Equal(t, expectedMessages, readMsgs, "fii") +} + type testParsersConfig struct { Parsers []config.Namespace `struct:"parsers"` } From 01aa790e8acb6bc05677f3cb89ebaf89fe14dceb Mon Sep 17 00:00:00 2001 From: Craig MacKenzie Date: Mon, 5 Jun 2023 12:19:12 -0400 Subject: [PATCH 13/52] Make Beats tech leads the owners of go.mod. (#35684) --- .github/CODEOWNERS | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 07b97dcc4e3d..97d5edd24f4e 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -12,6 +12,12 @@ # https://github.community/t/codeowners-file-with-a-not-file-type-condition/1423/9 CHANGELOG* +# The tech leads of the teams working in Beats share ownership of the Go module dependencies and related files. +/.github/CODEOWNERS/ @elastic/beats-tech-leads +/.go.mod/ @elastic/beats-tech-leads +/.go.sum/ @elastic/beats-tech-leads +/NOTICE.txt/ @elastic/beats-tech-leads + /.ci/ @elastic/elastic-agent-data-plane /.github/ @elastic/elastic-agent-data-plane /auditbeat/ @elastic/security-external-integrations From 9239d674cd2e2a956c0b8f27680a580355f2784f Mon Sep 17 00:00:00 2001 From: apmmachine <58790750+apmmachine@users.noreply.github.com> Date: Mon, 5 Jun 2023 14:08:05 -0400 Subject: [PATCH 14/52] [updatecli] update elastic stack version for testing 8.9.0-b4b9b632 (#35599) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli --------- Co-authored-by: apmmachine --- testing/environments/snapshot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/testing/environments/snapshot.yml b/testing/environments/snapshot.yml index 1092d86898ed..f3c6a64f939b 100644 --- a/testing/environments/snapshot.yml +++ b/testing/environments/snapshot.yml @@ -3,7 +3,7 @@ version: '2.3' services: elasticsearch: - image: docker.elastic.co/elasticsearch/elasticsearch:8.9.0-554074dc-SNAPSHOT + image: docker.elastic.co/elasticsearch/elasticsearch:8.9.0-b4b9b632-SNAPSHOT # When extend is used it merges healthcheck.tests, see: # https://github.com/docker/compose/issues/8962 # healthcheck: @@ -31,7 +31,7 @@ services: - "./docker/elasticsearch/users_roles:/usr/share/elasticsearch/config/users_roles" logstash: - image: docker.elastic.co/logstash/logstash:8.9.0-554074dc-SNAPSHOT + image: docker.elastic.co/logstash/logstash:8.9.0-b4b9b632-SNAPSHOT healthcheck: test: ["CMD", "curl", "-f", "http://localhost:9600/_node/stats"] retries: 600 @@ -44,7 +44,7 @@ services: - 5055:5055 kibana: - image: docker.elastic.co/kibana/kibana:8.9.0-554074dc-SNAPSHOT + image: docker.elastic.co/kibana/kibana:8.9.0-b4b9b632-SNAPSHOT environment: - "ELASTICSEARCH_USERNAME=kibana_system_user" - "ELASTICSEARCH_PASSWORD=testing" From 4dc85152aecad1cac9e276665ebad247fe52f63f Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Tue, 6 Jun 2023 08:39:01 +0930 Subject: [PATCH 15/52] filebeat/input/tcp: fix call to get unspecified IPv6 addresses (#35637) The call incorrectly uses the IPv4 address list to populate the IPv6 unspecified address list. This will result in a panic when the more IPv6 addresses than IPv4 addresses appear in the the hosts IP list as returned by net.LookupIP(). Also add system tests to cover this and the equivalent code in the UDP input. --- CHANGELOG.next.asciidoc | 1 + filebeat/input/tcp/input.go | 18 +++++++++++++++++- filebeat/input/udp/input.go | 17 +++++++++++++++++ filebeat/tests/system/test_tcp.py | 10 ++++++++-- filebeat/tests/system/test_udp.py | 15 ++++++++++++++- libbeat/tests/system/config/libbeat.yml.j2 | 5 +++++ 6 files changed, 62 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index a38ca68dd73f..a5c0edee31a4 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -127,6 +127,7 @@ https://github.com/elastic/beats/compare/v8.7.1\...main[Check the HEAD diff] - [GCS Input] - Fixed an issue where bucket_timeout was being applied to the entire bucket poll interval and not individual bucket object read operations. Fixed a map write concurrency issue arising from data races when using a high number of workers. Fixed the flaky tests that were present in the GCS test suit. {pull}35605[35605] - Fix filestream false positive log error "filestream input with ID 'xyz' already exists" {issue}31767[31767] - Fix error when trying to use `include_message` parser {issue}35440[35440] +- Fix handling of IPv6 unspecified addresses in TCP input. {issue}35064[35064] {pull}35637[35637] *Heartbeat* diff --git a/filebeat/input/tcp/input.go b/filebeat/input/tcp/input.go index 96ae0e29d50a..c9169d860450 100644 --- a/filebeat/input/tcp/input.go +++ b/filebeat/input/tcp/input.go @@ -251,10 +251,26 @@ func (m *inputMetrics) poll(addr, addr6 []string, each time.Duration, log *logp. if badAddr != nil { log.Warnf("failed to parse IPv4 addrs for metric collection %q", badAddr) } - hasUnspecified6, addrIsUnspecified6, badAddr := containsUnspecifiedAddr(addr) + hasUnspecified6, addrIsUnspecified6, badAddr := containsUnspecifiedAddr(addr6) if badAddr != nil { log.Warnf("failed to parse IPv6 addrs for metric collection %q", badAddr) } + + // Do an initial check for access to the filesystem and of the + // value constructed by containsUnspecifiedAddr. This gives a + // base level for the rx_queue values and ensures that if the + // constructed address values are malformed we panic early + // within the period of system testing. + rx, err := procNetTCP("/proc/net/tcp", addr, hasUnspecified, addrIsUnspecified) + if err != nil { + log.Warnf("failed to get initial tcp stats from /proc: %v", err) + } + rx6, err := procNetTCP("/proc/net/tcp6", addr6, hasUnspecified6, addrIsUnspecified6) + if err != nil { + log.Warnf("failed to get initial tcp6 stats from /proc: %v", err) + } + m.rxQueue.Set(uint64(rx + rx6)) + t := time.NewTicker(each) for { select { diff --git a/filebeat/input/udp/input.go b/filebeat/input/udp/input.go index 3b0d09c7d4ea..f092c8aa9d1c 100644 --- a/filebeat/input/udp/input.go +++ b/filebeat/input/udp/input.go @@ -248,6 +248,23 @@ func (m *inputMetrics) poll(addr, addr6 []string, each time.Duration, log *logp. if badAddr != nil { log.Warnf("failed to parse IPv6 addrs for metric collection %q", badAddr) } + + // Do an initial check for access to the filesystem and of the + // value constructed by containsUnspecifiedAddr. This gives a + // base level for the rx_queue and drops values and ensures that + // if the constructed address values are malformed we panic early + // within the period of system testing. + rx, drops, err := procNetUDP("/proc/net/udp", addr, hasUnspecified, addrIsUnspecified) + if err != nil { + log.Warnf("failed to get initial udp stats from /proc: %v", err) + } + rx6, drops6, err := procNetUDP("/proc/net/udp6", addr, hasUnspecified6, addrIsUnspecified6) + if err != nil { + log.Warnf("failed to get initial udp6 stats from /proc: %v", err) + } + m.rxQueue.Set(uint64(rx + rx6)) + m.drops.Set(uint64(drops + drops6)) + t := time.NewTicker(each) for { select { diff --git a/filebeat/tests/system/test_tcp.py b/filebeat/tests/system/test_tcp.py index 2f98e95c8ba6..c6a7e2178e96 100644 --- a/filebeat/tests/system/test_tcp.py +++ b/filebeat/tests/system/test_tcp.py @@ -37,7 +37,13 @@ def test_tcp_with_rfc6587_octet(self): """ self.send_events_with_rfc6587_framing("octet") - def send_events_with_delimiter(self, delimiter): + def test_tcp_with_wildcard_address(self): + """ + Test TCP input with it binding to the wildcard address 0.0.0.0. + """ + self.send_events_with_delimiter("\n", bind="0.0.0.0") + + def send_events_with_delimiter(self, delimiter, bind="127.0.0.1"): host = "127.0.0.1" port = 8080 input_raw = """ @@ -50,7 +56,7 @@ def send_events_with_delimiter(self, delimiter): if delimiter != "": input_raw += "\n line_delimiter: {}".format(delimiter) - input_raw = input_raw.format(host, port) + input_raw = input_raw.format(bind, port) self.render_config_template( input_raw=input_raw, diff --git a/filebeat/tests/system/test_udp.py b/filebeat/tests/system/test_udp.py index 7a8b73489bde..71896e75ebbd 100644 --- a/filebeat/tests/system/test_udp.py +++ b/filebeat/tests/system/test_udp.py @@ -8,6 +8,19 @@ class Test(BaseTest): @unittest.skipIf(os.name == 'nt', 'flaky test https://github.com/elastic/beats/issues/22809') def test_udp(self): + """ + Test UDP input with it binding to 127.0.0.1 (default). + """ + self.send_events_with_bind() + + @unittest.skipIf(os.name == 'nt', 'flaky test https://github.com/elastic/beats/issues/22809') + def test_udp_with_wildcard_address(self): + """ + Test UDP input with it binding to the wildcard address 0.0.0.0. + """ + self.send_events_with_bind(bind="0.0.0.0") + + def send_events_with_bind(self, bind="127.0.0.1"): host = "127.0.0.1" port = 8080 @@ -17,7 +30,7 @@ def test_udp(self): enabled: true """ - input_raw = input_raw.format(host, port) + input_raw = input_raw.format(bind, port) self.render_config_template( input_raw=input_raw, diff --git a/libbeat/tests/system/config/libbeat.yml.j2 b/libbeat/tests/system/config/libbeat.yml.j2 index 5cd434690da2..bc0401555b6e 100644 --- a/libbeat/tests/system/config/libbeat.yml.j2 +++ b/libbeat/tests/system/config/libbeat.yml.j2 @@ -118,3 +118,8 @@ path: #================================ keystore ===================================== keystore.path: {{keystore_path}} {% endif %} + +# Enable periodic input metric logging. +logging.metrics.namespaces: + - stats + - dataset From 3ca74fd973572cbecfe68590418c198a8abd025e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Chema=20Mart=C3=ADnez?= Date: Tue, 6 Jun 2023 11:10:22 +0200 Subject: [PATCH 16/52] Note that crc.secret is required in http_endpoint docs (#35692) --- x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc b/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc index eafbb5d4d83a..98bb76c125a5 100644 --- a/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc +++ b/x-pack/filebeat/docs/inputs/input-http-endpoint.asciidoc @@ -277,7 +277,7 @@ This option defines the provider of the webhook that uses CRC (Challenge-Respons [float] ==== `crc.secret` -The secret token provided by the webhook owner for the CRC validation. +The secret token provided by the webhook owner for the CRC validation. It is required when a `crc.provider` is set. [id="{beatname_lc}-input-{type}-common-options"] include::../../../../filebeat/docs/inputs/input-common-options.asciidoc[] From 8d98060e953e22fa1467b01f085c608de8a52735 Mon Sep 17 00:00:00 2001 From: Taylor Swanson <90622908+taylor-swanson@users.noreply.github.com> Date: Tue, 6 Jun 2023 08:06:00 -0500 Subject: [PATCH 17/52] [Packetbeat] Add af_packet metrics (#35489) - Add metrics for af_packet interfaces --- CHANGELOG.next.asciidoc | 1 + .../_meta/config/beat.reference.yml.tmpl | 5 ++ packetbeat/beater/processor.go | 6 +- packetbeat/config/config.go | 1 + packetbeat/docs/packetbeat-options.asciidoc | 17 ++++ .../docs/protocol-metrics-packetbeat.asciidoc | 15 ++++ packetbeat/packetbeat.reference.yml | 5 ++ packetbeat/sniffer/afpacket.go | 13 +-- packetbeat/sniffer/afpacket_linux.go | 85 +++++++++++++++++++ packetbeat/sniffer/sniffer.go | 32 ++++--- x-pack/packetbeat/packetbeat.reference.yml | 5 ++ 11 files changed, 166 insertions(+), 19 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index a5c0edee31a4..a10ceba2da87 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -338,6 +338,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 *Packetbeat* - Added `packetbeat.interfaces.fanout_group` to allow a Packetbeat sniffer to join an AF_PACKET fanout group. {issue}35451[35451] {pull}35453[35453] +- Add AF_PACKET metrics. {issue}35428[35428] {pull}35489[35489] *Winlogbeat* diff --git a/packetbeat/_meta/config/beat.reference.yml.tmpl b/packetbeat/_meta/config/beat.reference.yml.tmpl index 90ce5e65c710..3a6319390d0b 100644 --- a/packetbeat/_meta/config/beat.reference.yml.tmpl +++ b/packetbeat/_meta/config/beat.reference.yml.tmpl @@ -44,6 +44,11 @@ packetbeat.interfaces.internal_networks: # The default is 30 MB. #packetbeat.interfaces.buffer_size_mb: 30 +# Set the polling frequency for interface metrics. This currently only applies +# to the "afpacket" interface type. +# The default is 5s (seconds). +#packetbeat.interfaces.metrics_interval: 5s + # To scale processing across multiple Packetbeat processes, a fanout group # identifier can be specified. When `fanout_group` is used the Linux kernel splits # packets across Packetbeat instances in the same group by using a flow hash. It diff --git a/packetbeat/beater/processor.go b/packetbeat/beater/processor.go index 4e9cf5d50eda..494b8f890b62 100644 --- a/packetbeat/beater/processor.go +++ b/packetbeat/beater/processor.go @@ -157,7 +157,7 @@ func (p *processorFactory) Create(pipeline beat.PipelineConnector, cfg *conf.C) if err != nil { return nil, err } - sniffer, err := setupSniffer(config, protocols, sniffer.DecodersFor(id, publisher, protocols, watcher, flows, config)) + sniffer, err := setupSniffer(id, config, protocols, sniffer.DecodersFor(id, publisher, protocols, watcher, flows, config)) if err != nil { return nil, err } @@ -196,7 +196,7 @@ func setupFlows(pipeline beat.Pipeline, watcher *procs.ProcessesWatcher, cfg con return flows.NewFlows(client.PublishAll, watcher, cfg.Flows) } -func setupSniffer(cfg config.Config, protocols *protos.ProtocolsStruct, decoders sniffer.Decoders) (*sniffer.Sniffer, error) { +func setupSniffer(id string, cfg config.Config, protocols *protos.ProtocolsStruct, decoders sniffer.Decoders) (*sniffer.Sniffer, error) { icmp, err := cfg.ICMP() if err != nil { return nil, err @@ -209,7 +209,7 @@ func setupSniffer(cfg config.Config, protocols *protos.ProtocolsStruct, decoders cfg.Interfaces[i].BpfFilter = protocols.BpfFilter(iface.WithVlans, icmp.Enabled()) } - return sniffer.New(false, "", decoders, cfg.Interfaces) + return sniffer.New(id, false, "", decoders, cfg.Interfaces) } // CheckConfig performs a dry-run creation of a Packetbeat pipeline based diff --git a/packetbeat/config/config.go b/packetbeat/config/config.go index 1b9687e5b0d6..13d00b89e44b 100644 --- a/packetbeat/config/config.go +++ b/packetbeat/config/config.go @@ -118,6 +118,7 @@ func (c Config) ICMP() (*conf.C, error) { type InterfaceConfig struct { Device string `config:"device"` PollDefaultRoute time.Duration `config:"poll_default_route"` + MetricsInterval time.Duration `config:"metrics_interval"` Type string `config:"type"` File string `config:"file"` WithVlans bool `config:"with_vlans"` diff --git a/packetbeat/docs/packetbeat-options.asciidoc b/packetbeat/docs/packetbeat-options.asciidoc index b9519caee15d..5266dac8d338 100644 --- a/packetbeat/docs/packetbeat-options.asciidoc +++ b/packetbeat/docs/packetbeat-options.asciidoc @@ -226,6 +226,23 @@ packetbeat.interfaces.type: af_packet packetbeat.interfaces.fanout_group: 1 ------------------------------------------------------------------------------ +[float] +==== `metrics_interval` + +Configure the metrics polling interval for supported interface types. Currently, +only `af_packet` is supported. + +The value must be a duration string. The default is `5s` (5 seconds). A value +less than or equal to zero will be set to the default value. + +Example: + +[source,yaml] +------------------------------------------------------------------------------ +packetbeat.interfaces.type: af_packet +packetbeat.interfaces.metrics_interval: 5s +------------------------------------------------------------------------------ + [float] ==== `auto_promisc_mode` diff --git a/packetbeat/docs/protocol-metrics-packetbeat.asciidoc b/packetbeat/docs/protocol-metrics-packetbeat.asciidoc index b877a2487390..4d9014f3a7a7 100644 --- a/packetbeat/docs/protocol-metrics-packetbeat.asciidoc +++ b/packetbeat/docs/protocol-metrics-packetbeat.asciidoc @@ -5,6 +5,21 @@ Packetbeat exposes per-protocol metrics under the < 0 && strings.HasPrefix(iface.Device, "default_route"), + id: id, decoders: decoders, log: s.log, } @@ -133,6 +138,9 @@ func New(testMode bool, _ string, decoders Decoders, interfaces []config.Interfa if iface.BufferSizeMb <= 0 { iface.BufferSizeMb = 24 } + if iface.MetricsInterval <= 0 { + iface.MetricsInterval = 5 * time.Second + } if t := iface.Type; t == "autodetect" || t == "" { iface.Type = "pcap" @@ -456,7 +464,7 @@ func (s *sniffer) open(device string) (snifferHandle, error) { case "pcap": return openPcap(device, s.filter, &s.config) case "af_packet": - return openAFPacket(device, s.filter, &s.config) + return openAFPacket(s.id, device, s.filter, &s.config) default: return nil, fmt.Errorf("unknown sniffer type for %s: %q", device, s.config.Type) } @@ -493,7 +501,7 @@ func openPcap(device, filter string, cfg *config.InterfaceConfig) (snifferHandle return h, nil } -func openAFPacket(device, filter string, cfg *config.InterfaceConfig) (snifferHandle, error) { +func openAFPacket(id, device, filter string, cfg *config.InterfaceConfig) (snifferHandle, error) { szFrame, szBlock, numBlocks, err := afpacketComputeSize(cfg.BufferSizeMb, cfg.Snaplen, os.Getpagesize()) if err != nil { return nil, err @@ -501,13 +509,15 @@ func openAFPacket(device, filter string, cfg *config.InterfaceConfig) (snifferHa timeout := 500 * time.Millisecond h, err := newAfpacketHandle(afPacketConfig{ - Device: device, - FrameSize: szFrame, - BlockSize: szBlock, - NumBlocks: numBlocks, - PollTimeout: timeout, - FanoutGroupID: cfg.FanoutGroup, - Promiscuous: cfg.EnableAutoPromiscMode, + ID: id, + Device: device, + FrameSize: szFrame, + BlockSize: szBlock, + NumBlocks: numBlocks, + PollTimeout: timeout, + MetricsInterval: cfg.MetricsInterval, + FanoutGroupID: cfg.FanoutGroup, + Promiscuous: cfg.EnableAutoPromiscMode, }) if err != nil { return nil, err diff --git a/x-pack/packetbeat/packetbeat.reference.yml b/x-pack/packetbeat/packetbeat.reference.yml index ee4f565e0c18..736c07548935 100644 --- a/x-pack/packetbeat/packetbeat.reference.yml +++ b/x-pack/packetbeat/packetbeat.reference.yml @@ -44,6 +44,11 @@ packetbeat.interfaces.internal_networks: # The default is 30 MB. #packetbeat.interfaces.buffer_size_mb: 30 +# Set the polling frequency for interface metrics. This currently only applies +# to the "afpacket" interface type. +# The default is 5s (seconds). +#packetbeat.interfaces.metrics_interval: 5s + # To scale processing across multiple Packetbeat processes, a fanout group # identifier can be specified. When `fanout_group` is used the Linux kernel splits # packets across Packetbeat instances in the same group by using a flow hash. It From 949d713359fe0ffc6a7e51244672b93f9016f693 Mon Sep 17 00:00:00 2001 From: bgvladedivac Date: Tue, 6 Jun 2023 09:41:34 -0400 Subject: [PATCH 18/52] Feature/improve tests syntax (#35667) * feature/improve-tests-syntax, update increment * feature/improve-tests-syntax, update increment * feature/improve-tests-syntax, update increment * feature/improve-tests-syntax, improve changelog * feature/feature/improve-tests-syntax, add summary to proper changelog file --- CHANGELOG-developer.next.asciidoc | 1 + filebeat/tests/load/load.py | 2 +- filebeat/tests/open-file-handlers/log_file.py | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index ae799e2592ac..f630677bf2cd 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -144,6 +144,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Add support for `credentials_json` in `gcp` module, all metricsets {pull}29584[29584] - Add gcp firestore metricset. {pull}29918[29918] - Added TESTING_FILEBEAT_FILEPATTERN option for filebeat module pytests {pull}30103[30103] +- Improve tests files with shorter statements. {pull}35667[35667] - Add gcp dataproc metricset. {pull}30008[30008] - Add Github action for linting - Add regex support for drop_fields processor. diff --git a/filebeat/tests/load/load.py b/filebeat/tests/load/load.py index 5e0fdd8979b4..12bdac849e0f 100644 --- a/filebeat/tests/load/load.py +++ b/filebeat/tests/load/load.py @@ -34,5 +34,5 @@ randomString = ''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(length)) log_message = timestamp + " " + str(count) + " " + str(uuid.uuid4()) + " " + randomString my_logger.debug(log_message) - count = count + 1 + count += 1 time.sleep(sleepTime) diff --git a/filebeat/tests/open-file-handlers/log_file.py b/filebeat/tests/open-file-handlers/log_file.py index 6299449a4cf0..12e76b8240f6 100644 --- a/filebeat/tests/open-file-handlers/log_file.py +++ b/filebeat/tests/open-file-handlers/log_file.py @@ -22,7 +22,7 @@ while True: # for i in range(0, 10000): time.sleep(random.uniform(0, 0.1)) - i = i + 1 + i += 1 # Tries to cause some more heavy peaks events = random.randrange(10) + 1 for n in range(events): From 76fae6b34cd12d47e0d7120bdb21b677846082e9 Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Wed, 7 Jun 2023 07:14:47 +0930 Subject: [PATCH 19/52] x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta: new package (#35478) --- CHANGELOG-developer.next.asciidoc | 1 + .../provider/okta/internal/okta/okta.go | 334 ++++++++++++++++++ .../provider/okta/internal/okta/okta_test.go | 281 +++++++++++++++ 3 files changed, 616 insertions(+) create mode 100644 x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta.go create mode 100644 x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta_test.go diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index f630677bf2cd..afcb74a2da65 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -156,6 +156,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Add DropFields processor to js API {pull}33458[33458] - Add support for different folders when testing data {pull}34467[34467] - Add logging of metric registration in inputmon. {pull}35647[35647] +- Add Okta API package for entity analytics. {pull}35478[35478] ==== Deprecated diff --git a/x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta.go b/x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta.go new file mode 100644 index 000000000000..ff000520b2c1 --- /dev/null +++ b/x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta.go @@ -0,0 +1,334 @@ +// Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one +// or more contributor license agreements. Licensed under the Elastic License; +// you may not use this file except in compliance with the Elastic License. + +// Package okta provides Okta API support. +package okta + +import ( + "bytes" + "context" + "encoding/json" + "fmt" + "io" + "net/http" + "net/url" + "path" + "strconv" + "strings" + "time" + + "golang.org/x/time/rate" +) + +// ISO8601 is the time format accepted by Okta queries. +const ISO8601 = "2006-01-02T15:04:05.000Z" + +// User is an Okta user's details. +// +// See https://developer.okta.com/docs/reference/api/users/#user-properties for details. +type User struct { + ID string `json:"id"` + Status string `json:"status"` + Created time.Time `json:"created"` + Activated time.Time `json:"activated"` + StatusChanged *time.Time `json:"statusChanged,omitempty"` + LastLogin *time.Time `json:"lastLogin,omitempty"` + LastUpdated time.Time `json:"lastUpdated"` + PasswordChanged *time.Time `json:"passwordChanged,omitempty"` + Type map[string]any `json:"type"` + TransitioningToStatus *string `json:"transitioningToStatus,omitempty"` + Profile Profile `json:"profile"` + Credentials *Credentials `json:"credentials,omitempty"` + Links HAL `json:"_links,omitempty"` // See https://developer.okta.com/docs/reference/api/users/#links-object for details. + Embedded HAL `json:"_embedded,omitempty"` +} + +// HAL is a JSON Hypertext Application Language object. +// +// See https://datatracker.ietf.org/doc/html/draft-kelly-json-hal-06 for details. +type HAL map[string]any + +// Profile is an Okta user's profile. +// +// See https://developer.okta.com/docs/reference/api/users/#profile-object for details. +type Profile struct { + Login string `json:"login"` + Email string `json:"email"` + SecondEmail *string `json:"secondEmail,omitempty"` + FirstName *string `json:"firstName,omitempty"` + LastName *string `json:"lastName,omitempty"` + MiddleName *string `json:"middleName,omitempty"` + HonorificPrefix *string `json:"honorificPrefix,omitempty"` + HonorificSuffix *string `json:"honorificSuffix,omitempty"` + Title *string `json:"title,omitempty"` + DisplayName *string `json:"displayName,omitempty"` + NickName *string `json:"nickName,omitempty"` + ProfileUrl *string `json:"profileUrl,omitempty"` + PrimaryPhone *string `json:"primaryPhone,omitempty"` + MobilePhone *string `json:"mobilePhone,omitempty"` + StreetAddress *string `json:"streetAddress,omitempty"` + City *string `json:"city,omitempty"` + State *string `json:"state,omitempty"` + ZipCode *string `json:"zipCode,omitempty"` + CountryCode *string `json:"countryCode,omitempty"` + PostalAddress *string `json:"postalAddress,omitempty"` + PreferredLanguage *string `json:"preferredLanguage,omitempty"` + Locale *string `json:"locale,omitempty"` + Timezone *string `json:"timezone,omitempty"` + UserType *string `json:"userType,omitempty"` + EmployeeNumber *string `json:"employeeNumber,omitempty"` + CostCenter *string `json:"costCenter,omitempty"` + Organization *string `json:"organization,omitempty"` + Division *string `json:"division,omitempty"` + Department *string `json:"department,omitempty"` + ManagerId *string `json:"managerId,omitempty"` + Manager *string `json:"manager,omitempty"` +} + +// Credentials is a redacted Okta user's credential details. Only the credential provider is retained. +// +// See https://developer.okta.com/docs/reference/api/users/#credentials-object for details. +type Credentials struct { + Password *struct{} `json:"password,omitempty"` // Contains "value"; omit but mark. + RecoveryQuestion *struct{} `json:"recovery_question,omitempty"` // Contains "question" and "answer"; omit but mark. + Provider Provider `json:"provider"` +} + +// Provider is an Okta credential provider. +// +// See https://developer.okta.com/docs/reference/api/users/#provider-object for details. +type Provider struct { + Type string `json:"type"` + Name *string `json:"name,omitempty"` +} + +// Response is a set of omit options specifying a part of the response to omit. +// +// See https://developer.okta.com/docs/reference/api/users/#content-type-header-fields-2 for details. +type Response uint8 + +const ( + // Omit the credentials sub-object from the response. + OmitCredentials Response = 1 << iota + + // Omit the following HAL links from the response: + // Change Password, Change Recovery Question, Forgot Password, Reset Password, Reset Factors, Unlock. + OmitCredentialsLinks + + // Omit the transitioningToStatus field from the response. + OmitTransitioningToStatus + + OmitNone Response = 0 +) + +var oktaResponse = [...]string{ + "omitCredentials", + "omitCredentialsLinks", + "omitTransitioningToStatus", +} + +func (o Response) String() string { + if o == OmitNone { + return "" + } + var buf strings.Builder + buf.WriteString("okta-response=") + var n int + for i, s := range &oktaResponse { + if o&(1<' })) + if err != nil { + return nil, err + } + return u.Query(), nil + } + } + } + return nil, io.EOF +} diff --git a/x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta_test.go b/x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta_test.go new file mode 100644 index 000000000000..0ff02bc456e6 --- /dev/null +++ b/x-pack/filebeat/input/entityanalytics/provider/okta/internal/okta/okta_test.go @@ -0,0 +1,281 @@ +// Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one +// or more contributor license agreements. Licensed under the Elastic License; +// you may not use this file except in compliance with the Elastic License. + +// Package okta provide Okta user API support. +package okta + +import ( + "context" + "encoding/json" + "errors" + "flag" + "fmt" + "io" + "net/http" + "net/http/httptest" + "net/url" + "os" + "testing" + "time" + + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + "golang.org/x/time/rate" +) + +var logUsers = flag.Bool("log_user_response", false, "use to allow log users returned from the API") + +func Test(t *testing.T) { + // https://developer.okta.com/docs/reference/core-okta-api/ + host, ok := os.LookupEnv("OKTA_HOST") + if !ok { + t.Skip("okta tests require ${OKTA_HOST} to be set") + } + // https://help.okta.com/en-us/Content/Topics/Security/API.htm?cshid=Security_API#Security_API + key, ok := os.LookupEnv("OKTA_TOKEN") + if !ok { + t.Skip("okta tests require ${OKTA_TOKEN} to be set") + } + + // Make a global limiter with the capacity to proceed once. + limiter := rate.NewLimiter(1, 1) + + // There are a variety of windows, the most conservative is one minute. + // The rate limit will be adjusted on the second call to the API if + // window is actually used to rate limit calculations. + const window = time.Minute + + for _, omit := range []Response{ + OmitNone, + OmitCredentials, + } { + name := "none" + if omit != OmitNone { + name = omit.String() + } + t.Run(name, func(t *testing.T) { + var me User + t.Run("me", func(t *testing.T) { + query := make(url.Values) + query.Set("limit", "200") + users, _, err := GetUserDetails(context.Background(), http.DefaultClient, host, key, "me", query, omit, limiter, window) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if len(users) != 1 { + t.Fatalf("unexpected len(users): got:%d want:1", len(users)) + } + me = users[0] + + if omit&OmitCredentials != 0 && me.Credentials != nil { + t.Errorf("unexpected credentials with %s: %#v", omit, me.Credentials) + } + + if !*logUsers { + return + } + b, err := json.Marshal(me) + if err != nil { + t.Errorf("failed to marshal user for logging: %v", err) + } + t.Logf("user: %s", b) + }) + if t.Failed() { + return + } + + t.Run("user", func(t *testing.T) { + if me.Profile.Login == "" { + b, _ := json.Marshal(me) + t.Skipf("cannot run user test without profile.login field set: %s", b) + } + + query := make(url.Values) + query.Set("limit", "200") + users, _, err := GetUserDetails(context.Background(), http.DefaultClient, host, key, me.Profile.Login, query, omit, limiter, window) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + if len(users) != 1 { + t.Fatalf("unexpected len(users): got:%d want:1", len(users)) + } + if !cmp.Equal(me, users[0]) { + t.Errorf("unexpected result:\n-'me'\n+'%s'\n%s", me.Profile.Login, cmp.Diff(me, users[0])) + } + }) + + t.Run("all", func(t *testing.T) { + query := make(url.Values) + query.Set("limit", "200") + users, _, err := GetUserDetails(context.Background(), http.DefaultClient, host, key, "", query, omit, limiter, window) + if err != nil { + t.Fatalf("unexpected error: %v", err) + } + found := false + for _, u := range users { + if cmp.Equal(me, u, cmpopts.IgnoreFields(User{}, "Links")) { + found = true + } + } + if !found { + t.Error("failed to find 'me' in user list") + } + + if !*logUsers { + return + } + b, err := json.Marshal(users) + if err != nil { + t.Errorf("failed to marshal users for logging: %v", err) + } + t.Logf("users: %s", b) + }) + + t.Run("error", func(t *testing.T) { + query := make(url.Values) + query.Set("limit", "200") + query.Add("search", `not (status pr)`) // This cannot ever be true. + _, _, err := GetUserDetails(context.Background(), http.DefaultClient, host, key, "", query, omit, limiter, window) + oktaErr := &Error{} + if !errors.As(err, &oktaErr) { + // Don't test the value of the error since it was + // determined by observation rather than documentation. + // But log below. + t.Fatalf("expected Okta API error got: %#v", err) + } + t.Logf("actual error: %v", err) + }) + }) + } +} + +func TestLocal(t *testing.T) { + // Make a global limiter with more capacity than will be set by the mock API. + // This will show the burst drop. + limiter := rate.NewLimiter(10, 10) + + // There are a variety of windows, the most conservative is one minute. + // The rate limit will be adjusted on the second call to the API if + // window is actually used to rate limit calculations. + const window = time.Minute + + const ( + key = "token" + msg = `[{"id":"userid","status":"STATUS","created":"2023-05-14T13:37:20.000Z","activated":null,"statusChanged":"2023-05-15T01:50:30.000Z","lastLogin":"2023-05-15T01:59:20.000Z","lastUpdated":"2023-05-15T01:50:32.000Z","passwordChanged":"2023-05-15T01:50:32.000Z","type":{"id":"typeid"},"profile":{"firstName":"name","lastName":"surname","mobilePhone":null,"secondEmail":null,"login":"name.surname@example.com","email":"name.surname@example.com"},"credentials":{"password":{"value":"secret"},"emails":[{"value":"name.surname@example.com","status":"VERIFIED","type":"PRIMARY"}],"provider":{"type":"OKTA","name":"OKTA"}},"_links":{"self":{"href":"https://localhost/api/v1/users/userid"}}}]` + ) + var wantUsers []User + err := json.Unmarshal([]byte(msg), &wantUsers) + if err != nil { + t.Fatalf("failed to unmarshal user data: %v", err) + } + + ts := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + u, err := url.Parse(r.RequestURI) + if err != nil { + t.Errorf("unexpected error parsing request URI: %v", err) + } + if u.Path != "/api/v1/users" { + t.Errorf("unexpected API endpoint: got:%s want:%s", u.Path, "/api/v1/users") + } + if got := r.Header.Get("accept"); got != "application/json" { + t.Errorf("unexpected Accept header: got:%s want:%s", got, "application/json") + } + if got := r.Header.Get("authorization"); got != "SSWS "+key { + t.Errorf("unexpected Authorization header: got:%s want:%s", got, "SSWS "+key) + } + + // Leave 49 remaining, reset in one minute. + w.Header().Add("x-rate-limit-limit", "50") + w.Header().Add("x-rate-limit-remaining", "49") + w.Header().Add("x-rate-limit-reset", fmt.Sprint(time.Now().Add(time.Minute).Unix())) + + // Set next link. + w.Header().Add("link", `; rel="next"`) + + fmt.Fprintln(w, msg) + })) + defer ts.Close() + u, err := url.Parse(ts.URL) + if err != nil { + t.Errorf("failed to parse server URL: %v", err) + } + host := u.Host + + query := make(url.Values) + query.Set("limit", "200") + users, h, err := GetUserDetails(context.Background(), ts.Client(), host, key, "", query, OmitNone, limiter, window) + if err != nil { + t.Fatalf("unexpected error from GetUserDetails: %v", err) + } + + if !cmp.Equal(wantUsers, users) { + t.Errorf("unexpected result:\n- want\n+ got\n%s", cmp.Diff(wantUsers, users)) + } + + lim := limiter.Limit() + if lim < 49.0/60.0 || 50.0/60.0 < lim { + t.Errorf("unexpected rate limit (outside [49/60, 50/60]: %f", lim) + } + if limiter.Burst() != 1 { // Set in GetUserDetails. + t.Errorf("unexpected burst: got:%d want:1", limiter.Burst()) + } + + next, err := Next(h) + if err != nil { + t.Errorf("unexpected error from Next: %v", err) + } + if query := next.Encode(); query != "after=opaquevalue&limit=200" { + t.Errorf("unexpected next query: got:%s want:%s", query, "after=opaquevalue&limit=200") + } +} + +var nextTests = []struct { + header http.Header + want string + wantErr error +}{ + 0: { + header: http.Header{"Link": []string{ + `; rel="self"`, + `; rel="next"`, + }}, + want: "after=1627500044869_1&limit=20", + wantErr: nil, + }, + 1: { + header: http.Header{"Link": []string{ + `;rel="self"`, + `;rel="next"`, + }}, + want: "after=1627500044869_1&limit=20", + wantErr: nil, + }, + 2: { + header: http.Header{"Link": []string{ + `; rel = "self"`, + `; rel = "next"`, + }}, + want: "after=1627500044869_1&limit=20", + wantErr: nil, + }, + 3: { + header: http.Header{"Link": []string{ + `; rel="self"`, + }}, + want: "", + wantErr: io.EOF, + }, +} + +func TestNext(t *testing.T) { + for i, test := range nextTests { + got, err := Next(test.header) + if err != test.wantErr { + t.Errorf("unexpected ok result for %d: got:%v want:%v", i, err, test.wantErr) + } + if got.Encode() != test.want { + t.Errorf("unexpected query result for %d: got:%q want:%q", i, got.Encode(), test.want) + } + } +} From a8aeb843af859fc49399762820eb45ef7eed25dc Mon Sep 17 00:00:00 2001 From: apmmachine <58790750+apmmachine@users.noreply.github.com> Date: Wed, 7 Jun 2023 10:19:37 -0400 Subject: [PATCH 20/52] chore: Updated the content of the file "/tmp/updatecli/github/elastic... (#35703) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... /beats/testing/environments/snapshot.yml" Made with ❤️️ by updatecli Co-authored-by: apmmachine --- testing/environments/snapshot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/testing/environments/snapshot.yml b/testing/environments/snapshot.yml index f3c6a64f939b..69393ae344b9 100644 --- a/testing/environments/snapshot.yml +++ b/testing/environments/snapshot.yml @@ -3,7 +3,7 @@ version: '2.3' services: elasticsearch: - image: docker.elastic.co/elasticsearch/elasticsearch:8.9.0-b4b9b632-SNAPSHOT + image: docker.elastic.co/elasticsearch/elasticsearch:8.9.0-f5346fd1-SNAPSHOT # When extend is used it merges healthcheck.tests, see: # https://github.com/docker/compose/issues/8962 # healthcheck: @@ -31,7 +31,7 @@ services: - "./docker/elasticsearch/users_roles:/usr/share/elasticsearch/config/users_roles" logstash: - image: docker.elastic.co/logstash/logstash:8.9.0-b4b9b632-SNAPSHOT + image: docker.elastic.co/logstash/logstash:8.9.0-f5346fd1-SNAPSHOT healthcheck: test: ["CMD", "curl", "-f", "http://localhost:9600/_node/stats"] retries: 600 @@ -44,7 +44,7 @@ services: - 5055:5055 kibana: - image: docker.elastic.co/kibana/kibana:8.9.0-b4b9b632-SNAPSHOT + image: docker.elastic.co/kibana/kibana:8.9.0-f5346fd1-SNAPSHOT environment: - "ELASTICSEARCH_USERNAME=kibana_system_user" - "ELASTICSEARCH_PASSWORD=testing" From 95ca24725c94123d31da01e831367dd0250835af Mon Sep 17 00:00:00 2001 From: Alex K <8418476+fearful-symmetry@users.noreply.github.com> Date: Wed, 7 Jun 2023 08:10:43 -0700 Subject: [PATCH 21/52] Create A Diagnostic Callback interface for Metricsets (#35619) * initial support for metricset diag callbacks * add helpers * format * add extra docs * error handling * try to make linter happy * format error handling correctly * more trying to make the linter happy * fix runner * fix core * remove old errors library * fix cpu * fix tests * fix tests, remove duplicate interface * fix windows tests * still fix windows tests * tinker with tests * fix list registration * add test * linter, again * plz linter --- libbeat/cfgfile/list.go | 21 ++++- libbeat/cfgfile/list_test.go | 78 ++++++++++++++----- libbeat/common/diagnostics/diagnostics.go | 42 ++++++++++ libbeat/common/diagnostics/helpers.go | 36 +++++++++ libbeat/common/reload/reload.go | 9 +++ metricbeat/beater/metricbeat.go | 6 +- metricbeat/mb/module/factory.go | 2 +- metricbeat/mb/module/runner.go | 28 ++++++- metricbeat/mb/module/runner_group.go | 23 +++++- metricbeat/mb/module/runner_group_test.go | 61 ++++++++++++++- metricbeat/mb/module/runner_test.go | 61 +++++++++++++++ metricbeat/module/system/core/core.go | 31 +++++++- metricbeat/module/system/cpu/cpu.go | 48 ++++++++++-- metricbeat/module/system/diskio/diskio.go | 31 +++++++- .../module/system/filesystem/filesystem.go | 30 +++++++ metricbeat/module/system/fsstat/fsstat.go | 30 +++++++ metricbeat/module/system/memory/memory.go | 25 +++++- x-pack/libbeat/management/managerV2.go | 22 ++++++ 18 files changed, 536 insertions(+), 48 deletions(-) create mode 100644 libbeat/common/diagnostics/diagnostics.go create mode 100644 libbeat/common/diagnostics/helpers.go diff --git a/libbeat/cfgfile/list.go b/libbeat/cfgfile/list.go index e99aacddad98..21c3ec36caef 100644 --- a/libbeat/cfgfile/list.go +++ b/libbeat/cfgfile/list.go @@ -18,14 +18,16 @@ package cfgfile import ( + "errors" + "fmt" "sync" "github.com/joeshaw/multierror" "github.com/mitchellh/hashstructure" - "github.com/pkg/errors" "github.com/elastic/beats/v7/libbeat/beat" "github.com/elastic/beats/v7/libbeat/common" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/libbeat/common/reload" "github.com/elastic/beats/v7/libbeat/publisher/pipetool" "github.com/elastic/elastic-agent-libs/config" @@ -68,7 +70,7 @@ func (r *RunnerList) Reload(configs []*reload.ConfigWithMeta) error { hash, err := HashConfig(config.Config) if err != nil { r.logger.Errorf("Unable to hash given config: %s", err) - errs = append(errs, errors.Wrap(err, "Unable to hash given config")) + errs = append(errs, fmt.Errorf("Unable to hash given config: %w", err)) continue } @@ -102,13 +104,14 @@ func (r *RunnerList) Reload(configs []*reload.ConfigWithMeta) error { for hash, config := range startList { runner, err := createRunner(r.factory, r.pipeline, config) if err != nil { - if _, ok := err.(*common.ErrInputNotFinished); ok { + errors.Is(err, &common.ErrInputNotFinished{}) + if _, ok := err.(*common.ErrInputNotFinished); ok { //nolint:errorlint // ErrInputNotFinished is a struct type, not an expression/error value // error is related to state, we should not log at error level r.logger.Debugf("Error creating runner from config: %s", err) } else { r.logger.Errorf("Error creating runner from config: %s", err) } - errs = append(errs, errors.Wrap(err, "Error creating runner from config")) + errs = append(errs, fmt.Errorf("Error creating runner from config: %w", err)) continue } @@ -116,6 +119,16 @@ func (r *RunnerList) Reload(configs []*reload.ConfigWithMeta) error { r.runners[hash] = runner runner.Start() moduleStarts.Add(1) + if config.DiagCallback != nil { + if diag, ok := runner.(diagnostics.DiagnosticReporter); ok { + r.logger.Debugf("Runner '%s' has diagnostics, attempting to register", runner) + for _, dc := range diag.Diagnostics() { + config.DiagCallback.Register(dc.Name, dc.Description, dc.Filename, dc.ContentType, dc.Callback) + } + } else { + r.logger.Debugf("Runner %s does not implement DiagnosticRunner, skipping", runner) + } + } } // NOTE: This metric tracks the number of modules in the list. The true diff --git a/libbeat/cfgfile/list_test.go b/libbeat/cfgfile/list_test.go index 75c17d279790..2555e77773c5 100644 --- a/libbeat/cfgfile/list_test.go +++ b/libbeat/cfgfile/list_test.go @@ -18,12 +18,14 @@ package cfgfile import ( + "fmt" "testing" - "github.com/pkg/errors" "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" "github.com/elastic/beats/v7/libbeat/beat" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/libbeat/common/reload" pubtest "github.com/elastic/beats/v7/libbeat/publisher/testing" conf "github.com/elastic/elastic-agent-libs/config" @@ -56,6 +58,15 @@ func (r *runner) Stop() { r.stopped = true } +func (r *runner) Diagnostics() []diagnostics.DiagnosticSetup { + return []diagnostics.DiagnosticSetup{ + { + Name: "test-callback", + Callback: func() []byte { return []byte("test") }, + }, + } +} + type runnerFactory struct { CreateRunner func(beat.PipelineConnector, *conf.C) (Runner, error) runners []Runner @@ -73,7 +84,7 @@ func (r *runnerFactory) Create(x beat.PipelineConnector, c *conf.C) (Runner, err // id < 0 is an invalid config if config.ID < 0 { - return nil, errors.New("Invalid config") + return nil, fmt.Errorf("Invalid config") } if r.CreateRunner != nil { @@ -90,20 +101,43 @@ func (r *runnerFactory) Create(x beat.PipelineConnector, c *conf.C) (Runner, err return runner, err } -func (r *runnerFactory) CheckConfig(config *conf.C) error { +func (r *runnerFactory) CheckConfig(_ *conf.C) error { return nil } +type testDiagHandler struct { + gotResp string +} + +func (r *testDiagHandler) Register(_ string, _ string, _ string, _ string, callback func() []byte) { + r.gotResp = string(callback()) +} + +func TestDiagnostics(t *testing.T) { + factory := &runnerFactory{} + list := NewRunnerList("", factory, nil) + cfg := createConfig(1) + callback := &testDiagHandler{} + cfg.DiagCallback = callback + err := list.Reload([]*reload.ConfigWithMeta{ + cfg, + }) + + require.NoError(t, err) + require.Equal(t, "test", callback.gotResp) +} + func TestNewConfigs(t *testing.T) { factory := &runnerFactory{} list := NewRunnerList("", factory, nil) - list.Reload([]*reload.ConfigWithMeta{ + err := list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(2), createConfig(3), }) + require.NoError(t, err) assert.Equal(t, len(list.copyRunnerList()), 3) } @@ -111,22 +145,24 @@ func TestReloadSameConfigs(t *testing.T) { factory := &runnerFactory{} list := NewRunnerList("", factory, nil) - list.Reload([]*reload.ConfigWithMeta{ + err := list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(2), createConfig(3), }) + require.NoError(t, err) state := list.copyRunnerList() assert.Equal(t, len(state), 3) - list.Reload([]*reload.ConfigWithMeta{ + err = list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(2), createConfig(3), }) // nothing changed + require.NoError(t, err) assert.Equal(t, state, list.copyRunnerList()) } @@ -134,21 +170,23 @@ func TestReloadDuplicateConfig(t *testing.T) { factory := &runnerFactory{} list := NewRunnerList("", factory, nil) - list.Reload([]*reload.ConfigWithMeta{ + err := list.Reload([]*reload.ConfigWithMeta{ createConfig(1), }) + require.NoError(t, err) state := list.copyRunnerList() assert.Equal(t, len(state), 1) // This can happen in Autodiscover when a container if getting restarted // but the previous one is not cleaned yet. - list.Reload([]*reload.ConfigWithMeta{ + err = list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(1), }) // nothing changed + require.NoError(t, err) assert.Equal(t, state, list.copyRunnerList()) } @@ -156,19 +194,21 @@ func TestReloadStopConfigs(t *testing.T) { factory := &runnerFactory{} list := NewRunnerList("", factory, nil) - list.Reload([]*reload.ConfigWithMeta{ + err := list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(2), createConfig(3), }) + require.NoError(t, err) assert.Equal(t, len(list.copyRunnerList()), 3) - list.Reload([]*reload.ConfigWithMeta{ + err = list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(3), }) + require.NoError(t, err) assert.Equal(t, len(list.copyRunnerList()), 2) } @@ -176,21 +216,23 @@ func TestReloadStartStopConfigs(t *testing.T) { factory := &runnerFactory{} list := NewRunnerList("", factory, nil) - list.Reload([]*reload.ConfigWithMeta{ + err := list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(2), createConfig(3), }) + require.NoError(t, err) state := list.copyRunnerList() assert.Equal(t, len(state), 3) - list.Reload([]*reload.ConfigWithMeta{ + err = list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(3), createConfig(4), }) + require.NoError(t, err) assert.Equal(t, len(list.copyRunnerList()), 3) assert.NotEqual(t, state, list.copyRunnerList()) } @@ -199,12 +241,13 @@ func TestStopAll(t *testing.T) { factory := &runnerFactory{} list := NewRunnerList("", factory, nil) - list.Reload([]*reload.ConfigWithMeta{ + err := list.Reload([]*reload.ConfigWithMeta{ createConfig(1), createConfig(2), createConfig(3), }) + require.NoError(t, err) assert.Equal(t, len(list.copyRunnerList()), 3) list.Stop() assert.Equal(t, len(list.copyRunnerList()), 0) @@ -220,14 +263,13 @@ func TestHas(t *testing.T) { config := createConfig(1) hash, err := HashConfig(config.Config) - if err != nil { - t.Fatal(err) - } + require.NoError(t, err) - list.Reload([]*reload.ConfigWithMeta{ + err = list.Reload([]*reload.ConfigWithMeta{ config, }) + require.NoError(t, err) assert.True(t, list.Has(hash)) assert.False(t, list.Has(0)) } @@ -283,7 +325,7 @@ func TestCreateRunnerAddsDynamicMeta(t *testing.T) { func createConfig(id int64) *reload.ConfigWithMeta { c := conf.NewConfig() - c.SetInt("id", -1, id) + _ = c.SetInt("id", -1, id) return &reload.ConfigWithMeta{ Config: c, } diff --git a/libbeat/common/diagnostics/diagnostics.go b/libbeat/common/diagnostics/diagnostics.go new file mode 100644 index 000000000000..815a93065601 --- /dev/null +++ b/libbeat/common/diagnostics/diagnostics.go @@ -0,0 +1,42 @@ +// Licensed to Elasticsearch B.V. under one or more contributor +// license agreements. See the NOTICE file distributed with +// this work for additional information regarding copyright +// ownership. Elasticsearch B.V. licenses this file to you under +// the Apache License, Version 2.0 (the "License"); you may +// not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, +// software distributed under the License is distributed on an +// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +// KIND, either express or implied. See the License for the +// specific language governing permissions and limitations +// under the License. + +package diagnostics + +// DiagnosticReporter is an interface that a metricset, fileset, or runner should implement to provide additional Diagnostic data. +// A DiagnosticReporter can provide any number of diagnostic responses when requested. +type DiagnosticReporter interface { + // Diagnostics returns metadata and a callback handler. + // note that this can be called any time after a metricset has started, so implementors should not assume + // the state of a metricset/fileset when this method is called. + Diagnostics() []DiagnosticSetup +} + +// DiagnosticSetup contains the data needed to register a callback. +type DiagnosticSetup struct { + // The name of this diagnostics data result. + Name string + // A brief description of the file. + Description string + // The filename that the requester should save the body as. This value must be unique for all other diagnostics in the metricset/fileset + Filename string + // MIME/ContentType. See https://www.iana.org/assignments/media-types/media-types.xhtml + ContentType string + //Callback is called when diagnostic data is actually requested by central management. + // Callback does not return an error, and if one occours, it should be written out as the result. + Callback func() []byte +} diff --git a/libbeat/common/diagnostics/helpers.go b/libbeat/common/diagnostics/helpers.go new file mode 100644 index 000000000000..d23715ee81f5 --- /dev/null +++ b/libbeat/common/diagnostics/helpers.go @@ -0,0 +1,36 @@ +// Licensed to Elasticsearch B.V. under one or more contributor +// license agreements. See the NOTICE file distributed with +// this work for additional information regarding copyright +// ownership. Elasticsearch B.V. licenses this file to you under +// the Apache License, Version 2.0 (the "License"); you may +// not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, +// software distributed under the License is distributed on an +// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +// KIND, either express or implied. See the License for the +// specific language governing permissions and limitations +// under the License. + +package diagnostics + +import ( + "fmt" + "os" + + "github.com/elastic/elastic-agent-system-metrics/metric/system/resolve" +) + +// GetRawFileOrErrorString is a convinence method that will return either the contents of the specified file, +// or the error that results from opening the file +func GetRawFileOrErrorString(res resolve.Resolver, path string) []byte { + fullPath := res.ResolveHostFS(path) + data, err := os.ReadFile(fullPath) + if err != nil { + return []byte(fmt.Sprintf("Error fetching data from %s: %s", fullPath, err)) + } + return data +} diff --git a/libbeat/common/reload/reload.go b/libbeat/common/reload/reload.go index c3a57bc027a5..21012ad1090a 100644 --- a/libbeat/common/reload/reload.go +++ b/libbeat/common/reload/reload.go @@ -41,6 +41,9 @@ type ConfigWithMeta struct { // Meta data related to this config Meta *mapstr.Pointer + + // DiagCallback is a diagnostic handler associated with the underlying unit that maps to the config + DiagCallback DiagnosticHandler } // ReloadableList provides a method to reload the configuration of a list of entities @@ -56,6 +59,12 @@ type Reloadable interface { // ReloadableFunc wraps a custom function in order to implement the Reloadable interface. type ReloadableFunc func(config *ConfigWithMeta) error +// DiagnosticHandler is an interface used to register diagnostic callbacks with the central management system +// This mostly exists to wrap the unit RegisterDiagnostic method +type DiagnosticHandler interface { + Register(name string, description string, filename string, contentType string, callback func() []byte) +} + // Registry of reloadable objects and lists type Registry struct { sync.RWMutex diff --git a/metricbeat/beater/metricbeat.go b/metricbeat/beater/metricbeat.go index f4592bf7c9d3..cbc44f88bf57 100644 --- a/metricbeat/beater/metricbeat.go +++ b/metricbeat/beater/metricbeat.go @@ -44,9 +44,9 @@ import ( // Metricbeat implements the Beater interface for metricbeat. type Metricbeat struct { - done chan struct{} // Channel used to initiate shutdown. - stopOnce sync.Once // wraps the Stop() method - runners []module.Runner // Active list of module runners. + done chan struct{} // Channel used to initiate shutdown. + stopOnce sync.Once // wraps the Stop() method + runners []cfgfile.Runner // Active list of module runners. config Config autodiscover *autodiscover.Autodiscover diff --git a/metricbeat/mb/module/factory.go b/metricbeat/mb/module/factory.go index a82f36127bc9..be8999a84d15 100644 --- a/metricbeat/mb/module/factory.go +++ b/metricbeat/mb/module/factory.go @@ -46,7 +46,7 @@ func (r *Factory) Create(p beat.PipelineConnector, c *conf.C) (cfgfile.Runner, e return nil, err } - var runners []Runner + var runners []cfgfile.Runner for _, metricSet := range metricSets { wrapper, err := NewWrapperForMetricSet(module, metricSet, r.options...) if err != nil { diff --git a/metricbeat/mb/module/runner.go b/metricbeat/mb/module/runner.go index aefc6be9fa3a..f4848d11b299 100644 --- a/metricbeat/mb/module/runner.go +++ b/metricbeat/mb/module/runner.go @@ -19,9 +19,12 @@ package module import ( "fmt" + "path/filepath" "sync" "github.com/elastic/beats/v7/libbeat/beat" + "github.com/elastic/beats/v7/libbeat/cfgfile" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/elastic-agent-libs/monitoring" ) @@ -55,7 +58,7 @@ type Runner interface { // NewRunner returns a Runner facade. The events generated by // the Module will be published to a new publisher.Client generated from the // pubClientFactory. -func NewRunner(client beat.Client, mod *Wrapper) Runner { +func NewRunner(client beat.Client, mod *Wrapper) cfgfile.Runner { return &runner{ done: make(chan struct{}), mod: mod, @@ -93,6 +96,29 @@ func (mr *runner) Stop() { }) } +// Diagnostics implements the DiagnosticRunner for the mb/module/runner. +func (mr *runner) Diagnostics() []diagnostics.DiagnosticSetup { + msList := mr.mod.MetricSets() + responses := []diagnostics.DiagnosticSetup{} + for _, ms := range msList { + diagHandler, ok := ms.MetricSet.(diagnostics.DiagnosticReporter) + if !ok { + continue + } + // create and append a filepath specific to the module/metricset combination + // This keeps diagnostic dumps cleaner and easier to parse. + diags := diagHandler.Diagnostics() + pathPrefix := fmt.Sprintf("%s-%s", mr.mod.Name(), ms.MetricSet.Name()) + for _, diag := range diags { + fullpath := filepath.Join(pathPrefix, diag.Filename) + diag.Filename = fullpath + responses = append(responses, diag) + } + + } + return responses +} + func (mr *runner) String() string { return fmt.Sprintf("%s [metricsets=%d]", mr.mod.Name(), len(mr.mod.metricSets)) } diff --git a/metricbeat/mb/module/runner_group.go b/metricbeat/mb/module/runner_group.go index e242a0281c85..542926325f6f 100644 --- a/metricbeat/mb/module/runner_group.go +++ b/metricbeat/mb/module/runner_group.go @@ -20,18 +20,21 @@ package module import ( "strings" "sync" + + "github.com/elastic/beats/v7/libbeat/cfgfile" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" ) type runnerGroup struct { - runners []Runner + runners []cfgfile.Runner startOnce sync.Once stopOnce sync.Once } -var _ Runner = new(runnerGroup) +var _ cfgfile.Runner = new(runnerGroup) -func newRunnerGroup(runners []Runner) Runner { +func newRunnerGroup(runners []cfgfile.Runner) cfgfile.Runner { return &runnerGroup{ runners: runners, } @@ -60,3 +63,17 @@ func (rg *runnerGroup) String() string { } return "RunnerGroup{" + strings.Join(entries, ", ") + "}" } + +// Diagnostics, like the rest of the runner group methods, merely +// calls all the "client" runners and combines the results +func (rg *runnerGroup) Diagnostics() []diagnostics.DiagnosticSetup { + results := []diagnostics.DiagnosticSetup{} + for _, runner := range rg.runners { + if diagHandler, ok := runner.(diagnostics.DiagnosticReporter); ok { + diags := diagHandler.Diagnostics() + results = append(results, diags...) + } + + } + return results +} diff --git a/metricbeat/mb/module/runner_group_test.go b/metricbeat/mb/module/runner_group_test.go index dd7babee0d79..036396a31034 100644 --- a/metricbeat/mb/module/runner_group_test.go +++ b/metricbeat/mb/module/runner_group_test.go @@ -22,8 +22,11 @@ import ( "testing" "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" + "github.com/elastic/beats/v7/libbeat/cfgfile" "github.com/elastic/beats/v7/libbeat/common/atomic" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" ) const ( @@ -31,6 +34,24 @@ const ( fakeRunnerName = "fakeRunner" ) +type fakeRunnerDiag struct { + id int +} + +func (fr *fakeRunnerDiag) Start() {} +func (fr *fakeRunnerDiag) Stop() {} +func (fr *fakeRunnerDiag) String() string { + return fmt.Sprintf("%s-%d", fakeRunnerName, fr.id) +} +func (fr *fakeRunnerDiag) Diagnostics() []diagnostics.DiagnosticSetup { + return []diagnostics.DiagnosticSetup{ + { + Name: "test-diagnostic", + Callback: func() []byte { return []byte("test result") }, + }, + } +} + type fakeRunner struct { id int @@ -58,7 +79,7 @@ func TestStartStop(t *testing.T) { startCounter := atomic.NewInt(0) stopCounter := atomic.NewInt(0) - var runners []Runner + var runners []cfgfile.Runner for i := 0; i < fakeRunnersNum; i++ { runners = append(runners, &fakeRunner{ id: i, @@ -76,8 +97,44 @@ func TestStartStop(t *testing.T) { assert.Equal(t, fakeRunnersNum, stopCounter.Load()) } +func TestDiagnosticsUnsupported(t *testing.T) { + var runners []cfgfile.Runner + for i := 0; i < fakeRunnersNum; i++ { + runners = append(runners, &fakeRunner{ + id: i, + startCounter: atomic.NewInt(0), + stopCounter: atomic.NewInt(0), + }) + } + + runnerGroup := newRunnerGroup(runners) + runnerGroup.Start() + + // fakeRunner doesn't support diagnostics, make sure nothing panics/returns invalid values + diags, ok := runnerGroup.(diagnostics.DiagnosticReporter) + // the runner group does implement the interface, but should return nothing + require.True(t, ok) + res := diags.Diagnostics() + require.Empty(t, res) +} + +func TestDiagosticsSupported(t *testing.T) { + var runners []cfgfile.Runner + for i := 0; i < fakeRunnersNum; i++ { + runners = append(runners, &fakeRunnerDiag{ + id: i, + }) + } + runnerGroup := newRunnerGroup(runners) + runnerGroup.Start() + diags, ok := runnerGroup.(diagnostics.DiagnosticReporter) + require.True(t, ok) + res := diags.Diagnostics() + require.NotEmpty(t, res) +} + func TestString(t *testing.T) { - var runners []Runner + var runners []cfgfile.Runner for i := 0; i < fakeRunnersNum; i++ { runners = append(runners, &fakeRunner{ id: i, diff --git a/metricbeat/mb/module/runner_test.go b/metricbeat/mb/module/runner_test.go index bd56589ed310..d05980470b6a 100644 --- a/metricbeat/mb/module/runner_test.go +++ b/metricbeat/mb/module/runner_test.go @@ -20,15 +20,20 @@ package module_test import ( + "runtime" "testing" "github.com/elastic/beats/v7/libbeat/beat" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" pubtest "github.com/elastic/beats/v7/libbeat/publisher/testing" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/beats/v7/metricbeat/mb/module" + _ "github.com/elastic/beats/v7/metricbeat/module/system" + _ "github.com/elastic/beats/v7/metricbeat/module/system/cpu" conf "github.com/elastic/elastic-agent-libs/config" "github.com/stretchr/testify/assert" + "github.com/stretchr/testify/require" ) func TestRunner(t *testing.T) { @@ -61,6 +66,62 @@ func TestRunner(t *testing.T) { runner.Stop() } +func TestCPUDiagnostics(t *testing.T) { + pubClient, factory := newPubClientFactory() + + config, err := conf.NewConfigFrom(map[string]interface{}{ + "module": "system", + "metricsets": []string{"cpu"}, + }) + require.NoError(t, err) + + // Create a new Wrapper based on the configuration. + m, err := module.NewWrapper(config, mb.Registry, module.WithMetricSetInfo()) + if err != nil { + t.Fatal(err) + } + + runner := module.NewRunner(factory(), m) + + // First test, run before start. Shouldn't cause panics or other undefined behavior + diag, ok := runner.(diagnostics.DiagnosticReporter) + require.True(t, ok) + diags := diag.Diagnostics() + // This diagnostic set is only available on linux. + // On other OSes, the list should be empty + if runtime.GOOS == "linux" { + require.NotEmpty(t, diags) + } else { + require.Empty(t, diags) + } + + runner.Start() + assert.NotNil(t, <-pubClient.Channel) + + diag, ok = runner.(diagnostics.DiagnosticReporter) + require.True(t, ok) + diags = diag.Diagnostics() + if runtime.GOOS == "linux" { + require.NotEmpty(t, diags) + res := diags[0].Callback() + require.NotEmpty(t, res) + } else { + require.Empty(t, diags) + } + + runner.Stop() + // stop, test again. + diag, ok = runner.(diagnostics.DiagnosticReporter) + require.True(t, ok) + diags = diag.Diagnostics() + if runtime.GOOS == "linux" { + require.NotEmpty(t, diags) + } else { + require.Empty(t, diags) + } + +} + // newPubClientFactory returns a new ChanClient and a function that returns // the same Client when invoked. This simulates the return value of // Publisher.Connect. diff --git a/metricbeat/module/system/core/core.go b/metricbeat/module/system/core/core.go index 503048e9fa77..1bf2f3f3a3db 100644 --- a/metricbeat/module/system/core/core.go +++ b/metricbeat/module/system/core/core.go @@ -20,8 +20,10 @@ package core import ( - "github.com/pkg/errors" + "fmt" + "runtime" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/beats/v7/metricbeat/mb/parse" metrics "github.com/elastic/elastic-agent-system-metrics/metric/cpu" @@ -50,7 +52,7 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { opts, err := config.Validate() if err != nil { - return nil, errors.Wrap(err, "error validating config") + return nil, fmt.Errorf("error validating config: %w", err) } if config.CPUTicks != nil && *config.CPUTicks { @@ -68,14 +70,14 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { func (m *MetricSet) Fetch(report mb.ReporterV2) error { samples, err := m.cores.FetchCores() if err != nil { - return errors.Wrap(err, "failed to sample CPU core times") + return fmt.Errorf("failed to sample CPU core times: %w", err) } for id, sample := range samples { event, err := sample.Format(m.opts) if err != nil { - return errors.Wrap(err, "error formatting core data") + return fmt.Errorf("error formatting core data: %w", err) } event.Put("id", id) @@ -89,3 +91,24 @@ func (m *MetricSet) Fetch(report mb.ReporterV2) error { return nil } + +// Diagnostics implmements the DiagnosticSet interface +func (m *MetricSet) Diagnostics() []diagnostics.DiagnosticSetup { + m.Logger().Infof("got DiagnosticSetup request for system/core") + if runtime.GOOS == "linux" { + return []diagnostics.DiagnosticSetup{{ + Name: "core-stat", + Description: "/proc/stat file", + Filename: "stat", + Callback: m.getDiagData, + }} + } else { + return nil + } + +} + +func (m *MetricSet) getDiagData() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/stat") +} diff --git a/metricbeat/module/system/cpu/cpu.go b/metricbeat/module/system/cpu/cpu.go index 256a70a2e721..8eb06c2427bd 100644 --- a/metricbeat/module/system/cpu/cpu.go +++ b/metricbeat/module/system/cpu/cpu.go @@ -20,8 +20,11 @@ package cpu import ( - "github.com/pkg/errors" + "errors" + "fmt" + "runtime" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/beats/v7/metricbeat/mb/parse" "github.com/elastic/elastic-agent-libs/mapstr" @@ -52,7 +55,7 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { opts, err := config.Validate() if err != nil { - return nil, errors.Wrap(err, "error validating config") + return nil, fmt.Errorf("error validating config: %w", err) } if config.CPUTicks != nil && *config.CPUTicks { @@ -70,24 +73,24 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { func (m *MetricSet) Fetch(r mb.ReporterV2) error { sample, err := m.cpu.Fetch() if err != nil { - return errors.Wrap(err, "failed to fetch CPU times") + return fmt.Errorf("failed to fetch CPU times: %w", err) } event, err := sample.Format(m.opts) if err != nil { - return errors.Wrap(err, "error formatting metrics") + return fmt.Errorf("error formatting metrics: %w", err) } event.Put("cores", sample.CPUCount()) //generate the host fields here, since we don't want users disabling it. hostEvent, err := sample.Format(metrics.MetricOpts{NormalizedPercentages: true}) if err != nil { - return errors.Wrap(err, "error creating host fields") + return fmt.Errorf("error creating host fields: %w", err) } hostFields := mapstr.M{} err = copyFieldsOrDefault(hostEvent, hostFields, "total.norm.pct", "host.cpu.usage", 0) if err != nil { - return errors.Wrap(err, "error fetching normalized CPU percent") + return fmt.Errorf("error fetching normalized CPU percent: %w", err) } r.Event(mb.Event{ @@ -98,6 +101,39 @@ func (m *MetricSet) Fetch(r mb.ReporterV2) error { return nil } +// Diagnostics implmements the DiagnosticSet interface +func (m *MetricSet) Diagnostics() []diagnostics.DiagnosticSetup { + m.Logger().Infof("got DiagnosticSetup request for system/cpu") + if runtime.GOOS == "linux" { + return []diagnostics.DiagnosticSetup{ + { + Name: "cpu-stat", + Description: "/proc/stat file", + Filename: "stat", + Callback: m.fetchRawCPU, + }, + { + Name: "cpu-cpuinfo", + Description: "/proc/cpuinfo file", + Filename: "cpuinfo", + Callback: m.fetchCPUInfo, + }, + } + } + return nil + +} + +func (m *MetricSet) fetchRawCPU() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/stat") +} + +func (m *MetricSet) fetchCPUInfo() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/cpuinfo") +} + // copyFieldsOrDefault copies the field specified by key to the given map. It will // overwrite the key if it exists. It will update the map with a default value if // the key does not exist in the source map. diff --git a/metricbeat/module/system/diskio/diskio.go b/metricbeat/module/system/diskio/diskio.go index 5693c2458f07..e57dc19560fc 100644 --- a/metricbeat/module/system/diskio/diskio.go +++ b/metricbeat/module/system/diskio/diskio.go @@ -20,14 +20,15 @@ package diskio import ( + "fmt" "runtime" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/beats/v7/metricbeat/mb/parse" "github.com/elastic/elastic-agent-libs/mapstr" "github.com/elastic/elastic-agent-system-metrics/metric/system/diskio" - - "github.com/pkg/errors" + "github.com/elastic/elastic-agent-system-metrics/metric/system/resolve" ) func init() { @@ -72,11 +73,15 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { func (m *MetricSet) Fetch(r mb.ReporterV2) error { stats, err := diskio.IOCounters(m.includeDevices...) if err != nil { - return errors.Wrap(err, "disk io counters") + return fmt.Errorf("disk io counters: %w", err) } // Sample the current cpu counter - m.statistics.OpenSampling() + err = m.statistics.OpenSampling() + // CPU sampling does not seem to be used by any of the diskio metrics we're using. Mostly used by iostat. + if err != nil { + m.Logger().Warnf("Error in CPU sampling for diskio: %w", err) + } // Store the last cpu counter when finished defer m.statistics.CloseSampling() @@ -142,3 +147,21 @@ func (m *MetricSet) Fetch(r mb.ReporterV2) error { return nil } + +// Diagnostics implmements the DiagnosticSet interface +func (m *MetricSet) Diagnostics() []diagnostics.DiagnosticSetup { + m.Logger().Infof("got DiagnosticSetup request for system/memory") + return []diagnostics.DiagnosticSetup{ + { + Name: "diskio-diskstats", + Description: "Contents of /proc/diskstats", + Filename: "diskstats", + Callback: m.diagDiskstats, + }, + } +} + +func (m *MetricSet) diagDiskstats() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/diskstats") +} diff --git a/metricbeat/module/system/filesystem/filesystem.go b/metricbeat/module/system/filesystem/filesystem.go index 71b8b853f4f7..a3c58a19bdae 100644 --- a/metricbeat/module/system/filesystem/filesystem.go +++ b/metricbeat/module/system/filesystem/filesystem.go @@ -23,6 +23,7 @@ import ( "fmt" "strings" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/libbeat/common/transform/typeconv" "github.com/elastic/beats/v7/metricbeat/mb" @@ -105,3 +106,32 @@ func (m *MetricSet) Fetch(r mb.ReporterV2) error { } return nil } + +// Diagnostics implmements the DiagnosticSet interface +func (m *MetricSet) Diagnostics() []diagnostics.DiagnosticSetup { + m.Logger().Infof("got DiagnosticSetup request for system/memory") + return []diagnostics.DiagnosticSetup{ + { + Name: "filesystem-filesystems", + Description: "Contents of /proc/filesystems", + Filename: "filesystems", + Callback: m.filesystemsDiag, + }, + { + Name: "filesystem-mounts", + Description: "Contents of /proc/mounts", + Filename: "mounts", + Callback: m.mountsDiag, + }, + } +} + +func (m *MetricSet) filesystemsDiag() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/filesystems") +} + +func (m *MetricSet) mountsDiag() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/mounts") +} diff --git a/metricbeat/module/system/fsstat/fsstat.go b/metricbeat/module/system/fsstat/fsstat.go index a9e667242924..3d04fbfb7e99 100644 --- a/metricbeat/module/system/fsstat/fsstat.go +++ b/metricbeat/module/system/fsstat/fsstat.go @@ -24,6 +24,7 @@ import ( "runtime" "strings" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/beats/v7/metricbeat/mb/parse" "github.com/elastic/beats/v7/metricbeat/module/system/filesystem" @@ -112,3 +113,32 @@ func (m *MetricSet) Fetch(r mb.ReporterV2) error { return nil } + +// Diagnostics implmements the DiagnosticSet interface +func (m *MetricSet) Diagnostics() []diagnostics.DiagnosticSetup { + m.Logger().Infof("got DiagnosticSetup request for system/memory") + return []diagnostics.DiagnosticSetup{ + { + Name: "fsstat-filesystems", + Description: "Contents of /proc/filesystems", + Filename: "filesystems", + Callback: m.filesystemsDiag, + }, + { + Name: "fsstat-mounts", + Description: "Contents of /proc/mounts", + Filename: "mounts", + Callback: m.mountsDiag, + }, + } +} + +func (m *MetricSet) filesystemsDiag() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/filesystems") +} + +func (m *MetricSet) mountsDiag() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/mounts") +} diff --git a/metricbeat/module/system/memory/memory.go b/metricbeat/module/system/memory/memory.go index eb3c56142959..8487fcc00834 100644 --- a/metricbeat/module/system/memory/memory.go +++ b/metricbeat/module/system/memory/memory.go @@ -20,8 +20,10 @@ package memory import ( - "github.com/pkg/errors" + "fmt" + "runtime" + "github.com/elastic/beats/v7/libbeat/common/diagnostics" "github.com/elastic/beats/v7/metricbeat/mb" "github.com/elastic/beats/v7/metricbeat/mb/parse" "github.com/elastic/elastic-agent-libs/mapstr" @@ -54,7 +56,7 @@ func (m *MetricSet) Fetch(r mb.ReporterV2) error { eventRaw, err := metrics.Get(m.mod) if err != nil { - return errors.Wrap(err, "error fetching memory metrics") + return fmt.Errorf("error fetching memory metrics: %w", err) } memory := mapstr.M{} @@ -68,3 +70,22 @@ func (m *MetricSet) Fetch(r mb.ReporterV2) error { return nil } + +// Diagnostics implmements the DiagnosticSet interface +func (m *MetricSet) Diagnostics() []diagnostics.DiagnosticSetup { + m.Logger().Infof("got DiagnosticSetup request for system/memory") + if runtime.GOOS == "linux" { + return []diagnostics.DiagnosticSetup{{ + Name: "memory-meminfo", + Description: "/proc/meminfo file", + Filename: "meminfo", + Callback: m.getMemDiagnostic, + }} + } + return nil +} + +func (m *MetricSet) getMemDiagnostic() []byte { + sys := m.BaseMetricSet.Module().(resolve.Resolver) + return diagnostics.GetRawFileOrErrorString(sys, "/proc/meminfo") +} diff --git a/x-pack/libbeat/management/managerV2.go b/x-pack/libbeat/management/managerV2.go index 70db3fd88b08..e02eeb01f64c 100644 --- a/x-pack/libbeat/management/managerV2.go +++ b/x-pack/libbeat/management/managerV2.go @@ -34,6 +34,23 @@ import ( "github.com/elastic/beats/v7/libbeat/version" ) +// diagnosticHandler is a wrapper type that's a bit of a hack, the compiler won't let us send the raw unit struct, +// since there's a type disagreement with the `client.DiagnosticHook` argument, and due to licensing issues we can't import the agent client types into the reloader +type diagnosticHandler struct { + log *logp.Logger + client *client.Unit +} + +func (handler diagnosticHandler) Register(name string, description string, filename string, contentType string, callback func() []byte) { + handler.log.Infof("registering callback with %s", name) + // paranoid checking + if handler.client != nil { + handler.client.RegisterDiagnosticHook(name, description, filename, contentType, callback) + } else { + handler.log.Warnf("client handler for diag callback %s is nil", name) + } +} + // unitKey is used to identify a unique unit in a map // the `ID` of a unit in itself is not unique without its type, only `Type` + `ID` is unique type unitKey struct { @@ -689,6 +706,11 @@ func (cm *BeatV2Manager) reloadInputs(inputUnits []*client.Unit) error { if err != nil { return fmt.Errorf("failed to generate configuration for unit %s: %w", unit.ID(), err) } + // add diag callbacks for unit + // we want to add the diagnostic handler that's specific to the unit, and not the gobal diagnostic handler + for _, in := range inputCfg { + in.DiagCallback = diagnosticHandler{client: unit, log: cm.logger.Named("diagnostic-manager")} + } inputCfgs[unit.ID()] = expected.Config inputBeatCfgs = append(inputBeatCfgs, inputCfg...) } From 9287f28601822cd827e08c5fb4f9a32286761bfa Mon Sep 17 00:00:00 2001 From: Alex K <8418476+fearful-symmetry@users.noreply.github.com> Date: Wed, 7 Jun 2023 08:11:00 -0700 Subject: [PATCH 22/52] Use newer version of dbus for compatibility (#35618) * use the same version of dbus in system metricsets * add notice * try to make linter happy * try to make linter happy * Revert "try to make linter happy" This reverts commit 72d4acf8fc591ad93d647045c5f41908cdfe50e2. * more linter fixes * experiment with proper dbus test * linter, again * experiment with disabling test under integration * break apart service tests --- NOTICE.txt | 41 ++------------ go.mod | 3 +- go.sum | 1 - metricbeat/module/system/service/dbus.go | 32 +++++------ .../system/service/service_unit_test.go | 53 +++++++++++++++++++ metricbeat/module/system/users/dbus.go | 13 +++-- metricbeat/module/system/users/users.go | 16 +++--- metricbeat/module/system/users/users_test.go | 22 +------- .../module/system/users/users_unit_test.go | 47 ++++++++++++++++ 9 files changed, 136 insertions(+), 92 deletions(-) create mode 100644 metricbeat/module/system/service/service_unit_test.go create mode 100644 metricbeat/module/system/users/users_unit_test.go diff --git a/NOTICE.txt b/NOTICE.txt index 8271fce1601c..8bb5ad7c5373 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -16494,12 +16494,12 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -------------------------------------------------------------------------------- -Dependency : github.com/godbus/dbus -Version: v0.0.0-20190422162347-ade71ed3457e +Dependency : github.com/godbus/dbus/v5 +Version: v5.0.6 Licence type (autodetected): BSD-2-Clause -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/godbus/dbus@v0.0.0-20190422162347-ade71ed3457e/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/godbus/dbus/v5@v5.0.6/LICENSE: Copyright (c) 2013, Georg Reinke (), Google All rights reserved. @@ -36361,41 +36361,6 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. --------------------------------------------------------------------------------- -Dependency : github.com/godbus/dbus/v5 -Version: v5.0.6 -Licence type (autodetected): BSD-2-Clause --------------------------------------------------------------------------------- - -Contents of probable licence file $GOMODCACHE/github.com/godbus/dbus/v5@v5.0.6/LICENSE: - -Copyright (c) 2013, Georg Reinke (), Google -All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions -are met: - -1. Redistributions of source code must retain the above copyright notice, -this list of conditions and the following disclaimer. - -2. Redistributions in binary form must reproduce the above copyright -notice, this list of conditions and the following disclaimer in the -documentation and/or other materials provided with the distribution. - -THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS -"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT -LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR -A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT -HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, -SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED -TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR -PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF -LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS -SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. - - -------------------------------------------------------------------------------- Dependency : github.com/godror/knownpb Version: v0.1.0 diff --git a/go.mod b/go.mod index efd4084c8d8a..0189bd2ebd77 100644 --- a/go.mod +++ b/go.mod @@ -89,7 +89,7 @@ require ( github.com/go-sql-driver/mysql v1.6.0 github.com/go-test/deep v1.0.7 github.com/gocarina/gocsv v0.0.0-20170324095351-ffef3ffc77be - github.com/godbus/dbus v0.0.0-20190422162347-ade71ed3457e + github.com/godbus/dbus/v5 v5.0.6 github.com/godror/godror v0.33.2 github.com/gofrs/flock v0.8.1 github.com/gofrs/uuid v4.2.0+incompatible @@ -366,7 +366,6 @@ require ( cloud.google.com/go/storage v1.27.0 github.com/dlclark/regexp2 v1.4.0 // indirect github.com/docker/distribution v2.8.2+incompatible // indirect - github.com/godbus/dbus/v5 v5.0.6 // indirect github.com/google/gofuzz v1.2.0 // indirect github.com/moby/term v0.0.0-20221205130635-1aeaba878587 // indirect github.com/yuin/gopher-lua v0.0.0-20170403160031-b402f3114ec7 // indirect diff --git a/go.sum b/go.sum index b56e110efcff..907f4a7364f0 100644 --- a/go.sum +++ b/go.sum @@ -780,7 +780,6 @@ github.com/gocarina/gocsv v0.0.0-20170324095351-ffef3ffc77be h1:zXHeEEJ231bTf/IX github.com/gocarina/gocsv v0.0.0-20170324095351-ffef3ffc77be/go.mod h1:/oj50ZdPq/cUjA02lMZhijk5kR31SEydKyqah1OgBuo= github.com/goccy/go-json v0.9.11 h1:/pAaQDLHEoCq/5FFmSKBswWmK6H0e8g4159Kc/X/nqk= github.com/goccy/go-json v0.9.11/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I= -github.com/godbus/dbus v0.0.0-20190422162347-ade71ed3457e h1:BWhy2j3IXJhjCbC68FptL43tDKIq8FladmaTs3Xs7Z8= github.com/godbus/dbus v0.0.0-20190422162347-ade71ed3457e/go.mod h1:bBOAhwG1umN6/6ZUMtDFBMQR8jRg9O75tm9K00oMsK4= github.com/godbus/dbus/v5 v5.0.3/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA= diff --git a/metricbeat/module/system/service/dbus.go b/metricbeat/module/system/service/dbus.go index 87d04b6b3058..c9d56939bd1e 100644 --- a/metricbeat/module/system/service/dbus.go +++ b/metricbeat/module/system/service/dbus.go @@ -20,6 +20,7 @@ package service import ( + "context" "encoding/xml" "fmt" "os" @@ -28,8 +29,7 @@ import ( "strings" "github.com/coreos/go-systemd/v22/dbus" - dbusRaw "github.com/godbus/dbus" - "github.com/pkg/errors" + dbusRaw "github.com/godbus/dbus/v5" ) type unitFetcher func(conn *dbus.Conn, states, patterns []string) ([]dbus.UnitStatus, error) @@ -41,18 +41,18 @@ func instrospectForUnitMethods() (unitFetcher, error) { //setup a dbus connection conn, err := dbusRaw.SystemBusPrivate() if err != nil { - return nil, errors.Wrap(err, "error getting connection to system bus") + return nil, fmt.Errorf("error getting connection to system bus: %w", err) } auth := dbusRaw.AuthExternal(strconv.Itoa(os.Getuid())) err = conn.Auth([]dbusRaw.Auth{auth}) if err != nil { - return nil, errors.Wrap(err, "error authenticating") + return nil, fmt.Errorf("error authenticating: %w", err) } err = conn.Hello() if err != nil { - return nil, errors.Wrap(err, "error in Hello") + return nil, fmt.Errorf("error in Hello: %w", err) } var props string @@ -61,12 +61,12 @@ func instrospectForUnitMethods() (unitFetcher, error) { obj := conn.Object("org.freedesktop.systemd1", dbusRaw.ObjectPath("/org/freedesktop/systemd1")) err = obj.Call("org.freedesktop.DBus.Introspectable.Introspect", 0).Store(&props) if err != nil { - return nil, errors.Wrap(err, "error calling dbus") + return nil, fmt.Errorf("error calling dbus: %w", err) } unitMap, err := parseXMLAndReturnMethods(props) if err != nil { - return nil, errors.Wrap(err, "error handling XML") + return nil, fmt.Errorf("error handling XML: %w", err) } //return a function callback ordered by desirability @@ -100,11 +100,11 @@ func parseXMLAndReturnMethods(str string) (map[string]bool, error) { err := xml.Unmarshal([]byte(str), &methods) if err != nil { - return nil, errors.Wrap(err, "error unmarshalling XML") + return nil, fmt.Errorf("error unmarshalling XML: %w", err) } if len(methods.Interface) == 0 { - return nil, errors.Wrap(err, "no methods found on introspect") + return nil, fmt.Errorf("no methods found on introspect: %w", err) } methodMap := make(map[string]bool) for _, iface := range methods.Interface { @@ -120,14 +120,14 @@ func parseXMLAndReturnMethods(str string) (map[string]bool, error) { // listUnitsByPatternWrapper is a bare wrapper for the unitFetcher type func listUnitsByPatternWrapper(conn *dbus.Conn, states, patterns []string) ([]dbus.UnitStatus, error) { - return conn.ListUnitsByPatterns(states, patterns) + return conn.ListUnitsByPatternsContext(context.Background(), states, patterns) } // listUnitsFilteredWrapper wraps the dbus ListUnitsFiltered method func listUnitsFilteredWrapper(conn *dbus.Conn, states, patterns []string) ([]dbus.UnitStatus, error) { - units, err := conn.ListUnitsFiltered(states) + units, err := conn.ListUnitsFilteredContext(context.Background(), states) if err != nil { - return nil, errors.Wrap(err, "ListUnitsFiltered error") + return nil, fmt.Errorf("ListUnitsFiltered error: %w", err) } return matchUnitPatterns(patterns, units) @@ -135,14 +135,14 @@ func listUnitsFilteredWrapper(conn *dbus.Conn, states, patterns []string) ([]dbu // listUnitsWrapper wraps the dbus ListUnits method func listUnitsWrapper(conn *dbus.Conn, states, patterns []string) ([]dbus.UnitStatus, error) { - units, err := conn.ListUnits() + units, err := conn.ListUnitsContext(context.Background()) if err != nil { - return nil, errors.Wrap(err, "ListUnits error") + return nil, fmt.Errorf("ListUnits error: %w", err) } units, err = matchUnitPatterns(patterns, units) if err != nil { - return nil, errors.Wrap(err, "error matching unit patterns") + return nil, fmt.Errorf("error matching unit patterns: %w", err) } finalUnits := matchUnitState(states, units) @@ -180,7 +180,7 @@ func matchUnitPatterns(patterns []string, units []dbus.UnitStatus) ([]dbus.UnitS for _, pattern := range patterns { match, err := filepath.Match(pattern, unit.Name) if err != nil { - return nil, errors.Wrapf(err, "error matching with pattern %s", pattern) + return nil, fmt.Errorf("error matching with pattern %s: %w", pattern, err) } if match { matchUnits = append(matchUnits, unit) diff --git a/metricbeat/module/system/service/service_unit_test.go b/metricbeat/module/system/service/service_unit_test.go new file mode 100644 index 000000000000..eb299faec958 --- /dev/null +++ b/metricbeat/module/system/service/service_unit_test.go @@ -0,0 +1,53 @@ +// Licensed to Elasticsearch B.V. under one or more contributor +// license agreements. See the NOTICE file distributed with +// this work for additional information regarding copyright +// ownership. Elasticsearch B.V. licenses this file to you under +// the Apache License, Version 2.0 (the "License"); you may +// not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, +// software distributed under the License is distributed on an +// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +// KIND, either express or implied. See the License for the +// specific language governing permissions and limitations +// under the License. + +//go:build linux && !integration + +package service + +import ( + "context" + "os" + "runtime" + "testing" + + "github.com/coreos/go-systemd/v22/dbus" + "github.com/stretchr/testify/require" +) + +func TestDbusEnvConnection(t *testing.T) { + if runtime.GOOS != "linux" { + t.Skip("Test is linux-only") + } + + // Set specific env var + // This format is for the newer versions of the godbus/dbus library + // Older versions use a format with out the `path` prefix. + err := os.Setenv("DBUS_SYSTEM_BUS_ADDRESS", "unix:path=/var/run/dbus/system_bus_socket") + require.NoError(t, err) + + // call internal dbus functions + // This calls a lower-level bus library + conn, err := instrospectForUnitMethods() + require.NoError(t, err) + require.NotNil(t, conn) + + // test the higher-level systemd library + _, err = dbus.NewWithContext(context.Background()) + require.NoError(t, err) + +} diff --git a/metricbeat/module/system/users/dbus.go b/metricbeat/module/system/users/dbus.go index 6087569d28af..c2a62a1f9b4e 100644 --- a/metricbeat/module/system/users/dbus.go +++ b/metricbeat/module/system/users/dbus.go @@ -24,8 +24,7 @@ import ( "os" "strconv" - "github.com/godbus/dbus" - "github.com/pkg/errors" + "github.com/godbus/dbus/v5" ) const ( @@ -59,19 +58,19 @@ type loginSession struct { func initDbusConnection() (*dbus.Conn, error) { conn, err := dbus.SystemBusPrivate() if err != nil { - return nil, errors.Wrap(err, "error getting connection to system bus") + return nil, fmt.Errorf("error getting connection to system bus: %w", err) } auth := dbus.AuthExternal(strconv.Itoa(os.Getuid())) err = conn.Auth([]dbus.Auth{auth}) if err != nil { - return nil, errors.Wrap(err, "error authenticating") + return nil, fmt.Errorf("error authenticating: %w", err) } err = conn.Hello() if err != nil { - return nil, errors.Wrap(err, "error in Hello") + return nil, fmt.Errorf("error in Hello: %w", err) } return conn, nil @@ -85,7 +84,7 @@ func getSessionProps(conn *dbus.Conn, path dbus.ObjectPath) (sessionInfo, error) err := busObj.Call(getAll, 0, "").Store(&props) if err != nil { - return sessionInfo{}, errors.Wrap(err, "error calling DBus") + return sessionInfo{}, fmt.Errorf("error calling DBus: %w", err) } return formatSessionProps(props) @@ -156,7 +155,7 @@ func listSessions(conn *dbus.Conn) ([]loginSession, error) { var props [][]dbus.Variant if err := busObj.Call(sessionList, 0).Store(&props); err != nil { - return nil, errors.Wrap(err, "error calling dbus") + return nil, fmt.Errorf("error calling dbus: %w", err) } return formatSessionList(props) } diff --git a/metricbeat/module/system/users/users.go b/metricbeat/module/system/users/users.go index 1decd606ad38..9ad450a67b05 100644 --- a/metricbeat/module/system/users/users.go +++ b/metricbeat/module/system/users/users.go @@ -20,11 +20,11 @@ package users import ( + "fmt" "net" "strconv" - "github.com/godbus/dbus" - "github.com/pkg/errors" + "github.com/godbus/dbus/v5" "github.com/elastic/beats/v7/libbeat/common/cfgwarn" "github.com/elastic/beats/v7/metricbeat/mb" @@ -56,7 +56,7 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { conn, err := initDbusConnection() if err != nil { - return nil, errors.Wrap(err, "error connecting to dbus") + return nil, fmt.Errorf("error connecting to dbus: %w", err) } return &MetricSet{ @@ -72,11 +72,13 @@ func New(base mb.BaseMetricSet) (mb.MetricSet, error) { func (m *MetricSet) Fetch(report mb.ReporterV2) error { sessions, err := listSessions(m.conn) if err != nil { - return errors.Wrap(err, "error listing sessions") + return fmt.Errorf("error listing sessions: %w", err) } - eventMapping(m.conn, sessions, report) - + err = eventMapping(m.conn, sessions, report) + if err != nil { + return fmt.Errorf("error formatting event: %w", err) + } return nil } @@ -87,7 +89,7 @@ func eventMapping(conn *dbus.Conn, sessions []loginSession, report mb.ReporterV2 props, err := getSessionProps(conn, session.Path) if err != nil { - return errors.Wrap(err, "error getting properties") + return fmt.Errorf("error getting properties: %w", err) } event := mapstr.M{ diff --git a/metricbeat/module/system/users/users_test.go b/metricbeat/module/system/users/users_test.go index c3761575be8b..2fb3b3cc53a6 100644 --- a/metricbeat/module/system/users/users_test.go +++ b/metricbeat/module/system/users/users_test.go @@ -22,7 +22,7 @@ package users import ( "testing" - "github.com/godbus/dbus" + "github.com/godbus/dbus/v5" "github.com/stretchr/testify/assert" ) @@ -54,23 +54,3 @@ func TestFormatSession(t *testing.T) { assert.NoError(t, err) assert.Equal(t, goodOut, output) } - -func TestFormatSessionList(t *testing.T) { - testIn := [][]dbus.Variant{ - {dbus.MakeVariant("6"), dbus.MakeVariant(uint32(1000)), dbus.MakeVariant("user"), dbus.MakeVariant(""), dbus.MakeVariant(dbus.ObjectPath("/path/to/object"))}, - } - - goodOut := []loginSession{{ - ID: "6", - UID: uint32(1000), - User: "user", - Seat: "", - Path: dbus.ObjectPath("/path/to/object"), - }, - } - - output, err := formatSessionList(testIn) - assert.NoError(t, err) - assert.Equal(t, goodOut, output) - -} diff --git a/metricbeat/module/system/users/users_unit_test.go b/metricbeat/module/system/users/users_unit_test.go new file mode 100644 index 000000000000..1cbc8424b1bb --- /dev/null +++ b/metricbeat/module/system/users/users_unit_test.go @@ -0,0 +1,47 @@ +// Licensed to Elasticsearch B.V. under one or more contributor +// license agreements. See the NOTICE file distributed with +// this work for additional information regarding copyright +// ownership. Elasticsearch B.V. licenses this file to you under +// the Apache License, Version 2.0 (the "License"); you may +// not use this file except in compliance with the License. +// You may obtain a copy of the License at +// +// http://www.apache.org/licenses/LICENSE-2.0 +// +// Unless required by applicable law or agreed to in writing, +// software distributed under the License is distributed on an +// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +// KIND, either express or implied. See the License for the +// specific language governing permissions and limitations +// under the License. + +//go:build linux && !integration + +package users + +import ( + "testing" + + "github.com/godbus/dbus/v5" + "github.com/stretchr/testify/assert" +) + +func TestFormatSessionList(t *testing.T) { + testIn := [][]dbus.Variant{ + {dbus.MakeVariant("6"), dbus.MakeVariant(uint32(1000)), dbus.MakeVariant("user"), dbus.MakeVariant(""), dbus.MakeVariant(dbus.ObjectPath("/path/to/object"))}, + } + + goodOut := []loginSession{{ + ID: "6", + UID: uint32(1000), + User: "user", + Seat: "", + Path: dbus.ObjectPath("/path/to/object"), + }, + } + + output, err := formatSessionList(testIn) + assert.NoError(t, err) + assert.Equal(t, goodOut, output) + +} From 80e12f58f71a3be951fac6dc925489269ba775aa Mon Sep 17 00:00:00 2001 From: Craig MacKenzie Date: Wed, 7 Jun 2023 12:14:59 -0400 Subject: [PATCH 23/52] Add changelog for go-sysinfo hostname change. (#35709) --- CHANGELOG.next.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index a10ceba2da87..c5fe2011be2b 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -233,6 +233,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Reload Beat when TLS certificates or key files are modified. {issue}34408[34408] {pull}34416[34416] - Upgrade version of elastic-agent-autodiscover to v0.6.1 for improved memory consumption on k8s. {pull}35483[35483] - Added `orchestrator.cluster.id` and `orchestrator.cluster.name` fields to the add_cloud_metadata processor, AWS cloud provider. {pull}35182[35182] +- Lowercase reported hostnames per Elastic Common Schema (ECS) guidelines for the host.name field. Upgraded github.com/elastic/go-sysinfo to 1.11.0. {pull}35652[35652] *Auditbeat* From c81e9b2b6ec30a970902bdac055a40ed8f77df21 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Emilio=20Alvarez=20Pi=C3=B1eiro?= <95703246+emilioalvap@users.noreply.github.com> Date: Wed, 7 Jun 2023 19:16:01 +0200 Subject: [PATCH 24/52] [Heartbeat] Add nil check to diagnostics processor serializer (#35698) * Add nil check to diagnostics processor serializer * Add changelog --- CHANGELOG.next.asciidoc | 1 + libbeat/publisher/processing/default.go | 8 ++++++-- libbeat/publisher/processing/default_test.go | 8 ++++++++ 3 files changed, 15 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index c5fe2011be2b..56352d725f96 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -149,6 +149,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Fix project monitor temp directories permission to include group access. {pull}35398[35398] - Fix output pipeline exit on run_once. {pull}35376[35376] - Fix formatting issue with socket trace timeout. {pull}35434[35434] +- Fix serialization of processors when running diagnostics. {pull}35698[35698] *Heartbeat* diff --git a/libbeat/publisher/processing/default.go b/libbeat/publisher/processing/default.go index a8ec007562ea..e3a2c961a928 100644 --- a/libbeat/publisher/processing/default.go +++ b/libbeat/publisher/processing/default.go @@ -261,9 +261,13 @@ func newBuilder( // Processors returns a string description of the processor config func (b *builder) Processors() []string { procList := []string{} - for _, proc := range b.processors.list { - procList = append(procList, proc.String()) + + if b.processors != nil { + for _, proc := range b.processors.list { + procList = append(procList, proc.String()) + } } + return procList } diff --git a/libbeat/publisher/processing/default_test.go b/libbeat/publisher/processing/default_test.go index ef58dc97b8ee..6fe057850373 100644 --- a/libbeat/publisher/processing/default_test.go +++ b/libbeat/publisher/processing/default_test.go @@ -480,6 +480,14 @@ func TestProcessingClose(t *testing.T) { assert.True(t, factoryProcessor.closed) } +func TestProcessingDiagnostics(t *testing.T) { + factory, err := MakeDefaultSupport(true, nil)(beat.Info{}, logp.L(), config.NewConfig()) + require.NoError(t, err) + + p := factory.Processors() + assert.Empty(t, p) +} + func fromJSON(in string) mapstr.M { var tmp mapstr.M err := json.Unmarshal([]byte(in), &tmp) From 41e128eb97799c6b070b2d703b43816654cb8faa Mon Sep 17 00:00:00 2001 From: Lee E Hinman <57081003+leehinman@users.noreply.github.com> Date: Wed, 7 Jun 2023 10:19:25 -0700 Subject: [PATCH 25/52] [metricbeat] add healthcheck to docker-compose for integ tests (#35513) --- metricbeat/module/postgresql/docker-compose.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/metricbeat/module/postgresql/docker-compose.yml b/metricbeat/module/postgresql/docker-compose.yml index d1367aefe664..acb591bfbfcc 100644 --- a/metricbeat/module/postgresql/docker-compose.yml +++ b/metricbeat/module/postgresql/docker-compose.yml @@ -11,3 +11,8 @@ services: POSTGRES_PASSWORD: postgres ports: - 5432 + healthcheck: + test: ["CMD-SHELL", "pg_isready -U postgres -p 5432"] + interval: 5s + timeout: 5s + retries: 5 From 8c13d9ab3a9e2c4a2dbbc4458db8787c1a2f6ebd Mon Sep 17 00:00:00 2001 From: Kylie Meli Date: Wed, 7 Jun 2023 13:23:27 -0400 Subject: [PATCH 26/52] [Filebeat] Add metrics for `gcp-pubsub` input (#35614) --- CHANGELOG.next.asciidoc | 1 + .../docs/inputs/input-gcp-pubsub.asciidoc | 17 +++++++ x-pack/filebeat/input/gcppubsub/input.go | 50 +++++++++++++++---- x-pack/filebeat/input/gcppubsub/metrics.go | 48 ++++++++++++++++++ .../filebeat/input/gcppubsub/pubsub_test.go | 3 ++ 5 files changed, 110 insertions(+), 9 deletions(-) create mode 100644 x-pack/filebeat/input/gcppubsub/metrics.go diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 56352d725f96..e960210f6102 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -302,6 +302,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Add support for collecting `httpjson` metrics. {pull}35392[35392] - Add XML decoding support to CEL. {issue}34438[34438] {pull}35372[35372] - Mark CEL input as GA. {pull}35559[35559] +- Add metrics for gcp-pubsub input. {pull}35614[35614] - [GCS] Added scheduler debug logs and improved the context passing mechanism by removing them from struct params and passing them as function arguments. {pull}35674[35674] *Auditbeat* diff --git a/x-pack/filebeat/docs/inputs/input-gcp-pubsub.asciidoc b/x-pack/filebeat/docs/inputs/input-gcp-pubsub.asciidoc index 8545065416f0..69e6313cad9c 100644 --- a/x-pack/filebeat/docs/inputs/input-gcp-pubsub.asciidoc +++ b/x-pack/filebeat/docs/inputs/input-gcp-pubsub.asciidoc @@ -96,3 +96,20 @@ Default Credentials] (ADC). include::../../../../filebeat/docs/inputs/input-common-options.asciidoc[] :type!: + +[float] +=== Metrics + +This input exposes metrics under the <>. +These metrics are exposed under the `/inputs` path. They can be used to +observe the activity of the input. + +[options="header"] +|======= +| Metric | Description +| `acked_message_total` | Number of successfully ACKed messages. +| `failed_acked_message_total` | Number of failed ACKed messages. +| `nacked_message_total` | Number of NACKed messages. +| `bytes_processed_total` | Number of bytes processed. +| `processing_time` | Histogram of the elapsed time for processing an event in nanoseconds. +|======= \ No newline at end of file diff --git a/x-pack/filebeat/input/gcppubsub/input.go b/x-pack/filebeat/input/gcppubsub/input.go index f49caf3a20aa..0ab9b907d608 100644 --- a/x-pack/filebeat/input/gcppubsub/input.go +++ b/x-pack/filebeat/input/gcppubsub/input.go @@ -19,11 +19,12 @@ import ( "google.golang.org/grpc" "google.golang.org/grpc/credentials/insecure" + "github.com/mitchellh/hashstructure" + "github.com/elastic/beats/v7/filebeat/channel" "github.com/elastic/beats/v7/filebeat/input" "github.com/elastic/beats/v7/libbeat/beat" "github.com/elastic/beats/v7/libbeat/common/acker" - "github.com/elastic/beats/v7/libbeat/common/atomic" "github.com/elastic/beats/v7/libbeat/version" conf "github.com/elastic/elastic-agent-libs/config" "github.com/elastic/elastic-agent-libs/logp" @@ -51,6 +52,27 @@ func init() { } } +func configID(config *conf.C) (string, error) { + var tmp struct { + ID string `config:"id"` + } + if err := config.Unpack(&tmp); err != nil { + return "", fmt.Errorf("error extracting ID: %w", err) + } + if tmp.ID != "" { + return tmp.ID, nil + } + + var h map[string]interface{} + _ = config.Unpack(&h) + id, err := hashstructure.Hash(h, nil) + if err != nil { + return "", fmt.Errorf("can not compute ID from configuration: %w", err) + } + + return fmt.Sprintf("%16X", id), nil +} + type pubsubInput struct { config @@ -63,22 +85,23 @@ type pubsubInput struct { workerOnce sync.Once // Guarantees that the worker goroutine is only started once. workerWg sync.WaitGroup // Waits on pubsub worker goroutine. - ackedCount *atomic.Uint32 // Total number of successfully ACKed pubsub messages. + metrics *inputMetrics } // NewInput creates a new Google Cloud Pub/Sub input that consumes events from // a topic subscription. -func NewInput( - cfg *conf.C, - connector channel.Connector, - inputContext input.Context, -) (inp input.Input, err error) { +func NewInput(cfg *conf.C, connector channel.Connector, inputContext input.Context) (inp input.Input, err error) { // Extract and validate the input's configuration. conf := defaultConfig() if err = cfg.Unpack(&conf); err != nil { return nil, err } + id, err := configID(cfg) + if err != nil { + return nil, err + } + logger := logp.NewLogger("gcp.pubsub").With( "pubsub_project", conf.ProjectID, "pubsub_topic", conf.Topic, @@ -99,6 +122,9 @@ func NewInput( } }() + metrics := newInputMetrics(id, nil) + defer metrics.Close() + // If the input ever needs to be made restartable, then context would need // to be recreated with each restart. workerCtx, workerCancel := context.WithCancel(inputCtx) @@ -109,7 +135,7 @@ func NewInput( inputCtx: inputCtx, workerCtx: workerCtx, workerCancel: workerCancel, - ackedCount: atomic.NewUint32(0), + metrics: metrics, } // Build outlet for events. @@ -119,8 +145,13 @@ func NewInput( for _, priv := range privates { if msg, ok := priv.(*pubsub.Message); ok { msg.Ack() - in.ackedCount.Inc() + + in.metrics.ackedMessageCount.Inc() + in.metrics.bytesProcessedTotal.Add(uint64(len(msg.Data))) + in.metrics.processingTime.Update(time.Since(msg.PublishTime).Nanoseconds()) + in.log.Error("ACKing pub/sub event") } else { + in.metrics.failedAckedMessageCount.Inc() in.log.Error("Failed ACKing pub/sub event") } } @@ -194,6 +225,7 @@ func (in *pubsubInput) run() error { return sub.Receive(ctx, func(ctx context.Context, msg *pubsub.Message) { if ok := in.outlet.OnEvent(makeEvent(topicID, msg)); !ok { msg.Nack() + in.metrics.nackedMessageCount.Inc() in.log.Debug("OnEvent returned false. Stopping input worker.") cancel() } diff --git a/x-pack/filebeat/input/gcppubsub/metrics.go b/x-pack/filebeat/input/gcppubsub/metrics.go new file mode 100644 index 000000000000..a0968d40bc56 --- /dev/null +++ b/x-pack/filebeat/input/gcppubsub/metrics.go @@ -0,0 +1,48 @@ +// Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one +// or more contributor license agreements. Licensed under the Elastic License; +// you may not use this file except in compliance with the Elastic License. + +package gcppubsub + +import ( + "github.com/rcrowley/go-metrics" + + "github.com/elastic/beats/v7/libbeat/monitoring/inputmon" + "github.com/elastic/elastic-agent-libs/monitoring" + "github.com/elastic/elastic-agent-libs/monitoring/adapter" +) + +// inputMetrics handles the input's metric reporting. +type inputMetrics struct { + unregister func() + + ackedMessageCount *monitoring.Uint // Number of successfully ACKed messages. + failedAckedMessageCount *monitoring.Uint // Number of failed ACKed messages. + nackedMessageCount *monitoring.Uint // Number of NACKed messages. + bytesProcessedTotal *monitoring.Uint // Number of bytes processed. + processingTime metrics.Sample // Histogram of the elapsed time for processing an event in nanoseconds. +} + +func newInputMetrics(id string, optionalParent *monitoring.Registry) *inputMetrics { + reg, unreg := inputmon.NewInputRegistry(inputName, id, optionalParent) + + out := &inputMetrics{ + unregister: unreg, + ackedMessageCount: monitoring.NewUint(reg, "acked_message_total"), + failedAckedMessageCount: monitoring.NewUint(reg, "failed_acked_message_total"), + nackedMessageCount: monitoring.NewUint(reg, "nacked_message_total"), + bytesProcessedTotal: monitoring.NewUint(reg, "bytes_processed_total"), + processingTime: metrics.NewUniformSample(1024), + } + _ = adapter.NewGoMetrics(reg, "processing_time", adapter.Accept). + Register("histogram", metrics.NewHistogram(out.processingTime)) + + return out +} + +func (m *inputMetrics) Close() { + if m == nil { + return + } + m.unregister() +} diff --git a/x-pack/filebeat/input/gcppubsub/pubsub_test.go b/x-pack/filebeat/input/gcppubsub/pubsub_test.go index 123738102d29..5a20831bf814 100644 --- a/x-pack/filebeat/input/gcppubsub/pubsub_test.go +++ b/x-pack/filebeat/input/gcppubsub/pubsub_test.go @@ -460,6 +460,9 @@ func TestEndToEndACK(t *testing.T) { _, exists := got[id] assert.True(t, exists) } + + assert.EqualValues(t, input.metrics.ackedMessageCount.Get(), len(seen)) + input.Stop() out.Close() if err := group.Wait(); err != nil { From 356291009075efc9181978efdb0008b93418dd96 Mon Sep 17 00:00:00 2001 From: Andrew Cholakian Date: Wed, 7 Jun 2023 18:59:20 -0500 Subject: [PATCH 27/52] [Heartbeat] Add abort to internal trace (#35716) This change modifies the internal trace to send a message on a run_once abort due to a broken ES connection. It also improves testing and cleans up the code by using methods instead of freeform strings for consistency. This also moves logging to the trace library itself to make calling cleaner, since all a caller would do is log anyway. No changelog since this is not a user facing change. --- heartbeat/beater/heartbeat.go | 13 ++------ heartbeat/tracer/tracer.go | 57 ++++++++++++++++++++++++++------- heartbeat/tracer/tracer_test.go | 56 +++++++++++++++++++++++--------- 3 files changed, 89 insertions(+), 37 deletions(-) diff --git a/heartbeat/beater/heartbeat.go b/heartbeat/beater/heartbeat.go index ad47a545ed6c..26a58af73017 100644 --- a/heartbeat/beater/heartbeat.go +++ b/heartbeat/beater/heartbeat.go @@ -92,6 +92,7 @@ func New(b *beat.Beat, rawConfig *conf.C) (beat.Beater, error) { esClient, err := makeESClient(b.Config.Output.Config(), 3, 2*time.Second) if err != nil { if parsedConfig.RunOnce { + trace.Abort() return nil, fmt.Errorf("run_once mode fatal error: %w", err) } else { logp.L().Warnf("skipping monitor state management: %w", err) @@ -156,16 +157,8 @@ func New(b *beat.Beat, rawConfig *conf.C) (beat.Beater, error) { // Run executes the beat. func (bt *Heartbeat) Run(b *beat.Beat) error { - err := bt.trace.Write("start") - if err != nil { - logp.L().Errorf("could not start trace: %s", err) - } - defer func() { - err := bt.trace.Close() - if err != nil { - logp.L().Errorf("could not close trace: %s", err) - } - }() + bt.trace.Start() + defer bt.trace.Close() logp.L().Info("heartbeat is running! Hit CTRL-C to stop it.") groups, _ := syscall.Getgroups() diff --git a/heartbeat/tracer/tracer.go b/heartbeat/tracer/tracer.go index d9f3601069fc..7cf849c6e850 100644 --- a/heartbeat/tracer/tracer.go +++ b/heartbeat/tracer/tracer.go @@ -27,8 +27,9 @@ import ( ) type Tracer interface { - Write(string) error - Close() error + Start() + Abort() + Close() } type SockTracer struct { @@ -36,6 +37,12 @@ type SockTracer struct { sock net.Conn } +const ( + MSG_START = "start" + MSG_STOP = "stop" + MSG_ABORT = "abort" +) + func NewSockTracer(path string, wait time.Duration) (st SockTracer, err error) { st.path = path delay := time.Millisecond * 250 @@ -63,28 +70,54 @@ func NewSockTracer(path string, wait time.Duration) (st SockTracer, err error) { return st, nil } -func (st SockTracer) Write(message string) error { +func (st SockTracer) Start() { + err := st.write(MSG_START) + if err != nil { + logp.L().Errorf("could not write start trace message: %s", err) + } +} + +func (st SockTracer) Abort() { + err := st.write(MSG_ABORT) + if err != nil { + logp.L().Errorf("could not write abort trace message: %s", err) + } + st.closeSock() +} + +func (st SockTracer) Close() { + err := st.write(MSG_STOP) + if err != nil { + logp.L().Errorf("could not write stop trace message: %s", err) + } + st.closeSock() +} + +func (st SockTracer) closeSock() { + err := st.sock.Close() + if err != nil { + logp.L().Errorf("could not close trace sock: %s", err) + } +} + +func (st SockTracer) write(message string) error { // Note, we don't need to worry about partial writes here: https://pkg.go.dev/io?utm_source=godoc#Writer // an error will be returned here, which shouldn't really happen with unix sockets only _, err := st.sock.Write([]byte(message + "\n")) return err } -func (st SockTracer) Close() error { - _ = st.Write("stop") - return st.sock.Close() -} - type NoopTracer struct{} func NewNoopTracer() NoopTracer { return NoopTracer{} } -func (nt NoopTracer) Write(message string) error { - return nil +func (nt NoopTracer) Start() { +} + +func (nt NoopTracer) Abort() { } -func (nt NoopTracer) Close() error { - return nil +func (nt NoopTracer) Close() { } diff --git a/heartbeat/tracer/tracer_test.go b/heartbeat/tracer/tracer_test.go index d04eae6a0483..fc7d22762484 100644 --- a/heartbeat/tracer/tracer_test.go +++ b/heartbeat/tracer/tracer_test.go @@ -32,25 +32,51 @@ import ( ) func TestSockTracer(t *testing.T) { - sockName, err := uuid.NewRandom() - require.NoError(t, err) - sockPath := filepath.Join(os.TempDir(), sockName.String()) + t.Parallel() + tests := []struct { + name string + testF func(t *testing.T, st SockTracer, listenRes chan []string) + }{ + { + "start/stop", + func(t *testing.T, st SockTracer, listenRes chan []string) { + st.Start() + st.Close() + + got := <-listenRes + require.Equal(t, []string{MSG_START, MSG_STOP}, got) + }, + }, + { + "abort", + func(t *testing.T, st SockTracer, listenRes chan []string) { + st.Abort() + + got := <-listenRes + require.Equal(t, []string{MSG_ABORT}, got) + }, + }, + } - listenRes := make(chan []string) - go func() { - listenRes <- listenTilClosed(t, sockPath) - }() + for _, tt := range tests { + tt := tt + t.Run(tt.name, func(t *testing.T) { + t.Parallel() - st, err := NewSockTracer(sockPath, time.Second) - require.NoError(t, err) + sockName, err := uuid.NewRandom() + require.NoError(t, err) + sockPath := filepath.Join(os.TempDir(), sockName.String()) - err = st.Write("start") - require.NoError(t, err) - err = st.Close() - require.NoError(t, err) + listenRes := make(chan []string) + go func() { + listenRes <- listenTilClosed(t, sockPath) + }() - got := <-listenRes - require.Equal(t, got, []string{"start", "stop"}) + st, err := NewSockTracer(sockPath, time.Second) + require.NoError(t, err) + tt.testF(t, st, listenRes) + }) + } } func TestSockTracerWaitFail(t *testing.T) { From 2248267304feaaf6b86f0af39b61294c27f9727b Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Thu, 8 Jun 2023 10:01:25 +0930 Subject: [PATCH 28/52] x-pack/filebeat/input/httpjson: add benchmarks (#35138) * add benchmarks Also rename test cases to reduce stutter and improve test debug ergonomics. * skip flakey test --- CHANGELOG-developer.next.asciidoc | 2 + x-pack/filebeat/input/httpjson/input_test.go | 2199 +++++++++--------- 2 files changed, 1135 insertions(+), 1066 deletions(-) diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index afcb74a2da65..f3804e49440d 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -81,6 +81,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Fix the integration testcase docker port mapping for sql and oracle modules {pull}34221[34221] - Fix the ingest pipeline for mysql slowlog to parse schema name with dash {pull}34371[34372] - Fix the multiple host support for mongodb module {pull}34624[34624] +- Skip HTTPJSON flakey test. {issue}34929[34929] {pull}35138[35138] ==== Added @@ -157,6 +158,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Add support for different folders when testing data {pull}34467[34467] - Add logging of metric registration in inputmon. {pull}35647[35647] - Add Okta API package for entity analytics. {pull}35478[35478] +- Add benchmarking to HTTPJSON input testing. {pull}35138[35138] ==== Deprecated diff --git a/x-pack/filebeat/input/httpjson/input_test.go b/x-pack/filebeat/input/httpjson/input_test.go index 184705207478..619d451561d9 100644 --- a/x-pack/filebeat/input/httpjson/input_test.go +++ b/x-pack/filebeat/input/httpjson/input_test.go @@ -26,1164 +26,1167 @@ import ( "github.com/elastic/elastic-agent-libs/mapstr" ) -func TestInput(t *testing.T) { - testCases := []struct { - name string - setupServer func(*testing.T, http.HandlerFunc, map[string]interface{}) - baseConfig map[string]interface{} - handler http.HandlerFunc - expected []string - expectedFile string - }{ - { - name: "Test simple GET request", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test simple HTTPS GET request", - setupServer: newTestServer(httptest.NewTLSServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "request.ssl.verification_mode": "none", - }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test request honors rate limit", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "http_method": http.MethodGet, - "request.rate_limit.limit": `[[.last_response.header.Get "X-Rate-Limit-Limit"]]`, - "request.rate_limit.remaining": `[[.last_response.header.Get "X-Rate-Limit-Remaining"]]`, - "request.rate_limit.reset": `[[.last_response.header.Get "X-Rate-Limit-Reset"]]`, - }, - handler: rateLimitHandler(), - expected: []string{`{"hello":"world"}`}, - }, - { - name: "Test request retries when failed", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, +var testCases = []struct { + name string + setupServer func(testing.TB, http.HandlerFunc, map[string]interface{}) + baseConfig map[string]interface{} + handler http.HandlerFunc + expected []string + expectedFile string + + skipReason string +}{ + { + name: "simple_GET_request", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "simple_HTTPS_GET_request", + setupServer: newTestServer(httptest.NewTLSServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "request.ssl.verification_mode": "none", + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "request_honors_rate_limit", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "http_method": http.MethodGet, + "request.rate_limit.limit": `[[.last_response.header.Get "X-Rate-Limit-Limit"]]`, + "request.rate_limit.remaining": `[[.last_response.header.Get "X-Rate-Limit-Remaining"]]`, + "request.rate_limit.reset": `[[.last_response.header.Get "X-Rate-Limit-Reset"]]`, + }, + handler: rateLimitHandler(), + expected: []string{`{"hello":"world"}`}, + }, + { + name: "request_retries_when_failed", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + }, + handler: retryHandler(), + expected: []string{`{"hello":"world"}`}, + }, + { + name: "POST_request_with_body", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodPost, + "request.body": map[string]interface{}{ + "test": "abc", }, - handler: retryHandler(), - expected: []string{`{"hello":"world"}`}, - }, - { - name: "Test POST request with body", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodPost, - "request.body": map[string]interface{}{ - "test": "abc", - }, + }, + handler: defaultHandler(http.MethodPost, `{"test":"abc"}`, ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "repeated_POST_requests", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": "100ms", + "request.method": http.MethodPost, + }, + handler: defaultHandler(http.MethodPost, "", ""), + expected: []string{ + `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`, + `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`, + }, + }, + { + name: "split_by_json_objects_array", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.hello", }, - handler: defaultHandler(http.MethodPost, `{"test":"abc"}`, ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test repeated POST requests", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": "100ms", - "request.method": http.MethodPost, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"world":"moon"}`, `{"space":[{"cake":"pumpkin"}]}`}, + }, + { + name: "split_by_json_objects_array_with_keep_parent", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.hello", + "keep_parent": true, }, - handler: defaultHandler(http.MethodPost, "", ""), - expected: []string{ - `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`, - `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"hello":{"space":[{"cake":"pumpkin"}]}}`, + }, + }, + { + name: "split_on_empty_array_without_ignore_empty_value", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.response.empty", }, }, - { - name: "Test split by json objects array", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.hello", - }, + handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":[]}}`), + expected: []string{`{"response":{"empty":[]}}`}, + }, + { + name: "split_on_empty_array_with_ignore_empty_value", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.response.empty", + "ignore_empty_value": true, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"world":"moon"}`, `{"space":[{"cake":"pumpkin"}]}`}, - }, - { - name: "Test split by json objects array with keep parent", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.hello", - "keep_parent": true, - }, + }, + handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":[]}}`), + expected: nil, + }, + { + name: "split_on_null_field_with_ignore_empty_value_keeping_parent", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.response.empty", + "ignore_empty_value": true, + "keep_parent": true, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"hello":{"space":[{"cake":"pumpkin"}]}}`, + }, + handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":null}}`), + expected: []string{`{"response":{"empty":null}}`}, + }, + { + name: "split_on_empty_array_with_ignore_empty_value_keeping_parent", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.response.empty", + "ignore_empty_value": true, + "keep_parent": true, }, }, - { - name: "Test split on empty array without ignore_empty_value", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.response.empty", - }, + handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":[]}}`), + expected: []string{`{"response":{"empty":[]}}`}, + }, + { + name: "split_on_null_field_at_root_with_ignore_empty_value_keeping_parent", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.response", + "ignore_empty_value": true, + "keep_parent": true, }, - handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":[]}}`), - expected: []string{`{"response":{"empty":[]}}`}, - }, - { - name: "Test split on empty array with ignore_empty_value", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.response.empty", - "ignore_empty_value": true, - }, + }, + handler: defaultHandler(http.MethodGet, "", `{"response":null,"other":"data"}`), + expected: []string{`{"other":"data","response":null}`}, + }, + { + name: "split_on_empty_array_at_root_with_ignore_empty_value_keeping_parent", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.response", + "ignore_empty_value": true, + "keep_parent": true, }, - handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":[]}}`), - expected: nil, - }, - { - name: "Test split on null field with ignore_empty_value keeping parent", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.response.empty", - "ignore_empty_value": true, - "keep_parent": true, + }, + handler: defaultHandler(http.MethodGet, "", `{"response":[],"other":"data"}`), + expected: []string{`{"other":"data","response":[]}`}, + }, + { + name: "nested_split", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.hello", + "split": map[string]interface{}{ + "target": "body.space", + "keep_parent": true, }, }, - handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":null}}`), - expected: []string{`{"response":{"empty":null}}`}, - }, - { - name: "Test split on empty array with ignore_empty_value keeping parent", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.response.empty", - "ignore_empty_value": true, - "keep_parent": true, - }, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{ + `{"world":"moon"}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "split_events_by_not_found", + setupServer: newTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.unknown", }, - handler: defaultHandler(http.MethodGet, "", `{"response":{"empty":[]}}`), - expected: []string{`{"response":{"empty":[]}}`}, - }, - { - name: "Test split on null field at root with ignore_empty_value keeping parent", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.response", - "ignore_empty_value": true, - "keep_parent": true, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{}, + }, + { + name: "date_cursor", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerRequestTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + // mock timeNow func to return a fixed value + timeNow = func() time.Time { + t, _ := time.Parse(time.RFC3339, "2002-10-02T15:00:00Z") + return t + } + + server := httptest.NewServer(h) + config["request.url"] = server.URL + t.Cleanup(server.Close) + t.Cleanup(func() { timeNow = time.Now }) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.params.$filter", + "value": "alertCreationTime ge [[.cursor.timestamp]]", + "default": `alertCreationTime ge [[formatDate (now (parseDuration "-10m")) "2006-01-02T15:04:05Z"]]`, + }, }, }, - handler: defaultHandler(http.MethodGet, "", `{"response":null,"other":"data"}`), - expected: []string{`{"other":"data","response":null}`}, - }, - { - name: "Test split on empty array at root with ignore_empty_value keeping parent", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.response", - "ignore_empty_value": true, - "keep_parent": true, + "cursor": map[string]interface{}{ + "timestamp": map[string]interface{}{ + "value": `[[index .last_response.body "@timestamp"]]`, }, }, - handler: defaultHandler(http.MethodGet, "", `{"response":[],"other":"data"}`), - expected: []string{`{"other":"data","response":[]}`}, - }, - { - name: "Test nested split", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.hello", - "split": map[string]interface{}{ - "target": "body.space", - "keep_parent": true, + }, + handler: dateCursorHandler(), + expected: []string{ + `{"@timestamp":"2002-10-02T15:00:00Z","foo":"bar"}`, + `{"@timestamp":"2002-10-02T15:00:01Z","foo":"bar"}`, + `{"@timestamp":"2002-10-02T15:00:02Z","foo":"bar"}`, + }, + }, + { + name: "tracer_filename_sanitization", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerRequestTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + // mock timeNow func to return a fixed value + timeNow = func() time.Time { + t, _ := time.Parse(time.RFC3339, "2002-10-02T15:00:00Z") + return t + } + + server := httptest.NewServer(h) + config["request.url"] = server.URL + t.Cleanup(server.Close) + t.Cleanup(func() { timeNow = time.Now }) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.params.$filter", + "value": "alertCreationTime ge [[.cursor.timestamp]]", + "default": `alertCreationTime ge [[formatDate (now (parseDuration "-10m")) "2006-01-02T15:04:05Z"]]`, }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{ - `{"world":"moon"}`, - `{"space":{"cake":"pumpkin"}}`, - }, - }, - { - name: "Test split events by not found", - setupServer: newTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.unknown", + "cursor": map[string]interface{}{ + "timestamp": map[string]interface{}{ + "value": `[[index .last_response.body "@timestamp"]]`, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{}, - }, - { - name: "Test date cursor", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerRequestTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - // mock timeNow func to return a fixed value - timeNow = func() time.Time { - t, _ := time.Parse(time.RFC3339, "2002-10-02T15:00:00Z") - return t - } - - server := httptest.NewServer(h) - config["request.url"] = server.URL - t.Cleanup(server.Close) - t.Cleanup(func() { timeNow = time.Now }) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "request.transforms": []interface{}{ + "request.tracer.filename": "logs/http-request-trace-*.ndjson", + }, + handler: dateCursorHandler(), + expected: []string{ + `{"@timestamp":"2002-10-02T15:00:00Z","foo":"bar"}`, + `{"@timestamp":"2002-10-02T15:00:01Z","foo":"bar"}`, + `{"@timestamp":"2002-10-02T15:00:02Z","foo":"bar"}`, + }, + expectedFile: filepath.Join("logs", "http-request-trace-httpjson-foo-eb837d4c-5ced-45ed-b05c-de658135e248_https_somesource_someapi.ndjson"), + }, + { + name: "pagination", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerPaginationTransforms() + registerResponseTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + server := httptest.NewServer(h) + config["request.url"] = server.URL + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": time.Millisecond, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.items", + "transforms": []interface{}{ map[string]interface{}{ "set": map[string]interface{}{ - "target": "url.params.$filter", - "value": "alertCreationTime ge [[.cursor.timestamp]]", - "default": `alertCreationTime ge [[formatDate (now (parseDuration "-10m")) "2006-01-02T15:04:05Z"]]`, + "target": "body.page", + "value": "[[.last_response.page]]", }, }, }, - "cursor": map[string]interface{}{ - "timestamp": map[string]interface{}{ - "value": `[[index .last_response.body "@timestamp"]]`, + }, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.params.page", + "value": "[[.last_response.body.nextPageToken]]", + "fail_on_template_error": true, }, }, }, - handler: dateCursorHandler(), - expected: []string{ - `{"@timestamp":"2002-10-02T15:00:00Z","foo":"bar"}`, - `{"@timestamp":"2002-10-02T15:00:01Z","foo":"bar"}`, - `{"@timestamp":"2002-10-02T15:00:02Z","foo":"bar"}`, - }, }, - { - name: "Test tracer filename sanitization", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerRequestTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - // mock timeNow func to return a fixed value - timeNow = func() time.Time { - t, _ := time.Parse(time.RFC3339, "2002-10-02T15:00:00Z") - return t - } + handler: paginationHandler(), + expected: []string{ + `{"foo":"a","page":"0"}`, `{"foo":"b","page":"1"}`, `{"foo":"c","page":"0"}`, `{"foo":"d","page":"0"}`, + `{"foo":"a","page":"0"}`, `{"foo":"b","page":"1"}`, `{"foo":"c","page":"0"}`, `{"foo":"d","page":"0"}`, + }, + }, + { + skipReason: "flakey test - see https://github.com/elastic/beats/issues/34929", - server := httptest.NewServer(h) - config["request.url"] = server.URL - t.Cleanup(server.Close) - t.Cleanup(func() { timeNow = time.Now }) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "request.transforms": []interface{}{ + name: "first_event", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerPaginationTransforms() + registerResponseTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + server := httptest.NewServer(h) + config["request.url"] = server.URL + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.items", + "transforms": []interface{}{ map[string]interface{}{ "set": map[string]interface{}{ - "target": "url.params.$filter", - "value": "alertCreationTime ge [[.cursor.timestamp]]", - "default": `alertCreationTime ge [[formatDate (now (parseDuration "-10m")) "2006-01-02T15:04:05Z"]]`, + "target": "body.first", + "value": "[[.cursor.first]]", + "default": "none", }, }, }, - "cursor": map[string]interface{}{ - "timestamp": map[string]interface{}{ - "value": `[[index .last_response.body "@timestamp"]]`, + }, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.params.page", + "value": "[[.last_response.body.nextPageToken]]", + "fail_on_template_error": true, }, }, - "request.tracer.filename": "logs/http-request-trace-*.ndjson", - }, - handler: dateCursorHandler(), - expected: []string{ - `{"@timestamp":"2002-10-02T15:00:00Z","foo":"bar"}`, - `{"@timestamp":"2002-10-02T15:00:01Z","foo":"bar"}`, - `{"@timestamp":"2002-10-02T15:00:02Z","foo":"bar"}`, }, - expectedFile: filepath.Join("logs", "http-request-trace-httpjson-foo-eb837d4c-5ced-45ed-b05c-de658135e248_https_somesource_someapi.ndjson"), - }, - { - name: "Test pagination", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerPaginationTransforms() - registerResponseTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - server := httptest.NewServer(h) - config["request.url"] = server.URL - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": time.Millisecond, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.items", - "transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.page", - "value": "[[.last_response.page]]", - }, - }, - }, + "cursor": map[string]interface{}{ + "first": map[string]interface{}{ + "value": "[[.first_event.foo]]", }, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.params.page", - "value": "[[.last_response.body.nextPageToken]]", - "fail_on_template_error": true, - }, + }, + }, + handler: paginationHandler(), + expected: []string{`{"first":"none", "foo":"a"}`, `{"first":"a", "foo":"b"}`, `{"first":"a", "foo":"c"}`, `{"first":"c", "foo":"d"}`}, + }, + { + name: "pagination_with_array_response", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerPaginationTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + server := httptest.NewServer(h) + config["request.url"] = server.URL + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.params.page", + "value": `[[index (index .last_response.body 0) "nextPageToken"]]`, }, }, }, - handler: paginationHandler(), - expected: []string{ - `{"foo":"a","page":"0"}`, `{"foo":"b","page":"1"}`, `{"foo":"c","page":"0"}`, `{"foo":"d","page":"0"}`, - `{"foo":"a","page":"0"}`, `{"foo":"b","page":"1"}`, `{"foo":"c","page":"0"}`, `{"foo":"d","page":"0"}`, - }, }, - { - name: "Test first event", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerPaginationTransforms() - registerResponseTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - server := httptest.NewServer(h) - config["request.url"] = server.URL - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.items", - "transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.first", - "value": "[[.cursor.first]]", - "default": "none", - }, - }, + handler: paginationArrayHandler(), + expected: []string{`{"nextPageToken":"bar","foo":"bar"}`, `{"foo":"bar"}`, `{"foo":"bar"}`}, + }, + { + name: "oauth2", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + server := httptest.NewServer(h) + config["request.url"] = server.URL + config["auth.oauth2.token_url"] = server.URL + "/token" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodPost, + "auth.oauth2.client.id": "a_client_id", + "auth.oauth2.client.secret": "a_client_secret", + "auth.oauth2.endpoint_params": map[string]interface{}{ + "param1": "v1", + }, + "auth.oauth2.scopes": []string{"scope1", "scope2"}, + }, + handler: oauth2Handler, + expected: []string{`{"hello": "world"}`}, + }, + { + name: "request_transforms_can_access_state_from_previous_transforms", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerRequestTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + server := httptest.NewServer(h) + config["request.url"] = server.URL + "/test-path" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodPost, + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "header.X-Foo", + "value": "foo", }, }, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.params.page", - "value": "[[.last_response.body.nextPageToken]]", - "fail_on_template_error": true, - }, + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.bar", + "value": `[[.header.Get "X-Foo"]]`, }, }, - "cursor": map[string]interface{}{ - "first": map[string]interface{}{ - "value": "[[.first_event.foo]]", + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.url.path", + "value": `[[.url.Path]]`, }, }, }, - handler: paginationHandler(), - expected: []string{`{"first":"none", "foo":"a"}`, `{"first":"a", "foo":"b"}`, `{"first":"a", "foo":"c"}`, `{"first":"c", "foo":"d"}`}, - }, - { - name: "Test pagination with array response", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerPaginationTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - server := httptest.NewServer(h) - config["request.url"] = server.URL - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.params.page", - "value": `[[index (index .last_response.body 0) "nextPageToken"]]`, - }, + }, + handler: defaultHandler(http.MethodPost, `{"bar":"foo","url":{"path":"/test-path"}}`, ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "response_transforms_can't_access_request_state_from_previous_transforms", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerRequestTransforms() + registerResponseTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + server := httptest.NewServer(h) + config["request.url"] = server.URL + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 10, + "request.method": http.MethodGet, + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "header.X-Foo", + "value": "foo", }, }, }, - handler: paginationArrayHandler(), - expected: []string{`{"nextPageToken":"bar","foo":"bar"}`, `{"foo":"bar"}`, `{"foo":"bar"}`}, - }, - { - name: "Test oauth2", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - server := httptest.NewServer(h) - config["request.url"] = server.URL - config["auth.oauth2.token_url"] = server.URL + "/token" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodPost, - "auth.oauth2.client.id": "a_client_id", - "auth.oauth2.client.secret": "a_client_secret", - "auth.oauth2.endpoint_params": map[string]interface{}{ - "param1": "v1", - }, - "auth.oauth2.scopes": []string{"scope1", "scope2"}, - }, - handler: oauth2Handler, - expected: []string{`{"hello": "world"}`}, - }, - { - name: "Test request transforms can access state from previous transforms", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerRequestTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - server := httptest.NewServer(h) - config["request.url"] = server.URL + "/test-path" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodPost, - "request.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "header.X-Foo", - "value": "foo", - }, - }, - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.bar", - "value": `[[.header.Get "X-Foo"]]`, - }, - }, - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.url.path", - "value": `[[.url.Path]]`, - }, + "response.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.bar", + "value": `[[.header.Get "X-Foo"]]`, }, }, }, - handler: defaultHandler(http.MethodPost, `{"bar":"foo","url":{"path":"/test-path"}}`, ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test response transforms can't access request state from previous transforms", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerRequestTransforms() - registerResponseTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - server := httptest.NewServer(h) - config["request.url"] = server.URL - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 10, - "request.method": http.MethodGet, - "request.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "header.X-Foo", - "value": "foo", - }, - }, - }, - "response.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.bar", - "value": `[[.header.Get "X-Foo"]]`, - }, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "simple_Chain_GET_request", + setupServer: newChainTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 10, + "request.method": http.MethodGet, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test simple Chain GET request", - setupServer: newChainTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 10, - "request.method": http.MethodGet, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - }, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "multiple_Chain_GET_request", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"records":[{"id":1}]}`) + case "/1": + fmt.Fprintln(w, `{"file_name": "file_1"}`) + case "/file_1": + fmt.Fprintln(w, `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.records[:].id" + config["chain.1.step.request.url"] = server.URL + "/$.file_name" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 10, + "request.method": http.MethodGet, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", }, }, - }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test multiple Chain GET request", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"records":[{"id":1}]}`) - case "/1": - fmt.Fprintln(w, `{"file_name": "file_1"}`) - case "/file_1": - fmt.Fprintln(w, `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.records[:].id" - config["chain.1.step.request.url"] = server.URL + "/$.file_name" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 10, - "request.method": http.MethodGet, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - }, - }, - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.file_name", - }, + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.file_name", }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test date cursor while using chain", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerRequestTransforms() - t.Cleanup(func() { registeredTransforms = newRegistry() }) - // mock timeNow func to return a fixed value - timeNow = func() time.Time { - t, _ := time.Parse(time.RFC3339, "2002-10-02T15:00:00Z") - return t - } + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "date_cursor_while_using_chain", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerRequestTransforms() + t.Cleanup(func() { registeredTransforms = newRegistry() }) + // mock timeNow func to return a fixed value + timeNow = func() time.Time { + t, _ := time.Parse(time.RFC3339, "2002-10-02T15:00:00Z") + return t + } - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"records":[{"id":1}]}`) - case "/1": - fmt.Fprintln(w, `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.records[:].id" - t.Cleanup(server.Close) - t.Cleanup(func() { timeNow = time.Now }) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "request.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.params.$filter", - "value": "alertCreationTime ge [[.cursor.timestamp]]", - "default": `alertCreationTime ge [[formatDate (now (parseDuration "-10m")) "2006-01-02T15:04:05Z"]]`, - }, + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"records":[{"id":1}]}`) + case "/1": + fmt.Fprintln(w, `{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.records[:].id" + t.Cleanup(server.Close) + t.Cleanup(func() { timeNow = time.Now }) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.params.$filter", + "value": "alertCreationTime ge [[.cursor.timestamp]]", + "default": `alertCreationTime ge [[formatDate (now (parseDuration "-10m")) "2006-01-02T15:04:05Z"]]`, }, }, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - }, + }, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", }, }, - "cursor": map[string]interface{}{ - "timestamp": map[string]interface{}{ - "value": `[[index .last_response.body "@timestamp"]]`, - }, + }, + "cursor": map[string]interface{}{ + "timestamp": map[string]interface{}{ + "value": `[[index .last_response.body "@timestamp"]]`, }, }, - handler: dateCursorHandler(), - expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, - }, - { - name: "Test split by json objects array in chain", - setupServer: newChainTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - "response.split": map[string]interface{}{ - "target": "body.hello", - }, + }, + handler: dateCursorHandler(), + expected: []string{`{"hello":[{"world":"moon"},{"space":[{"cake":"pumpkin"}]}]}`}, + }, + { + name: "split_by_json_objects_array_in_chain", + setupServer: newChainTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", + "response.split": map[string]interface{}{ + "target": "body.hello", }, }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{`{"world":"moon"}`, `{"space":[{"cake":"pumpkin"}]}`}, - }, - { - name: "Test split by json objects array with keep parent in chain", - setupServer: newChainTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - "response.split": map[string]interface{}{ - "target": "body.hello", - "keep_parent": true, - }, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{`{"world":"moon"}`, `{"space":[{"cake":"pumpkin"}]}`}, + }, + { + name: "split_by_json_objects_array_with_keep_parent_in_chain", + setupServer: newChainTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", + "response.split": map[string]interface{}{ + "target": "body.hello", + "keep_parent": true, }, }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"hello":{"space":[{"cake":"pumpkin"}]}}`, - }, }, - { - name: "Test nested split in chain", - setupServer: newChainTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.split": map[string]interface{}{ - "target": "body.hello", - }, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - "response.split": map[string]interface{}{ - "target": "body.hello", - "split": map[string]interface{}{ - "target": "body.space", - "keep_parent": true, - }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"hello":{"space":[{"cake":"pumpkin"}]}}`, + }, + }, + { + name: "nested_split_in_chain", + setupServer: newChainTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.split": map[string]interface{}{ + "target": "body.hello", + }, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", + "response.split": map[string]interface{}{ + "target": "body.hello", + "split": map[string]interface{}{ + "target": "body.space", + "keep_parent": true, }, }, }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{ - `{"world":"moon"}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test pagination when used with chaining", - setupServer: newChainPaginationTestServer(httptest.NewServer), - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.value", - "value": "[[.last_response.body.nextLink]]", - "fail_on_template_error": true, - }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{ + `{"world":"moon"}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "pagination_when_used_with_chaining", + setupServer: newChainPaginationTestServer(httptest.NewServer), + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.value", + "value": "[[.last_response.body.nextLink]]", + "fail_on_template_error": true, }, }, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.records[:].id", - }, + }, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.records[:].id", }, }, }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test replace_with clause and first_response object", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"exportId":"2212"}`) - case "/2212": - fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) - case "/2212/1": - fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) - case "/2212/2": - fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId" - config["chain.1.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.save_first_response": true, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.exportId", - }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "replace_with_clause_and_first_response_object", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"exportId":"2212"}`) + case "/2212": + fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) + case "/2212/1": + fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) + case "/2212/2": + fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId" + config["chain.1.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.save_first_response": true, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.exportId", }, - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.files[:].id", - "replace_with": "$.exportId,.first_response.body.exportId", - }, + }, + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.files[:].id", + "replace_with": "$.exportId,.first_response.body.exportId", }, }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test replace_with clause with hardcoded value_1", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) - case "/2212/1": - fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) - case "/2212/2": - fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.files[:].id", - "replace_with": "$.exportId,2212", - }, + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "replace_with_clause_with_hardcoded_value_1", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) + case "/2212/1": + fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) + case "/2212/2": + fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.files[:].id", + "replace_with": "$.exportId,2212", }, }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test replace_with clause with hardcoded value (no dot prefix)", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) - case "/first_response.body.id/1": - fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) - case "/first_response.body.id/2": - fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.save_first_response": true, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.files[:].id", - "replace_with": "$.exportId,first_response.body.id", - }, + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "replace_with_clause_with_hardcoded_value_(no_dot_prefix)", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) + case "/first_response.body.id/1": + fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) + case "/first_response.body.id/2": + fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.save_first_response": true, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.files[:].id", + "replace_with": "$.exportId,first_response.body.id", }, }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test replace_with clause with hardcoded value (more than one dot prefix)", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) - case "/..first_response.body.id/1": - fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) - case "/..first_response.body.id/2": - fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.save_first_response": true, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.files[:].id", - "replace_with": "$.exportId,..first_response.body.id", - }, + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "replace_with_clause_with_hardcoded_value_(more_than_one_dot_prefix)", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) + case "/..first_response.body.id/1": + fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) + case "/..first_response.body.id/2": + fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.save_first_response": true, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.files[:].id", + "replace_with": "$.exportId,..first_response.body.id", }, }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test replace_with clause with hardcoded value containing '.' (dots)", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) - case "/.xyz.2212.abc./1": - fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) - case "/.xyz.2212.abc./2": - fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) - } - }) - server := httptest.NewServer(r) - config["request.url"] = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodGet, - "replace": "$.files[:].id", - "replace_with": "$.exportId,.xyz.2212.abc.", - }, + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "replace_with_clause_with_hardcoded_value_containing_'.'_(dots)", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintln(w, `{"files":[{"id":"1"},{"id":"2"}]}`) + case "/.xyz.2212.abc./1": + fmt.Fprintln(w, `{"hello":{"world":"moon"}}`) + case "/.xyz.2212.abc./2": + fmt.Fprintln(w, `{"space":{"cake":"pumpkin"}}`) + } + }) + server := httptest.NewServer(r) + config["request.url"] = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodGet, + "replace": "$.files[:].id", + "replace_with": "$.exportId,.xyz.2212.abc.", }, }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - }, }, - { - name: "Test global transform context separation with parent_last_response object", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - var serverURL string - registerPaginationTransforms() - registerRequestTransforms() - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintf(w, `{"files":[{"id":"1"},{"id":"2"}],"exportId":"2212", "nextLink":"%s/link1"}`, serverURL) - case "/link1": - fmt.Fprintln(w, `{"files":[{"id":"3"},{"id":"4"}], "exportId":"2213"}`) - case "/2212/1": - matchBody(w, r, `{"exportId":"2212"}`, `{"hello":{"world":"moon"}}`) - case "/2212/2": - matchBody(w, r, `{"exportId":"2212"}`, `{"space":{"cake":"pumpkin"}}`) - case "/2213/3": - matchBody(w, r, `{"exportId":"2213"}`, `{"hello":{"cake":"pumpkin"}}`) - case "/2213/4": - matchBody(w, r, `{"exportId":"2213"}`, `{"space":{"world":"moon"}}`) - } - }) - server := httptest.NewServer(r) - t.Cleanup(func() { registeredTransforms = newRegistry() }) - config["request.url"] = server.URL - serverURL = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodPost, - "response.request_body_on_pagination": true, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.value", - "value": "[[.last_response.body.nextLink]]", - "fail_on_template_error": true, - }, + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + }, + }, + { + name: "global_transform_context_separation_with_parent_last_response_object", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + var serverURL string + registerPaginationTransforms() + registerRequestTransforms() + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintf(w, `{"files":[{"id":"1"},{"id":"2"}],"exportId":"2212", "nextLink":"%s/link1"}`, serverURL) + case "/link1": + fmt.Fprintln(w, `{"files":[{"id":"3"},{"id":"4"}], "exportId":"2213"}`) + case "/2212/1": + matchBody(w, r, `{"exportId":"2212"}`, `{"hello":{"world":"moon"}}`) + case "/2212/2": + matchBody(w, r, `{"exportId":"2212"}`, `{"space":{"cake":"pumpkin"}}`) + case "/2213/3": + matchBody(w, r, `{"exportId":"2213"}`, `{"hello":{"cake":"pumpkin"}}`) + case "/2213/4": + matchBody(w, r, `{"exportId":"2213"}`, `{"space":{"world":"moon"}}`) + } + }) + server := httptest.NewServer(r) + t.Cleanup(func() { registeredTransforms = newRegistry() }) + config["request.url"] = server.URL + serverURL = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodPost, + "response.request_body_on_pagination": true, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.value", + "value": "[[.last_response.body.nextLink]]", + "fail_on_template_error": true, }, }, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodPost, - "replace": "$.files[:].id", - "replace_with": "$.exportId,.parent_last_response.body.exportId", - "request.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.exportId", - "value": "[[ .parent_last_response.body.exportId ]]", - }, + }, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodPost, + "replace": "$.files[:].id", + "replace_with": "$.exportId,.parent_last_response.body.exportId", + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.exportId", + "value": "[[ .parent_last_response.body.exportId ]]", }, }, }, }, }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - `{"hello":{"cake":"pumpkin"}}`, - `{"space":{"world":"moon"}}`, - }, }, - { - name: "Test if cursor value is updated for root response with chaining & pagination", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - var serverURL string - registerPaginationTransforms() - registerRequestTransforms() - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintf(w, `{"files":[{"id":"1"},{"id":"2"}],"exportId":"2212", "createdAt":"22/02/2022", + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + `{"hello":{"cake":"pumpkin"}}`, + `{"space":{"world":"moon"}}`, + }, + }, + { + name: "cursor_value_is_updated_for_root_response_with_chaining_&_pagination", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + var serverURL string + registerPaginationTransforms() + registerRequestTransforms() + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintf(w, `{"files":[{"id":"1"},{"id":"2"}],"exportId":"2212", "createdAt":"22/02/2022", "nextLink":"%s/link1"}`, serverURL) - case "/link1": - fmt.Fprintln(w, `{"files":[{"id":"3"},{"id":"4"}], "exportId":"2213", "createdAt":"24/04/2022"}`) - case "/2212/1": - matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"hello":{"world":"moon"}}`) - case "/2212/2": - matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"space":{"cake":"pumpkin"}}`) - case "/2213/3": - matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"hello":{"cake":"pumpkin"}}`) - case "/2213/4": - matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"space":{"world":"moon"}}`) - } - }) - server := httptest.NewServer(r) - t.Cleanup(func() { registeredTransforms = newRegistry() }) - config["request.url"] = server.URL - serverURL = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodPost, - "response.request_body_on_pagination": true, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.value", - "value": "[[.last_response.body.nextLink]]", - "fail_on_template_error": true, - }, + case "/link1": + fmt.Fprintln(w, `{"files":[{"id":"3"},{"id":"4"}], "exportId":"2213", "createdAt":"24/04/2022"}`) + case "/2212/1": + matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"hello":{"world":"moon"}}`) + case "/2212/2": + matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"space":{"cake":"pumpkin"}}`) + case "/2213/3": + matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"hello":{"cake":"pumpkin"}}`) + case "/2213/4": + matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"space":{"world":"moon"}}`) + } + }) + server := httptest.NewServer(r) + t.Cleanup(func() { registeredTransforms = newRegistry() }) + config["request.url"] = server.URL + serverURL = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodPost, + "response.request_body_on_pagination": true, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.value", + "value": "[[.last_response.body.nextLink]]", + "fail_on_template_error": true, }, }, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodPost, - "replace": "$.files[:].id", - "replace_with": "$.exportId,.parent_last_response.body.exportId", - "request.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.exportId", - "value": "[[ .parent_last_response.body.exportId ]]", - }, + }, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodPost, + "replace": "$.files[:].id", + "replace_with": "$.exportId,.parent_last_response.body.exportId", + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.exportId", + "value": "[[ .parent_last_response.body.exportId ]]", }, - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.createdAt", - "value": "[[ .cursor.last_published_login ]]", - }, + }, + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.createdAt", + "value": "[[ .cursor.last_published_login ]]", }, }, }, }, }, - "cursor": map[string]interface{}{ - "last_published_login": map[string]interface{}{ - "value": "[[ .last_event.createdAt ]]", - }, - }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - `{"hello":{"cake":"pumpkin"}}`, - `{"space":{"world":"moon"}}`, + "cursor": map[string]interface{}{ + "last_published_login": map[string]interface{}{ + "value": "[[ .last_event.createdAt ]]", + }, }, }, - { - name: "Test if cursor value is updated for root response with chaining & pagination along with split operator", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - var serverURL string - registerPaginationTransforms() - registerRequestTransforms() - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - switch r.URL.Path { - case "/": - fmt.Fprintf(w, `{"files":[{"id":"1"},{"id":"2"}],"exportId":"2212","time":[{"timeStamp":"22/02/2022"}], + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + `{"hello":{"cake":"pumpkin"}}`, + `{"space":{"world":"moon"}}`, + }, + }, + { + name: "cursor_value_is_updated_for_root_response_with_chaining_&_pagination_along_with_split_operator", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + var serverURL string + registerPaginationTransforms() + registerRequestTransforms() + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + switch r.URL.Path { + case "/": + fmt.Fprintf(w, `{"files":[{"id":"1"},{"id":"2"}],"exportId":"2212","time":[{"timeStamp":"22/02/2022"}], "nextLink":"%s/link1"}`, serverURL) - case "/link1": - fmt.Fprintln(w, `{"files":[{"id":"3"},{"id":"4"}], "exportId":"2213","time":[{"timeStamp":"24/04/2022"}]}`) - case "/2212/1": - matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"hello":{"world":"moon"}}`) - case "/2212/2": - matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"space":{"cake":"pumpkin"}}`) - case "/2213/3": - matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"hello":{"cake":"pumpkin"}}`) - case "/2213/4": - matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"space":{"world":"moon"}}`) - } - }) - server := httptest.NewServer(r) - t.Cleanup(func() { registeredTransforms = newRegistry() }) - config["request.url"] = server.URL - serverURL = server.URL - config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodPost, - "response.request_body_on_pagination": true, - "response.pagination": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "url.value", - "value": "[[.last_response.body.nextLink]]", - "fail_on_template_error": true, - }, + case "/link1": + fmt.Fprintln(w, `{"files":[{"id":"3"},{"id":"4"}], "exportId":"2213","time":[{"timeStamp":"24/04/2022"}]}`) + case "/2212/1": + matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"hello":{"world":"moon"}}`) + case "/2212/2": + matchBody(w, r, `{"createdAt":"22/02/2022","exportId":"2212"}`, `{"space":{"cake":"pumpkin"}}`) + case "/2213/3": + matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"hello":{"cake":"pumpkin"}}`) + case "/2213/4": + matchBody(w, r, `{"createdAt":"24/04/2022","exportId":"2213"}`, `{"space":{"world":"moon"}}`) + } + }) + server := httptest.NewServer(r) + t.Cleanup(func() { registeredTransforms = newRegistry() }) + config["request.url"] = server.URL + serverURL = server.URL + config["chain.0.step.request.url"] = server.URL + "/$.exportId/$.files[:].id" + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodPost, + "response.request_body_on_pagination": true, + "response.pagination": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "url.value", + "value": "[[.last_response.body.nextLink]]", + "fail_on_template_error": true, }, }, - "response.split": map[string]interface{}{ - "target": "body.time", - "type": "array", - "keep_parent": true, - }, - "chain": []interface{}{ - map[string]interface{}{ - "step": map[string]interface{}{ - "request.method": http.MethodPost, - "replace": "$.files[:].id", - "replace_with": "$.exportId,.parent_last_response.body.exportId", - "request.transforms": []interface{}{ - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.exportId", - "value": "[[ .parent_last_response.body.exportId ]]", - }, + }, + "response.split": map[string]interface{}{ + "target": "body.time", + "type": "array", + "keep_parent": true, + }, + "chain": []interface{}{ + map[string]interface{}{ + "step": map[string]interface{}{ + "request.method": http.MethodPost, + "replace": "$.files[:].id", + "replace_with": "$.exportId,.parent_last_response.body.exportId", + "request.transforms": []interface{}{ + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.exportId", + "value": "[[ .parent_last_response.body.exportId ]]", }, - map[string]interface{}{ - "set": map[string]interface{}{ - "target": "body.createdAt", - "value": "[[ .cursor.last_published_login ]]", - }, + }, + map[string]interface{}{ + "set": map[string]interface{}{ + "target": "body.createdAt", + "value": "[[ .cursor.last_published_login ]]", }, }, }, }, }, - "cursor": map[string]interface{}{ - "last_published_login": map[string]interface{}{ - "value": "[[ .last_event.time.timeStamp ]]", - }, - }, }, - expected: []string{ - `{"hello":{"world":"moon"}}`, - `{"space":{"cake":"pumpkin"}}`, - `{"hello":{"cake":"pumpkin"}}`, - `{"space":{"world":"moon"}}`, + "cursor": map[string]interface{}{ + "last_published_login": map[string]interface{}{ + "value": "[[ .last_event.time.timeStamp ]]", + }, }, }, - { - name: "Test simple XML decode", - setupServer: func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { - registerDecoders() - registerRequestTransforms() - r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - const text = ` + expected: []string{ + `{"hello":{"world":"moon"}}`, + `{"space":{"cake":"pumpkin"}}`, + `{"hello":{"cake":"pumpkin"}}`, + `{"space":{"world":"moon"}}`, + }, + }, + { + name: "Test simple XML decode", + setupServer: func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { + registerDecoders() + registerRequestTransforms() + r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { + const text = ` Ástríðr Ragnar
@@ -1202,19 +1205,19 @@ func TestInput(t *testing.T) { ` - io.ReadAll(r.Body) - r.Body.Close() - w.Write([]byte(text)) - }) - server := httptest.NewServer(r) - t.Cleanup(func() { registeredTransforms = newRegistry() }) - config["request.url"] = server.URL - t.Cleanup(server.Close) - }, - baseConfig: map[string]interface{}{ - "interval": 1, - "request.method": http.MethodGet, - "response.xsd": ` + io.ReadAll(r.Body) + r.Body.Close() + w.Write([]byte(text)) + }) + server := httptest.NewServer(r) + t.Cleanup(func() { registeredTransforms = newRegistry() }) + config["request.url"] = server.URL + t.Cleanup(server.Close) + }, + baseConfig: map[string]interface{}{ + "interval": 1, + "request.method": http.MethodGet, + "response.xsd": ` @@ -1248,41 +1251,45 @@ func TestInput(t *testing.T) { `, - }, - handler: defaultHandler(http.MethodGet, "", ""), - expected: []string{mapstr.M{ - "order": map[string]interface{}{ - "address": map[string]interface{}{ - "address": "Beekplantsoen 594, 2 hoog, 6849 IG", - "city": "Boekend", - "company": "Sydøstlige Gruppe", - "country": "Netherlands", - "name": "Joord Lennart", - }, - "item": []interface{}{ - map[string]interface{}{ - "cost": 99.95, - "name": "Egil's Saga", - "note": "Free Sample", - "number": 1, - "sent": false, - }, + }, + handler: defaultHandler(http.MethodGet, "", ""), + expected: []string{mapstr.M{ + "order": map[string]interface{}{ + "address": map[string]interface{}{ + "address": "Beekplantsoen 594, 2 hoog, 6849 IG", + "city": "Boekend", + "company": "Sydøstlige Gruppe", + "country": "Netherlands", + "name": "Joord Lennart", + }, + "item": []interface{}{ + map[string]interface{}{ + "cost": 99.95, + "name": "Egil's Saga", + "note": "Free Sample", + "number": 1, + "sent": false, }, - "noNamespaceSchemaLocation": "sales.xsd", - "orderid": "56733", - "sender": "Ástríðr Ragnar", - "xsi": "http://www.w3.org/2001/XMLSchema-instance", }, - }.String()}, - }, - } + "noNamespaceSchemaLocation": "sales.xsd", + "orderid": "56733", + "sender": "Ástríðr Ragnar", + "xsi": "http://www.w3.org/2001/XMLSchema-instance", + }, + }.String()}, + }, +} - for _, testCase := range testCases { - tc := testCase - t.Run(tc.name, func(t *testing.T) { - tc.setupServer(t, tc.handler, tc.baseConfig) +func TestInput(t *testing.T) { + for _, test := range testCases { + t.Run(test.name, func(t *testing.T) { + if test.skipReason != "" { + t.Skipf("skip: %s", test.skipReason) + } - cfg := conf.MustNewConfigFrom(tc.baseConfig) + test.setupServer(t, test.handler, test.baseConfig) + + cfg := conf.MustNewConfigFrom(test.baseConfig) conf := defaultConfig() assert.NoError(t, cfg.Unpack(&conf)) @@ -1298,7 +1305,7 @@ func TestInput(t *testing.T) { assert.Equal(t, "httpjson-stateless", input.Name()) assert.NoError(t, input.Test(v2.TestContext{})) - chanClient := beattest.NewChanClient(len(tc.expected)) + chanClient := beattest.NewChanClient(len(test.expected)) t.Cleanup(func() { _ = chanClient.Close() }) ctx, cancel := newV2Context() @@ -1312,7 +1319,7 @@ func TestInput(t *testing.T) { timeout := time.NewTimer(5 * time.Second) t.Cleanup(func() { _ = timeout.Stop() }) - if len(tc.expected) == 0 { + if len(test.expected) == 0 { select { case <-timeout.C: case got := <-chanClient.Channel: @@ -1328,22 +1335,22 @@ func TestInput(t *testing.T) { for { select { case <-timeout.C: - t.Errorf("timed out waiting for %d events", len(tc.expected)) + t.Errorf("timed out waiting for %d events", len(test.expected)) cancel() return case got := <-chanClient.Channel: val, err := got.Fields.GetValue("message") assert.NoError(t, err) - assert.JSONEq(t, tc.expected[receivedCount], val.(string)) + assert.JSONEq(t, test.expected[receivedCount], val.(string)) receivedCount += 1 - if receivedCount == len(tc.expected) { + if receivedCount == len(test.expected) { cancel() break wait } } } - if tc.expectedFile != "" { - if _, err := os.Stat(filepath.Join(tempDir, tc.expectedFile)); err == nil { + if test.expectedFile != "" { + if _, err := os.Stat(filepath.Join(tempDir, test.expectedFile)); err == nil { assert.NoError(t, g.Wait()) } else { t.Errorf("Expected log filename not found") @@ -1354,10 +1361,70 @@ func TestInput(t *testing.T) { } } +func BenchmarkInput(b *testing.B) { + for _, test := range testCases { + b.Run(test.name, func(b *testing.B) { + test.setupServer(b, test.handler, test.baseConfig) + + cfg := conf.MustNewConfigFrom(test.baseConfig) + + conf := defaultConfig() + assert.NoError(b, cfg.Unpack(&conf)) + + b.ResetTimer() + for i := 0; i < b.N; i++ { + input := newStatelessInput(conf) + + chanClient := beattest.NewChanClient(len(test.expected)) + b.Cleanup(func() { _ = chanClient.Close() }) + + ctx, cancel := newV2Context() + b.Cleanup(cancel) + + var g errgroup.Group + g.Go(func() error { + return input.Run(ctx, chanClient) + }) + + timeout := time.NewTimer(5 * time.Second) + b.Cleanup(func() { _ = timeout.Stop() }) + + if len(test.expected) == 0 { + select { + case <-timeout.C: + case got := <-chanClient.Channel: + b.Errorf("unexpected event: %v", got) + } + cancel() + assert.NoError(b, g.Wait()) + return + } + + var receivedCount int + wait: + for { + select { + case <-timeout.C: + b.Errorf("timed out waiting for %d events", len(test.expected)) + cancel() + return + case <-chanClient.Channel: + receivedCount += 1 + if receivedCount == len(test.expected) { + cancel() + break wait + } + } + } + } + }) + } +} + func newTestServer( newServer func(http.Handler) *httptest.Server, -) func(*testing.T, http.HandlerFunc, map[string]interface{}) { - return func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { +) func(testing.TB, http.HandlerFunc, map[string]interface{}) { + return func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { server := newServer(h) config["request.url"] = server.URL t.Cleanup(server.Close) @@ -1366,8 +1433,8 @@ func newTestServer( func newChainTestServer( newServer func(http.Handler) *httptest.Server, -) func(*testing.T, http.HandlerFunc, map[string]interface{}) { - return func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { +) func(testing.TB, http.HandlerFunc, map[string]interface{}) { + return func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { switch r.URL.Path { case "/": @@ -1385,8 +1452,8 @@ func newChainTestServer( func newChainPaginationTestServer( newServer func(http.Handler) *httptest.Server, -) func(*testing.T, http.HandlerFunc, map[string]interface{}) { - return func(t *testing.T, h http.HandlerFunc, config map[string]interface{}) { +) func(testing.TB, http.HandlerFunc, map[string]interface{}) { + return func(t testing.TB, h http.HandlerFunc, config map[string]interface{}) { registerPaginationTransforms() var serverURL string r := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { From 7b1a839155d4a3f76aa58ec3f6c4f3738cb9daa0 Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Thu, 8 Jun 2023 21:44:19 +0930 Subject: [PATCH 29/52] x-pack/filebeat/input/awss3: relax queue_url constraints for non-standard endpoints (#35520) Currently, the queue_url option is used to obtain the region name for the SQS receiver. This prevents pointing the input at other sources for testing, so add a region_name option to provide an alternative way to provide the region name for non-AWS endpoints. --- CHANGELOG-developer.next.asciidoc | 1 + CHANGELOG.next.asciidoc | 1 + .../docs/inputs/input-aws-s3.asciidoc | 6 + x-pack/filebeat/input/awss3/config.go | 1 + x-pack/filebeat/input/awss3/config_test.go | 520 ++++++++++-------- x-pack/filebeat/input/awss3/input.go | 30 +- x-pack/filebeat/input/awss3/input_test.go | 136 ++++- 7 files changed, 435 insertions(+), 260 deletions(-) diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index f3804e49440d..13ac5ac6e678 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -159,6 +159,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Add logging of metric registration in inputmon. {pull}35647[35647] - Add Okta API package for entity analytics. {pull}35478[35478] - Add benchmarking to HTTPJSON input testing. {pull}35138[35138] +- Allow non-AWS endpoints for testing Filebeat awss3 input. {issue}35496[35496] {pull}35520[35520] ==== Deprecated diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index e960210f6102..609865cddfa8 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -304,6 +304,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Mark CEL input as GA. {pull}35559[35559] - Add metrics for gcp-pubsub input. {pull}35614[35614] - [GCS] Added scheduler debug logs and improved the context passing mechanism by removing them from struct params and passing them as function arguments. {pull}35674[35674] +- Allow non-AWS endpoints for awss3 input. {issue}35496[35496] {pull}35520[35520] *Auditbeat* - Migration of system/package module storage from gob encoding to flatbuffer encoding in bolt db. {pull}34817[34817] diff --git a/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc b/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc index 50bc1fe7f998..f99e6ad01336 100644 --- a/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc +++ b/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc @@ -257,6 +257,12 @@ configuring multiline options. URL of the AWS SQS queue that messages will be received from. (Required when `bucket_arn` and `non_aws_bucket_name` are not set). +[float] +==== `region` + +The name of the AWS region of the end point. If this option is given it +takes precedence over the region name obtained from the `queue_url` value. + [float] ==== `visibility_timeout` diff --git a/x-pack/filebeat/input/awss3/config.go b/x-pack/filebeat/input/awss3/config.go index 7297425c5742..6d2517e53efc 100644 --- a/x-pack/filebeat/input/awss3/config.go +++ b/x-pack/filebeat/input/awss3/config.go @@ -27,6 +27,7 @@ type config struct { SQSScript *scriptConfig `config:"sqs.notification_parsing_script"` MaxNumberOfMessages int `config:"max_number_of_messages"` QueueURL string `config:"queue_url"` + RegionName string `config:"region"` BucketARN string `config:"bucket_arn"` NonAWSBucketName string `config:"non_aws_bucket_name"` BucketListInterval time.Duration `config:"bucket_list_interval"` diff --git a/x-pack/filebeat/input/awss3/config_test.go b/x-pack/filebeat/input/awss3/config_test.go index 9606ff1445ad..880412ad377f 100644 --- a/x-pack/filebeat/input/awss3/config_test.go +++ b/x-pack/filebeat/input/awss3/config_test.go @@ -57,41 +57,41 @@ func TestConfig(t *testing.T) { nonAWSS3Bucket string config mapstr.M expectedErr string - expectedCfg func(queueURL, s3Bucket string, nonAWSS3Bucket string) config + expectedCfg func(queueURL, s3Bucket, nonAWSS3Bucket string) config }{ { - "input with defaults for queueURL", - queueURL, - "", - "", - mapstr.M{ + name: "input with defaults for queueURL", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, }, - "", - makeConfig, + expectedErr: "", + expectedCfg: makeConfig, }, { - "input with defaults for s3Bucket", - "", - s3Bucket, - "", - mapstr.M{ + name: "input with defaults for s3Bucket", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "number_of_workers": 5, }, - "", - func(queueURL, s3Bucket string, nonAWSS3Bucket string) config { + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { c := makeConfig("", s3Bucket, "") c.NumberOfWorkers = 5 return c }, }, { - "input with file_selectors", - queueURL, - "", - "", - mapstr.M{ + name: "input with file_selectors", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "file_selectors": []mapstr.M{ { @@ -99,8 +99,8 @@ func TestConfig(t *testing.T) { }, }, }, - "", - func(queueURL, s3Bucket string, nonAWSS3Bucket string) config { + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { c := makeConfig(queueURL, "", "") regex := match.MustCompile("/CloudTrail/") c.FileSelectors = []fileSelectorConfig{ @@ -113,283 +113,353 @@ func TestConfig(t *testing.T) { }, }, { - "error on no queueURL and s3Bucket and nonAWSS3Bucket", - "", - "", - "", - mapstr.M{ + name: "non-AWS_endpoint_with_explicit_region", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ + "queue_url": queueURL, + "region": "region", + "endpoint": "ep", + }, + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { + c := makeConfig(queueURL, "", "") + c.RegionName = "region" + c.AWSConfig.Endpoint = "ep" + return c + }, + }, + { + name: "explicit_AWS_endpoint_with_explicit_region", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ + "queue_url": "https://sqs.us-east-1.amazonaws.com/627959692251/test-s3-logs", + "region": "region", + "endpoint": "amazonaws.com", + }, + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { + c := makeConfig(queueURL, "", "") + c.QueueURL = "https://sqs.us-east-1.amazonaws.com/627959692251/test-s3-logs" + c.AWSConfig.Endpoint = "amazonaws.com" + c.RegionName = "region" + return c + }, + }, + { + name: "inferred_AWS_endpoint_with_explicit_region", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ + "queue_url": "https://sqs.us-east-1.amazonaws.com/627959692251/test-s3-logs", + "region": "region", + }, + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { + c := makeConfig(queueURL, "", "") + c.QueueURL = "https://sqs.us-east-1.amazonaws.com/627959692251/test-s3-logs" + c.RegionName = "region" + return c + }, + }, + { + name: "localstack_with_region_name", + queueURL: "http://localhost:4566/000000000000/sample-queue", + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ + "queue_url": "http://localhost:4566/000000000000/sample-queue", + "region": "myregion", + }, + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { + c := makeConfig(queueURL, "", "") + c.RegionName = "myregion" + return c + }, + }, + { + name: "error on no queueURL and s3Bucket and nonAWSS3Bucket", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": "", "bucket_arn": "", "non_aws_bucket_name": "", }, - "neither queue_url, bucket_arn nor non_aws_bucket_name were provided", - nil, + expectedErr: "neither queue_url, bucket_arn nor non_aws_bucket_name were provided", + expectedCfg: nil, }, { - "error on both queueURL and s3Bucket", - queueURL, - s3Bucket, - "", - mapstr.M{ + name: "error on both queueURL and s3Bucket", + queueURL: queueURL, + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "bucket_arn": s3Bucket, }, - "queue_url , bucket_arn , non_aws_bucket_name <> cannot be set at the same time", - nil, + expectedErr: "queue_url , bucket_arn , non_aws_bucket_name <> cannot be set at the same time", + expectedCfg: nil, }, { - "error on both queueURL and NonAWSS3Bucket", - queueURL, - "", - nonAWSS3Bucket, - mapstr.M{ + name: "error on both queueURL and NonAWSS3Bucket", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "queue_url": queueURL, "non_aws_bucket_name": nonAWSS3Bucket, }, - "queue_url , bucket_arn <>, non_aws_bucket_name cannot be set at the same time", - nil, + expectedErr: "queue_url , bucket_arn <>, non_aws_bucket_name cannot be set at the same time", + expectedCfg: nil, }, { - "error on both s3Bucket and NonAWSS3Bucket", - "", - s3Bucket, - nonAWSS3Bucket, - mapstr.M{ + name: "error on both s3Bucket and NonAWSS3Bucket", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "bucket_arn": s3Bucket, "non_aws_bucket_name": nonAWSS3Bucket, }, - "queue_url <>, bucket_arn , non_aws_bucket_name cannot be set at the same time", - nil, + expectedErr: "queue_url <>, bucket_arn , non_aws_bucket_name cannot be set at the same time", + expectedCfg: nil, }, { - "error on queueURL, s3Bucket, and NonAWSS3Bucket", - queueURL, - s3Bucket, - nonAWSS3Bucket, - mapstr.M{ + name: "error on queueURL, s3Bucket, and NonAWSS3Bucket", + queueURL: queueURL, + s3Bucket: s3Bucket, + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "queue_url": queueURL, "bucket_arn": s3Bucket, "non_aws_bucket_name": nonAWSS3Bucket, }, - "queue_url , bucket_arn , non_aws_bucket_name cannot be set at the same time", - nil, + expectedErr: "queue_url , bucket_arn , non_aws_bucket_name cannot be set at the same time", + expectedCfg: nil, }, { - "error on api_timeout == 0", - queueURL, - "", - "", - mapstr.M{ + name: "error on api_timeout == 0", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "api_timeout": "0", }, - "api_timeout <0s> must be greater than the sqs.wait_time <20s", - nil, + expectedErr: "api_timeout <0s> must be greater than the sqs.wait_time <20s", + expectedCfg: nil, }, { - "error on visibility_timeout == 0", - queueURL, - "", - "", - mapstr.M{ + name: "error on visibility_timeout == 0", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "visibility_timeout": "0", }, - "visibility_timeout <0s> must be greater than 0 and less than or equal to 12h", - nil, + expectedErr: "visibility_timeout <0s> must be greater than 0 and less than or equal to 12h", + expectedCfg: nil, }, { - "error on visibility_timeout > 12h", - queueURL, - "", - "", - mapstr.M{ + name: "error on visibility_timeout > 12h", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "visibility_timeout": "12h1ns", }, - "visibility_timeout <12h0m0.000000001s> must be greater than 0 and less than or equal to 12h", - nil, + expectedErr: "visibility_timeout <12h0m0.000000001s> must be greater than 0 and less than or equal to 12h", + expectedCfg: nil, }, { - "error on bucket_list_interval == 0", - "", - s3Bucket, - "", - mapstr.M{ + name: "error on bucket_list_interval == 0", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "bucket_list_interval": "0", }, - "bucket_list_interval <0s> must be greater than 0", - nil, + expectedErr: "bucket_list_interval <0s> must be greater than 0", + expectedCfg: nil, }, { - "error on number_of_workers == 0", - "", - s3Bucket, - "", - mapstr.M{ + name: "error on number_of_workers == 0", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "number_of_workers": "0", }, - "number_of_workers <0> must be greater than 0", - nil, + expectedErr: "number_of_workers <0> must be greater than 0", + expectedCfg: nil, }, { - "error on max_number_of_messages == 0", - queueURL, - "", - "", - mapstr.M{ + name: "error on max_number_of_messages == 0", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "max_number_of_messages": "0", }, - "max_number_of_messages <0> must be greater than 0", - nil, + expectedErr: "max_number_of_messages <0> must be greater than 0", + expectedCfg: nil, }, { - "error on buffer_size == 0 ", - queueURL, - "", - "", - mapstr.M{ + name: "error on buffer_size == 0 ", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "buffer_size": "0", }, - "buffer_size <0> must be greater than 0", - nil, + expectedErr: "buffer_size <0> must be greater than 0", + expectedCfg: nil, }, { - "error on max_bytes == 0 ", - queueURL, - "", - "", - mapstr.M{ + name: "error on max_bytes == 0 ", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "max_bytes": "0", }, - "max_bytes <0> must be greater than 0", - nil, + expectedErr: "max_bytes <0> must be greater than 0", + expectedCfg: nil, }, { - "error on expand_event_list_from_field and content_type != application/json ", - queueURL, - "", - "", - mapstr.M{ + name: "error on expand_event_list_from_field and content_type != application/json ", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "expand_event_list_from_field": "Records", "content_type": "text/plain", }, - "content_type must be `application/json` when expand_event_list_from_field is used", - nil, + expectedErr: "content_type must be `application/json` when expand_event_list_from_field is used", + expectedCfg: nil, }, { - "error on expand_event_list_from_field and content_type != application/json ", - "", - s3Bucket, - "", - mapstr.M{ + name: "error on expand_event_list_from_field and content_type != application/json ", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "expand_event_list_from_field": "Records", "content_type": "text/plain", }, - "content_type must be `application/json` when expand_event_list_from_field is used", - nil, + expectedErr: "content_type must be `application/json` when expand_event_list_from_field is used", + expectedCfg: nil, }, { - "input with defaults for non-AWS S3 Bucket", - "", - "", - nonAWSS3Bucket, - mapstr.M{ + name: "input with defaults for non-AWS S3 Bucket", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "non_aws_bucket_name": nonAWSS3Bucket, "number_of_workers": 5, }, - "", - func(queueURL, s3Bucket string, nonAWSS3Bucket string) config { + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { c := makeConfig("", "", nonAWSS3Bucket) c.NumberOfWorkers = 5 return c }, }, { - "error on FIPS with non-AWS S3 Bucket", - "", - "", - nonAWSS3Bucket, - mapstr.M{ + name: "error on FIPS with non-AWS S3 Bucket", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "non_aws_bucket_name": nonAWSS3Bucket, "number_of_workers": 5, "fips_enabled": true, }, - "fips_enabled cannot be used with a non-AWS S3 bucket.", - nil, + expectedErr: "fips_enabled cannot be used with a non-AWS S3 bucket.", + expectedCfg: nil, }, { - "error on path_style with AWS native S3 Bucket", - "", - s3Bucket, - "", - mapstr.M{ + name: "error on path_style with AWS native S3 Bucket", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "number_of_workers": 5, "path_style": true, }, - "path_style can only be used when polling non-AWS S3 services", - nil, + expectedErr: "path_style can only be used when polling non-AWS S3 services", + expectedCfg: nil, }, { - "error on path_style with AWS SQS Queue", - queueURL, - "", - "", - mapstr.M{ + name: "error on path_style with AWS SQS Queue", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "number_of_workers": 5, "path_style": true, }, - "path_style can only be used when polling non-AWS S3 services", - nil, + expectedErr: "path_style can only be used when polling non-AWS S3 services", + expectedCfg: nil, }, { - "error on provider with AWS native S3 Bucket", - "", - s3Bucket, - "", - mapstr.M{ + name: "error on provider with AWS native S3 Bucket", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "number_of_workers": 5, "provider": "asdf", }, - "provider can only be overridden when polling non-AWS S3 services", - nil, + expectedErr: "provider can only be overridden when polling non-AWS S3 services", + expectedCfg: nil, }, { - "error on provider with AWS SQS Queue", - queueURL, - "", - "", - mapstr.M{ + name: "error on provider with AWS SQS Queue", + queueURL: queueURL, + s3Bucket: "", + nonAWSS3Bucket: "", + config: mapstr.M{ "queue_url": queueURL, "number_of_workers": 5, "provider": "asdf", }, - "provider can only be overridden when polling non-AWS S3 services", - nil, + expectedErr: "provider can only be overridden when polling non-AWS S3 services", + expectedCfg: nil, }, { - "backup_to_bucket with AWS", - "", - s3Bucket, - "", - mapstr.M{ + name: "backup_to_bucket with AWS", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "backup_to_bucket_arn": "arn:aws:s3:::bBucket", "backup_to_bucket_prefix": "backup", "number_of_workers": 5, }, - "", - func(queueURL, s3Bucket string, nonAWSS3Bucket string) config { + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { c := makeConfig("", s3Bucket, "") c.BackupConfig.BackupToBucketArn = "arn:aws:s3:::bBucket" c.BackupConfig.BackupToBucketPrefix = "backup" @@ -398,18 +468,18 @@ func TestConfig(t *testing.T) { }, }, { - "backup_to_bucket with non-AWS", - "", - "", - nonAWSS3Bucket, - mapstr.M{ + name: "backup_to_bucket with non-AWS", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "non_aws_bucket_name": nonAWSS3Bucket, "non_aws_backup_to_bucket_name": "bBucket", "backup_to_bucket_prefix": "backup", "number_of_workers": 5, }, - "", - func(queueURL, s3Bucket string, nonAWSS3Bucket string) config { + expectedErr: "", + expectedCfg: func(queueURL, s3Bucket, nonAWSS3Bucket string) config { c := makeConfig("", "", nonAWSS3Bucket) c.NonAWSBucketName = nonAWSS3Bucket c.BackupConfig.NonAWSBackupToBucketName = "bBucket" @@ -419,86 +489,86 @@ func TestConfig(t *testing.T) { }, }, { - "error with non-AWS backup and AWS source", - "", - s3Bucket, - "", - mapstr.M{ + name: "error with non-AWS backup and AWS source", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "non_aws_backup_to_bucket_name": "bBucket", "number_of_workers": 5, }, - "backup to non-AWS bucket can only be used for non-AWS sources", - nil, + expectedErr: "backup to non-AWS bucket can only be used for non-AWS sources", + expectedCfg: nil, }, { - "error with AWS backup and non-AWS source", - "", - "", - nonAWSS3Bucket, - mapstr.M{ + name: "error with AWS backup and non-AWS source", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "non_aws_bucket_name": nonAWSS3Bucket, "backup_to_bucket_arn": "arn:aws:s3:::bBucket", "number_of_workers": 5, }, - "backup to AWS bucket can only be used for AWS sources", - nil, + expectedErr: "backup to AWS bucket can only be used for AWS sources", + expectedCfg: nil, }, { - "error with same bucket backup and empty backup prefix", - "", - s3Bucket, - "", - mapstr.M{ + name: "error with same bucket backup and empty backup prefix", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "backup_to_bucket_arn": s3Bucket, "number_of_workers": 5, }, - "backup_to_bucket_prefix is a required property when source and backup bucket are the same", - nil, + expectedErr: "backup_to_bucket_prefix is a required property when source and backup bucket are the same", + expectedCfg: nil, }, { - "error with same bucket backup (non-AWS) and empty backup prefix", - "", - "", - nonAWSS3Bucket, - mapstr.M{ + name: "error with same bucket backup (non-AWS) and empty backup prefix", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "non_aws_bucket_name": nonAWSS3Bucket, "non_aws_backup_to_bucket_name": nonAWSS3Bucket, "number_of_workers": 5, }, - "backup_to_bucket_prefix is a required property when source and backup bucket are the same", - nil, + expectedErr: "backup_to_bucket_prefix is a required property when source and backup bucket are the same", + expectedCfg: nil, }, { - "error with same bucket backup and backup prefix equal to list prefix", - "", - s3Bucket, - "", - mapstr.M{ + name: "error with same bucket backup and backup prefix equal to list prefix", + queueURL: "", + s3Bucket: s3Bucket, + nonAWSS3Bucket: "", + config: mapstr.M{ "bucket_arn": s3Bucket, "backup_to_bucket_arn": s3Bucket, "number_of_workers": 5, "backup_to_bucket_prefix": "processed_", "bucket_list_prefix": "processed_", }, - "backup_to_bucket_prefix cannot be the same as bucket_list_prefix, this will create an infinite loop", - nil, + expectedErr: "backup_to_bucket_prefix cannot be the same as bucket_list_prefix, this will create an infinite loop", + expectedCfg: nil, }, { - "error with same bucket backup (non-AWS) and backup prefix equal to list prefix", - "", - "", - nonAWSS3Bucket, - mapstr.M{ + name: "error with same bucket backup (non-AWS) and backup prefix equal to list prefix", + queueURL: "", + s3Bucket: "", + nonAWSS3Bucket: nonAWSS3Bucket, + config: mapstr.M{ "non_aws_bucket_name": nonAWSS3Bucket, "non_aws_backup_to_bucket_name": nonAWSS3Bucket, "number_of_workers": 5, "backup_to_bucket_prefix": "processed_", "bucket_list_prefix": "processed_", }, - "backup_to_bucket_prefix cannot be the same as bucket_list_prefix, this will create an infinite loop", - nil, + expectedErr: "backup_to_bucket_prefix cannot be the same as bucket_list_prefix, this will create an infinite loop", + expectedCfg: nil, }, } diff --git a/x-pack/filebeat/input/awss3/input.go b/x-pack/filebeat/input/awss3/input.go index 6b76108b0e17..4f45f9141445 100644 --- a/x-pack/filebeat/input/awss3/input.go +++ b/x-pack/filebeat/input/awss3/input.go @@ -115,11 +115,15 @@ func (in *s3Input) Run(inputContext v2.Context, pipeline beat.Pipeline) error { defer cancelInputCtx() if in.config.QueueURL != "" { - regionName, err := getRegionFromQueueURL(in.config.QueueURL, in.config.AWSConfig.Endpoint) - if err != nil { + regionName, err := getRegionFromQueueURL(in.config.QueueURL, in.config.AWSConfig.Endpoint, in.config.RegionName) + if err != nil && in.config.RegionName == "" { return fmt.Errorf("failed to get AWS region from queue_url: %w", err) } - + if regionName != in.config.RegionName { + inputContext.Logger.Warnf("configured region disagrees with queue_url region: %q != %q: using %[1]q", + in.config.RegionName, regionName) + regionName = in.config.RegionName + } in.awsConfig.Region = regionName // Create SQS receiver and S3 notification processor. @@ -300,20 +304,26 @@ func (in *s3Input) createS3Lister(ctx v2.Context, cancelCtx context.Context, cli return s3Poller, nil } -func getRegionFromQueueURL(queueURL string, endpoint string) (string, error) { +var errBadQueueURL = errors.New("QueueURL is not in format: https://sqs.{REGION_ENDPOINT}.{ENDPOINT}/{ACCOUNT_NUMBER}/{QUEUE_NAME}") + +func getRegionFromQueueURL(queueURL string, endpoint, defaultRegion string) (string, error) { // get region from queueURL // Example: https://sqs.us-east-1.amazonaws.com/627959692251/test-s3-logs - url, err := url.Parse(queueURL) + u, err := url.Parse(queueURL) if err != nil { return "", fmt.Errorf(queueURL + " is not a valid URL") } - if url.Scheme == "https" && url.Host != "" { - queueHostSplit := strings.Split(url.Host, ".") - if len(queueHostSplit) > 2 && (strings.Join(queueHostSplit[2:], ".") == endpoint || (endpoint == "" && queueHostSplit[2] == "amazonaws")) { - return queueHostSplit[1], nil + if (u.Scheme == "https" || u.Scheme == "http") && u.Host != "" { + queueHostSplit := strings.SplitN(u.Host, ".", 3) + if len(queueHostSplit) == 3 { + if queueHostSplit[2] == endpoint || (endpoint == "" && strings.HasPrefix(queueHostSplit[2], "amazonaws.")) { + return queueHostSplit[1], nil + } + } else if defaultRegion != "" { + return defaultRegion, nil } } - return "", fmt.Errorf("QueueURL is not in format: https://sqs.{REGION_ENDPOINT}.{ENDPOINT}/{ACCOUNT_NUMBER}/{QUEUE_NAME}") + return "", errBadQueueURL } func getRegionForBucket(ctx context.Context, s3Client *s3.Client, bucketName string) (string, error) { diff --git a/x-pack/filebeat/input/awss3/input_test.go b/x-pack/filebeat/input/awss3/input_test.go index 953e8388fc0e..02a91022f5ee 100644 --- a/x-pack/filebeat/input/awss3/input_test.go +++ b/x-pack/filebeat/input/awss3/input_test.go @@ -5,35 +5,121 @@ package awss3 import ( + "errors" "testing" "github.com/stretchr/testify/assert" ) func TestGetProviderFromDomain(t *testing.T) { - assert.Equal(t, "aws", getProviderFromDomain("", "")) - assert.Equal(t, "aws", getProviderFromDomain("c2s.ic.gov", "")) - assert.Equal(t, "abc", getProviderFromDomain("abc.com", "abc")) - assert.Equal(t, "xyz", getProviderFromDomain("oraclecloud.com", "xyz")) - assert.Equal(t, "aws", getProviderFromDomain("amazonaws.com", "")) - assert.Equal(t, "aws", getProviderFromDomain("c2s.sgov.gov", "")) - assert.Equal(t, "aws", getProviderFromDomain("c2s.ic.gov", "")) - assert.Equal(t, "aws", getProviderFromDomain("amazonaws.com.cn", "")) - assert.Equal(t, "backblaze", getProviderFromDomain("https://backblazeb2.com", "")) - assert.Equal(t, "cloudflare", getProviderFromDomain("https://1234567890.r2.cloudflarestorage.com", "")) - assert.Equal(t, "wasabi", getProviderFromDomain("https://wasabisys.com", "")) - assert.Equal(t, "digitalocean", getProviderFromDomain("https://digitaloceanspaces.com", "")) - assert.Equal(t, "dreamhost", getProviderFromDomain("https://dream.io", "")) - assert.Equal(t, "scaleway", getProviderFromDomain("https://scw.cloud", "")) - assert.Equal(t, "gcp", getProviderFromDomain("https://googleapis.com", "")) - assert.Equal(t, "arubacloud", getProviderFromDomain("https://cloud.it", "")) - assert.Equal(t, "linode", getProviderFromDomain("https://linodeobjects.com", "")) - assert.Equal(t, "vultr", getProviderFromDomain("https://vultrobjects.com", "")) - assert.Equal(t, "ibm", getProviderFromDomain("https://appdomain.cloud", "")) - assert.Equal(t, "alibaba", getProviderFromDomain("https://aliyuncs.com", "")) - assert.Equal(t, "oracle", getProviderFromDomain("https://oraclecloud.com", "")) - assert.Equal(t, "exoscale", getProviderFromDomain("https://exo.io", "")) - assert.Equal(t, "upcloud", getProviderFromDomain("https://upcloudobjects.com", "")) - assert.Equal(t, "iland", getProviderFromDomain("https://ilandcloud.com", "")) - assert.Equal(t, "zadara", getProviderFromDomain("https://zadarazios.com", "")) + tests := []struct { + endpoint string + override string + want string + }{ + {endpoint: "", override: "", want: "aws"}, + {endpoint: "c2s.ic.gov", want: "aws"}, + {endpoint: "abc.com", override: "abc", want: "abc"}, + {endpoint: "oraclecloud.com", override: "xyz", want: "xyz"}, + {endpoint: "amazonaws.com", want: "aws"}, + {endpoint: "c2s.sgov.gov", want: "aws"}, + {endpoint: "c2s.ic.gov", want: "aws"}, + {endpoint: "amazonaws.com.cn", want: "aws"}, + {endpoint: "https://backblazeb2.com", want: "backblaze"}, + {endpoint: "https://1234567890.r2.cloudflarestorage.com", want: "cloudflare"}, + {endpoint: "https://wasabisys.com", want: "wasabi"}, + {endpoint: "https://digitaloceanspaces.com", want: "digitalocean"}, + {endpoint: "https://dream.io", want: "dreamhost"}, + {endpoint: "https://scw.cloud", want: "scaleway"}, + {endpoint: "https://googleapis.com", want: "gcp"}, + {endpoint: "https://cloud.it", want: "arubacloud"}, + {endpoint: "https://linodeobjects.com", want: "linode"}, + {endpoint: "https://vultrobjects.com", want: "vultr"}, + {endpoint: "https://appdomain.cloud", want: "ibm"}, + {endpoint: "https://aliyuncs.com", want: "alibaba"}, + {endpoint: "https://oraclecloud.com", want: "oracle"}, + {endpoint: "https://exo.io", want: "exoscale"}, + {endpoint: "https://upcloudobjects.com", want: "upcloud"}, + {endpoint: "https://ilandcloud.com", want: "iland"}, + {endpoint: "https://zadarazios.com", want: "zadara"}, + } + + for _, test := range tests { + assert.Equal(t, test.want, getProviderFromDomain(test.endpoint, test.override), + "for endpoint=%q and override=%q", test.endpoint, test.override) + } +} + +func TestGetRegionFromQueueURL(t *testing.T) { + tests := []struct { + name string + queueURL string + endpoint string + deflt string + want string + wantErr error + }{ + { + name: "amazonaws.com_domain_with_blank_endpoint", + queueURL: "https://sqs.us-east-1.amazonaws.com/627959692251/test-s3-logs", + want: "us-east-1", + }, + { + name: "abc.xyz_and_domain_with_matching_endpoint", + queueURL: "https://sqs.us-east-1.abc.xyz/627959692251/test-s3-logs", + endpoint: "abc.xyz", + want: "us-east-1", + }, + { + name: "abc.xyz_and_domain_with_blank_endpoint", + queueURL: "https://sqs.us-east-1.abc.xyz/627959692251/test-s3-logs", + wantErr: errBadQueueURL, + }, + { + name: "abc.xyz_and_domain_with_different_endpoint", + queueURL: "https://sqs.us-east-1.abc.xyz/627959692251/test-s3-logs", + endpoint: "googlecloud.com", + wantErr: errBadQueueURL, + }, + { + name: "localstack", + queueURL: "http://localhost:4566/000000000000/filebeat-s3-integtest-d9clk9", + deflt: "localstack", + want: "localstack", + }, + { + name: "localstack_sns", + queueURL: "http://localhost:4566/000000000000/filebeat-s3-integtest-sns-d9clk9", + deflt: "localstack_sns", + want: "localstack_sns", + }, + { + name: "invalid_queue_url", + queueURL: ":foo", + wantErr: errors.New(":foo is not a valid URL"), + }, + } + + for _, test := range tests { + t.Run(test.name, func(t *testing.T) { + got, err := getRegionFromQueueURL(test.queueURL, test.endpoint, test.deflt) + if !sameError(err, test.wantErr) { + t.Errorf("unexpected error: got:%v want:%v", err, test.wantErr) + } + if got != test.want { + t.Errorf("unexpected result: got:%q want:%q", got, test.want) + } + }) + } +} + +func sameError(a, b error) bool { + switch { + case a == nil && b == nil: + return true + case a == nil, b == nil: + return false + default: + return a.Error() == b.Error() + } } From 0672e11390f6d481e0e353251cd35ccf31b8fab8 Mon Sep 17 00:00:00 2001 From: Maurizio Branca Date: Thu, 8 Jun 2023 16:59:17 +0200 Subject: [PATCH 30/52] Fix provider name in debug log message (#35644) --- x-pack/libbeat/common/aws/credentials.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/libbeat/common/aws/credentials.go b/x-pack/libbeat/common/aws/credentials.go index ec0c68874e53..b4961fbd6cc5 100644 --- a/x-pack/libbeat/common/aws/credentials.go +++ b/x-pack/libbeat/common/aws/credentials.go @@ -156,7 +156,7 @@ func addAssumeRoleProviderToAwsConfig(config ConfigAWS, awsConfig *awssdk.Config // addStaticCredentialsProviderToAwsConfig adds a static credentials provider to the current AWS config by using the keys stored in Beats config func addStaticCredentialsProviderToAwsConfig(beatsConfig ConfigAWS, awsConfig *awssdk.Config) { logger := logp.NewLogger("addStaticCredentialsProviderToAwsConfig") - logger.Debug("Switching credentials provider to AssumeRoleProvider") + logger.Debug("Switching credentials provider to StaticCredentialsProvider") staticCredentialsProvider := credentials.NewStaticCredentialsProvider( beatsConfig.AccessKeyID, beatsConfig.SecretAccessKey, From b4572d44438f1067a03589dc9d923eaaced6c8c0 Mon Sep 17 00:00:00 2001 From: kaiyan-sheng Date: Thu, 8 Jun 2023 10:58:52 -0600 Subject: [PATCH 31/52] [AWS S3 input] Add support in s3 input for JSON with array of objects (#35475) Co-authored-by: Andrew Kroh --- CHANGELOG.next.asciidoc | 1 + .../docs/inputs/input-aws-s3.asciidoc | 21 +++++++++++++++++-- x-pack/filebeat/input/awss3/s3_objects.go | 18 +++++++++------- .../filebeat/input/awss3/s3_objects_test.go | 10 +++++++++ .../filebeat/input/awss3/testdata/array.json | 10 +++++++++ 5 files changed, 51 insertions(+), 9 deletions(-) create mode 100644 x-pack/filebeat/input/awss3/testdata/array.json diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 609865cddfa8..da174ed612c7 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -122,6 +122,7 @@ https://github.com/elastic/beats/compare/v8.7.1\...main[Check the HEAD diff] - Move repeated Windows event channel not found errors in winlog input to debug level. {issue}35314[35314] {pull}35317[35317] - Fix crash when processing forwarded logs missing a message. {issue}34705[34705] {pull}34865[34865] - Fix crash when loading azurewebstorage cursor with no partially processed data. {pull}35433[35433] +- Add support in s3 input for JSON with array of objects. {pull}35475[35475] - RFC5424 syslog timestamps with offset 'Z' will be treated as UTC rather than using the default timezone. {pull}35360[35360] - [system] sync system/auth dataset with system integration 1.29.0. {pull}35581[35581] - [GCS Input] - Fixed an issue where bucket_timeout was being applied to the entire bucket poll interval and not individual bucket object read operations. Fixed a map write concurrency issue arising from data races when using a high number of workers. Fixed the flaky tests that were present in the GCS test suit. {pull}35605[35605] diff --git a/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc b/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc index f99e6ad01336..87e225524825 100644 --- a/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc +++ b/x-pack/filebeat/docs/inputs/input-aws-s3.asciidoc @@ -120,8 +120,8 @@ characters. This only applies to non-JSON logs. See <<_encoding_3>>. ==== `expand_event_list_from_field` If the fileset using this input expects to receive multiple messages bundled -under a specific field then the config option `expand_event_list_from_field` -value can be assigned the name of the field. This setting will be able to split +under a specific field or an array of objects then the config option `expand_event_list_from_field` +value can be assigned the name of the field or `.[]`. This setting will be able to split the messages under the group value into separate events. For example, CloudTrail logs are in JSON format and events are found under the JSON object "Records". @@ -145,6 +145,23 @@ logs are in JSON format and events are found under the JSON object "Records". } ---- +Or when `expand_event_list_from_field` is set to `.[]`, an array of objects will be split +into separate events. + +["source","json"] +---- +[ + { + "id":"1234", + "message":"success" + }, + { + "id":"5678", + "message":"failure" + } +] +---- + Note: When `expand_event_list_from_field` parameter is given in the config, aws-s3 input will assume the logs are in JSON format and decode them as JSON. Content type will not be checked. If a file has "application/json" content-type, diff --git a/x-pack/filebeat/input/awss3/s3_objects.go b/x-pack/filebeat/input/awss3/s3_objects.go index 933a6c41a8e9..eb9d9a7eddb5 100644 --- a/x-pack/filebeat/input/awss3/s3_objects.go +++ b/x-pack/filebeat/input/awss3/s3_objects.go @@ -234,14 +234,18 @@ func (p *s3ObjectProcessor) readJSON(r io.Reader) error { } func (p *s3ObjectProcessor) splitEventList(key string, raw json.RawMessage, offset int64, objHash string) error { - var jsonObject map[string]json.RawMessage - if err := json.Unmarshal(raw, &jsonObject); err != nil { - return err - } + // .[] signifies the root object is an array, and it should be split. + if key != ".[]" { + var jsonObject map[string]json.RawMessage + if err := json.Unmarshal(raw, &jsonObject); err != nil { + return err + } - raw, found := jsonObject[key] - if !found { - return fmt.Errorf("expand_event_list_from_field key <%v> is not in event", key) + var found bool + raw, found = jsonObject[key] + if !found { + return fmt.Errorf("expand_event_list_from_field key <%v> is not in event", key) + } } dec := json.NewDecoder(bytes.NewReader(raw)) diff --git a/x-pack/filebeat/input/awss3/s3_objects_test.go b/x-pack/filebeat/input/awss3/s3_objects_test.go index 61b6124cd9a0..a1e7e4f0b81c 100644 --- a/x-pack/filebeat/input/awss3/s3_objects_test.go +++ b/x-pack/filebeat/input/awss3/s3_objects_test.go @@ -113,6 +113,16 @@ func TestS3ObjectProcessor(t *testing.T) { testProcessS3ObjectError(t, "testdata/events-array.json", "application/json", 0, sel) }) + t.Run("split array with expand_event_list_from_field equals .[]", func(t *testing.T) { + sel := fileSelectorConfig{ReaderConfig: readerConfig{ExpandEventListFromField: ".[]"}} + testProcessS3Object(t, "testdata/array.json", "application/json", 2, sel) + }) + + t.Run("split array without expand_event_list_from_field", func(t *testing.T) { + sel := fileSelectorConfig{ReaderConfig: readerConfig{ExpandEventListFromField: ""}} + testProcessS3Object(t, "testdata/array.json", "application/json", 1, sel) + }) + t.Run("events have a unique repeatable _id", func(t *testing.T) { // Hash of bucket ARN, object key, object versionId, and log offset. events := testProcessS3Object(t, "testdata/log.txt", "text/plain", 2) diff --git a/x-pack/filebeat/input/awss3/testdata/array.json b/x-pack/filebeat/input/awss3/testdata/array.json new file mode 100644 index 000000000000..8d22df6aeb8a --- /dev/null +++ b/x-pack/filebeat/input/awss3/testdata/array.json @@ -0,0 +1,10 @@ +[ + { + "time": "2021-05-25 18:20:58 UTC", + "msg": "hello" + }, + { + "time": "2021-05-26 22:21:40 UTC", + "msg": "world" + } +] From 4dba7636f530cab52d5c268c099b1b38f2013e39 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 8 Jun 2023 13:26:03 -0400 Subject: [PATCH 32/52] Bump github.com/elastic/elastic-agent-libs from 0.3.8 to 0.3.9 (#35718) * Bump github.com/elastic/elastic-agent-libs from 0.3.8 to 0.3.9 Bumps [github.com/elastic/elastic-agent-libs](https://github.com/elastic/elastic-agent-libs) from 0.3.8 to 0.3.9. - [Release notes](https://github.com/elastic/elastic-agent-libs/releases) - [Commits](https://github.com/elastic/elastic-agent-libs/compare/v0.3.8...v0.3.9) --- updated-dependencies: - dependency-name: github.com/elastic/elastic-agent-libs dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] * Update NOTICE.txt --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] --- NOTICE.txt | 4 ++-- go.mod | 2 +- go.sum | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/NOTICE.txt b/NOTICE.txt index 8bb5ad7c5373..2572713e6305 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -12571,11 +12571,11 @@ SOFTWARE -------------------------------------------------------------------------------- Dependency : github.com/elastic/elastic-agent-libs -Version: v0.3.8 +Version: v0.3.9 Licence type (autodetected): Apache-2.0 -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-agent-libs@v0.3.8/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-agent-libs@v0.3.9/LICENSE: Apache License Version 2.0, January 2004 diff --git a/go.mod b/go.mod index 0189bd2ebd77..efec264c0bd8 100644 --- a/go.mod +++ b/go.mod @@ -200,7 +200,7 @@ require ( github.com/awslabs/kinesis-aggregation/go/v2 v2.0.0-20220623125934-28468a6701b5 github.com/elastic/bayeux v1.0.5 github.com/elastic/elastic-agent-autodiscover v0.6.1 - github.com/elastic/elastic-agent-libs v0.3.8 + github.com/elastic/elastic-agent-libs v0.3.9 github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3 github.com/elastic/elastic-agent-system-metrics v0.6.1 github.com/elastic/go-elasticsearch/v8 v8.8.0 diff --git a/go.sum b/go.sum index 907f4a7364f0..bf1eaf2997ed 100644 --- a/go.sum +++ b/go.sum @@ -518,8 +518,8 @@ github.com/elastic/elastic-agent-autodiscover v0.6.1 h1:vXR+3QVDL7Ij7IMKul13iIiD github.com/elastic/elastic-agent-autodiscover v0.6.1/go.mod h1:yXYKFAG+Py+TcE4CCR8EAbJiYb+6Dz9sCDoWgOveqtU= github.com/elastic/elastic-agent-client/v7 v7.1.2 h1:p6KvvDMoFCBPvchxcx9cRXpRjsDaii0m/wE3lqQxpmM= github.com/elastic/elastic-agent-client/v7 v7.1.2/go.mod h1:G3Mk1pHXxvj3wC5FvsGUlPOsvapTB5SfrUmWiJDXT6Q= -github.com/elastic/elastic-agent-libs v0.3.8 h1:kj8yNIu/dYrAfxXZKTmCsEgP6agAvmCra22TKTGsU+M= -github.com/elastic/elastic-agent-libs v0.3.8/go.mod h1:h48hzjQcn6XPwfWRM5HimAKlsG0J92ULgAzdX+WedA8= +github.com/elastic/elastic-agent-libs v0.3.9 h1:2xbZUOM20Q9ni3dkNjj8r274fub22SuLqi6SedknV7g= +github.com/elastic/elastic-agent-libs v0.3.9/go.mod h1:Fy5QqIOax0EOVeQJ2l5Ux+GmJsX549Obllru5R1bHLI= github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3 h1:sb+25XJn/JcC9/VL8HX4r4QXSUq4uTNzGS2kxOE7u1U= github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3/go.mod h1:rWarFM7qYxJKsi9WcV6ONcFjH/NA3niDNpTxO+8/GVI= github.com/elastic/elastic-agent-system-metrics v0.6.1 h1:LCN1lvQTkdUuU/rKlpKyVMDU/G/I8/iZWCaW6K+mo4o= From f694f398260504e9ba8bbd04fae0bb1e2c94082e Mon Sep 17 00:00:00 2001 From: Justin Kambic Date: Thu, 8 Jun 2023 16:34:29 -0400 Subject: [PATCH 33/52] [Heartbeat] Update gval to latest version to improve Heartbeat JSON parsing (#35636) * Update gval to latest version to improve Heartbeat JSON parsing. * Update CHANGELOG. * update notice and go deps --------- Co-authored-by: Lee E. Hinman Co-authored-by: Andrew Cholakian --- CHANGELOG.next.asciidoc | 1 + NOTICE.txt | 59 +++++++++++++++++++++++++++++++++++++++-- go.mod | 3 ++- go.sum | 5 +++- 4 files changed, 64 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index da174ed612c7..e97b5956f597 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -150,6 +150,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Fix project monitor temp directories permission to include group access. {pull}35398[35398] - Fix output pipeline exit on run_once. {pull}35376[35376] - Fix formatting issue with socket trace timeout. {pull}35434[35434] +- Update gval version. {pull}35636[35636] - Fix serialization of processors when running diagnostics. {pull}35698[35698] *Heartbeat* diff --git a/NOTICE.txt b/NOTICE.txt index 2572713e6305..6224f80db989 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -2407,11 +2407,11 @@ SOFTWARE. -------------------------------------------------------------------------------- Dependency : github.com/PaesslerAG/gval -Version: v1.0.0 +Version: v1.2.2 Licence type (autodetected): BSD-3-Clause -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/!paessler!a!g/gval@v1.0.0/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/!paessler!a!g/gval@v1.2.2/LICENSE: Copyright (c) 2017, Paessler AG All rights reserved. @@ -47154,6 +47154,61 @@ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +-------------------------------------------------------------------------------- +Dependency : github.com/shopspring/decimal +Version: v1.3.1 +Licence type (autodetected): MIT +-------------------------------------------------------------------------------- + +Contents of probable licence file $GOMODCACHE/github.com/shopspring/decimal@v1.3.1/LICENSE: + +The MIT License (MIT) + +Copyright (c) 2015 Spring, Inc. + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. + +- Based on https://github.com/oguzbilgic/fpd, which has the following license: +""" +The MIT License (MIT) + +Copyright (c) 2013 Oguz Bilgic + +Permission is hereby granted, free of charge, to any person obtaining a copy of +this software and associated documentation files (the "Software"), to deal in +the Software without restriction, including without limitation the rights to +use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of +the Software, and to permit persons to whom the Software is furnished to do so, +subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS +FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR +COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER +IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN +CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +""" + + -------------------------------------------------------------------------------- Dependency : github.com/sirupsen/logrus Version: v1.9.0 diff --git a/go.mod b/go.mod index efec264c0bd8..7649e8af49ec 100644 --- a/go.mod +++ b/go.mod @@ -17,7 +17,7 @@ require ( github.com/Azure/go-autorest/autorest/date v0.3.0 github.com/Masterminds/semver v1.5.0 // indirect github.com/Microsoft/go-winio v0.6.1 - github.com/PaesslerAG/gval v1.0.0 + github.com/PaesslerAG/gval v1.2.2 github.com/PaesslerAG/jsonpath v0.1.1 github.com/Shopify/sarama v1.27.0 github.com/StackExchange/wmi v1.2.1 @@ -137,6 +137,7 @@ require ( github.com/samuel/go-parser v0.0.0-20130731160455-ca8abbf65d0e // indirect github.com/samuel/go-thrift v0.0.0-20140522043831-2187045faa54 github.com/sanathkr/yaml v1.0.1-0.20170819201035-0056894fa522 // indirect + github.com/shopspring/decimal v1.3.1 // indirect github.com/spf13/cobra v1.3.0 github.com/spf13/pflag v1.0.5 github.com/stretchr/testify v1.8.2 diff --git a/go.sum b/go.sum index bf1eaf2997ed..7ad2f76ab849 100644 --- a/go.sum +++ b/go.sum @@ -187,8 +187,9 @@ github.com/Microsoft/hcsshim v0.8.7/go.mod h1:OHd7sQqRFrYd3RmSgbgji+ctCwkbq2wbEY github.com/NYTimes/gziphandler v0.0.0-20170623195520-56545f4a5d46/go.mod h1:3wb06e3pkSAbeQ52E9H9iFoQsEEwGN64994WTCIhntQ= github.com/OneOfOne/xxhash v1.2.2 h1:KMrpdQIwFcEqXDklaen+P1axHaj9BSKzvpUUfnHldSE= github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU= -github.com/PaesslerAG/gval v1.0.0 h1:GEKnRwkWDdf9dOmKcNrar9EA1bz1z9DqPIO1+iLzhd8= github.com/PaesslerAG/gval v1.0.0/go.mod h1:y/nm5yEyTeX6av0OfKJNp9rBNj2XrGhAf5+v24IBN1I= +github.com/PaesslerAG/gval v1.2.2 h1:Y7iBzhgE09IGTt5QgGQ2IdaYYYOU134YGHBThD+wm9E= +github.com/PaesslerAG/gval v1.2.2/go.mod h1:XRFLwvmkTEdYziLdaCeCa5ImcGVrfQbeNUbVR+C6xac= github.com/PaesslerAG/jsonpath v0.1.0/go.mod h1:4BzmtoM/PI8fPO4aQGIusjGxGir2BzcV0grWtFzq1Y8= github.com/PaesslerAG/jsonpath v0.1.1 h1:c1/AToHQMVsduPAa4Vh6xp2U0evy4t8SWp8imEsylIk= github.com/PaesslerAG/jsonpath v0.1.1/go.mod h1:lVboNxFGal/VwW6d9JzIy56bUsYAP6tH/x80vjnCseY= @@ -1488,6 +1489,8 @@ github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKl github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/shirou/gopsutil/v3 v3.21.12 h1:VoGxEW2hpmz0Vt3wUvHIl9fquzYLNpVpgNNB7pGJimA= github.com/shirou/gopsutil/v3 v3.21.12/go.mod h1:BToYZVTlSVlfazpDDYFnsVZLaoRG+g8ufT6fPQLdJzA= +github.com/shopspring/decimal v1.3.1 h1:2Usl1nmF/WZucqkFZhnfFYxxxu8LG21F6nPQBE5gKV8= +github.com/shopspring/decimal v1.3.1/go.mod h1:DKyhrW/HYNuLGql+MJL6WCR6knT2jwCFRcu2hWCYk4o= github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749/go.mod h1:ZY1cvUeJuFPAdZ/B6v7RHavJWZn2YPVFQ1OSXhCGOkg= github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc= github.com/shurcooL/vfsgen v0.0.0-20181202132449-6a9ea43bcacd/go.mod h1:TrYk7fJVaAttu97ZZKrO9UbRa8izdowaMIZcxYMbVaw= From 1af70aa5fcb7748cef3f9acacd8f79f34cd94f0a Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Thu, 8 Jun 2023 19:27:05 -0400 Subject: [PATCH 34/52] dependabot - Segment by responsible team (#35723) Segment the dependabot config based on the responsible GitHub team in order to make it more clear who is responsible for approving the change. The idea is that the responsible team is in the best position to know if the dependency should be updated, whether it should be backported, and what should be listed in the changelog. --- .github/CODEOWNERS | 1 + .github/dependabot.yml | 61 +++++++++++++++++++++++++++++++++++++----- 2 files changed, 56 insertions(+), 6 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 97d5edd24f4e..056aff10854e 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -109,6 +109,7 @@ CHANGELOG* /x-pack/filebeat/input/azureblobstorage/ @elastic/security-external-integrations /x-pack/filebeat/input/azureeventhub/ @elastic/obs-cloud-monitoring /x-pack/filebeat/input/cel/ @elastic/security-external-integrations +/x-pack/filebeat/input/cometd/ @elastic/obs-infraobs-integrations /x-pack/filebeat/input/entityanalytics/ @elastic/security-external-integrations /x-pack/filebeat/input/gcppubsub/ @elastic/security-external-integrations /x-pack/filebeat/input/gcs/ @elastic/security-external-integrations diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ecb9a52d6772..0238179f29cf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,15 +1,64 @@ --- version: 2 +# This section is segmented by the responsible GitHub teams in order +# to make it clear who is responsible for reviewing. updates: - - package-ecosystem: "gomod" - directory: "/" + - package-ecosystem: gomod + directory: / schedule: - interval: "daily" + interval: daily labels: - automation + - dependabot - Team:Elastic-Agent-Data-Plane allow: - - dependency-name: "github.com/elastic/*" + - dependency-name: github.com/elastic/elastic-agent-autodiscover + - dependency-name: github.com/elastic/elastic-agent-client/* + - dependency-name: github.com/elastic/elastic-agent-libs + - dependency-name: github.com/elastic/elastic-agent-shipper-client + - dependency-name: github.com/elastic/elastic-agent-system-metrics + - dependency-name: github.com/elastic/go-concert + - dependency-name: github.com/elastic/go-elasticsearch/* + - dependency-name: github.com/elastic/go-licenser + - dependency-name: github.com/elastic/go-lookslike + - dependency-name: github.com/elastic/go-lumber + - dependency-name: github.com/elastic/go-structform + - dependency-name: github.com/elastic/go-sysinfo + - dependency-name: github.com/elastic/go-ucfg + - dependency-name: github.com/elastic/gosigar + - dependency-name: go.elastic.co/apm/* + - dependency-name: go.elastic.co/ecszap + - dependency-name: go.elastic.co/go-licence-detector reviewers: - - "elastic/elastic-agent-data-plane" - open-pull-requests-limit: 10 + - elastic/elastic-agent-data-plane + open-pull-requests-limit: 2 + - package-ecosystem: gomod + directory: / + schedule: + interval: daily + labels: + - automation + - dependabot + - Team:Security-External Integrations + allow: + # Skip github.com/elastic/mito because it requires documentation updates. + - dependency-name: github.com/elastic/go-libaudit/* + - dependency-name: github.com/elastic/go-perf + - dependency-name: github.com/elastic/go-seccomp-bpf + - dependency-name: github.com/elastic/toutoumomoma + reviewers: + - elastic/security-external-integrations + open-pull-requests-limit: 2 + - package-ecosystem: gomod + directory: / + schedule: + interval: daily + labels: + - automation + - dependabot + - Team:Service-Integrations + allow: + - dependency-name: github.com/elastic/bayeux + reviewers: + - elastic/obs-infraobs-integrations + open-pull-requests-limit: 2 From 25adc03b601e4016e2e0dd674c2e447bb702ba4c Mon Sep 17 00:00:00 2001 From: Anderson Queiroz Date: Fri, 9 Jun 2023 11:56:39 +0200 Subject: [PATCH 35/52] add doc-site-branch to version.asciidoc and settings.go (#35693) --- dev-tools/mage/settings.go | 9 +++++---- libbeat/docs/version.asciidoc | 3 +++ 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/dev-tools/mage/settings.go b/dev-tools/mage/settings.go index 0fe010877f0a..2e82c6d6c0d4 100644 --- a/dev-tools/mage/settings.go +++ b/dev-tools/mage/settings.go @@ -386,10 +386,11 @@ func beatVersion() (string, error) { } var ( - beatDocBranchRegex = regexp.MustCompile(`(?m)doc-branch:\s*([^\s]+)\r?$`) - beatDocBranchValue string - beatDocBranchErr error - beatDocBranchOnce sync.Once + beatDocBranchRegex = regexp.MustCompile(`(?m)doc-branch:\s*([^\s]+)\r?$`) + beatDocSiteBranchRegex = regexp.MustCompile(`(?m)doc-site-branch:\s*([^\s]+)\r?$`) + beatDocBranchValue string + beatDocBranchErr error + beatDocBranchOnce sync.Once ) // BeatDocBranch returns the documentation branch name associated with the diff --git a/libbeat/docs/version.asciidoc b/libbeat/docs/version.asciidoc index 191e466d9557..d3261c6d65c3 100644 --- a/libbeat/docs/version.asciidoc +++ b/libbeat/docs/version.asciidoc @@ -1,5 +1,8 @@ :stack-version: 8.9.0 :doc-branch: main +// FIXME: once elastic.co docs have been switched over to use `main`, remove +// the `doc-site-branch` line below as well as any references to it in the code. +:doc-site-branch: master :go-version: 1.19.9 :release-state: unreleased :python: 3.7 From f15240f0a326655842a659eed2cefd1c34d8a1f0 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Fri, 9 Jun 2023 12:21:59 +0200 Subject: [PATCH 36/52] [main](backport #35695) [Release] Prepare Changelog for 8.8.1 (#35715) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * [Release] Prepare Changelog for 8.8.1 (#35695) --------- Co-authored-by: Elastic Machine Co-authored-by: Paolo Chilà Co-authored-by: Pierre HILBERT --- CHANGELOG.asciidoc | 125 +++++++++++++++++++++++++++++++++- CHANGELOG.next.asciidoc | 2 +- libbeat/docs/release.asciidoc | 2 + 3 files changed, 127 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index 3c5052bdc2b3..f49c6480c144 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -3,6 +3,124 @@ :issue: https://github.com/elastic/beats/issues/ :pull: https://github.com/elastic/beats/pull/ +[[release-notes-8.8.1]] +=== Beats version 8.8.1 +https://github.com/elastic/beats/compare/v8.8.0\...v8.8.1[View commits] + +==== Bugfixes + +*Affecting all Beats* + +- 'add_cloud_metadata' processor: add `cloud.region` field for GCE cloud provider +- 'add_cloud_metadata' processor: update Azure metadata API version to get missing `cloud.account.id` field + +*Filebeat* + +- Fix "Can only start an input when all related states are finished" error when running under Elastic Agent {pull}35250[35250] {issue}33653[33653] +- [system] Sync system/auth dataset with system integration 1.29.0. {pull}35581[35581] +- Fix filestream false positive log error "filestream input with ID 'xyz' already exists" {issue}31767[31767] +- Fix error when trying to use `include_message` parser {issue}35440[35440] + +==== Added + +*Filebeat* + +- Add sanitization capabilities to azure-eventhub input {pull}34874[34874] + +*Auditbeat* +- Migration of system/package module storage from gob encoding to flatbuffer encoding in bolt db. {pull}34817[34817] + +*Metricbeat* + +- Support collecting metrics from both the monitoring account and linked accounts from AWS CloudWatch. {pull}35540[35540] +- Add new parameter `include_linked_accounts` to enable/disable metrics collection from multiple linked AWS Accounts {pull}35648[35648] + + +[[release-notes-8.8.0]] +=== Beats version 8.8.0 +https://github.com/elastic/beats/compare/v8.7.1...v8.8.0[View commits] + + +==== Bugfixes + +*Affecting all Beats* +- Fix race condition when stopping runners {pull}32433[32433] +- Fix concurrent map writes when system/process code called from reporter code {pull}32491[32491] +- The Elasticsearch output now splits large requests instead of dropping them when it receives a StatusRequestEntityTooLarge error. {pull}34911[34911] +- In cases where the matcher detects a non-string type in a match statement, report the error as a debug statement, and not a warning statement. {pull}35119[35119] +- `add_cloud_metadata` processor: Add `cloud.region` field for GCE cloud provider. +- `add_cloud_metadata` processor: Update Azure metadata API version to get missing `cloud.account.id` field. + +*Filebeat* +- [GCS Input] Added missing locks for safe concurrency. {pull}34914[34914] +- Fix the `ignore_inactive` option being ignored in Filebeat's filestream input. {pull}34770[34770] +- Add input instance ID to request trace filename for httpjson and cel inputs. {pull}35024[35024] +- Sanitize filenames for request tracer in httpjson input. {pull}35143[35143] +- Sanitize filenames for request tracer in cel input. {pull}35154[35154] +- Fix the grok expression outputs of log files. {pull}35221[35221] +- Move repeated Windows event channel not found errors in winlog input to debug level. {issue}35314[35314] {pull}35317[35317] +- Fix crash when processing forwarded logs missing a message. {issue}34705[34705] {pull}34865[34865] +- Fix crash when loading azurewebstorage cursor with no partially processed data. {pull}35433[35433] + +*Heartbeat* + +- Fix panics when parsing when HTTP URL is not parseable. {pull}34702[34702] +- Fix broken state ID location naming. {pull}35336[35336] +- Fix project monitor temp directories permission to include group access. {pull}35398[35398] +- Fix output pipeline exit on `run_once`. {pull}35376[35376] +- Fix formatting issue with socket trace timeout. {pull}35434[35434] + +*Metricbeat* + +- Make generic SQL GA. {pull}34637[34637] +- Collect missing `remote_cluster` in Elasticsearch CCR metricset. {pull}34957[34957] +- Add context with timeout in AWS API calls. {pull}35425[35425] + +*Osquerybeat* + +- Adds the `elastic_file_analysis` table to the Osquery extension for macOS builds. {pull}35056[35056] + +*Packetbeat* + +- Fix BPF filter setting not being applied to sniffers. {issue}35363[35363] {pull}35484[35484] + +*Winlogbeat* + +- Move repeated channel not found errors to debug level. {issue}35314[35314] {pull}35317[35317] +- Fix panic due to misrepresented buffer use. {pull}35437[35437] +- Allow program termination when attempting to open an absent channel. {pull}35474[35474] + +==== Added + +*Filebeat* + +- Add metric `sqs_messages_waiting_gauge` for aws-s3 input. {pull}34488[34488] +- Add support for Okta debug attributes, `risk_reasons`, `risk_behaviors` and `factor`. {issue}33677[33677] {pull}34508[34508] +- Add `nginx.ingress_controller.upstream.ip` to `related.ip` {issue}34645[34645] {pull}34672[34672] +- Include NAT and firewall IPs in `related.ip` in Fortinet Firewall module. {issue}34640[34640] {pull}34673[34673] +- Add UNIX socket log parsing for NGINX `ingress_controller`. {pull}34732[34732] +- Add metric `sqs_worker_utilization` for aws-s3 input. {pull}34793[34793] +- Register MIME handlers for CSV types in CEL input. {pull}34934[34934] +- Add MySQL authentication message parsing and `related.ip` and `related.user` fields. {pull}34810[34810] +- Mention `mito` CEL tool in CEL input docs. {pull}34959[34959] +- Add nginx ingress_controller parsing if one of upstreams fails to return response. {pull}34787[34787] +- Allow neflow v9 and ipfix templates to be shared between source addresses. {pull}35036[35036] +- Add support for collecting IPv6 metrics. {pull}35123[35123] +- Add Oracle authentication messages parsing {pull}35127[35127] + +*Heartbeat* +- Add status to monitor run log report. +- Remov Beta label for browser monitors. {pull}35424[35424]. + +*Metricbeat* + +- Add GCP Carbon Footprint metricbeat data. {pull}34820[34820] +- Add event loop utilization metric to Kibana module. {pull}35020[35020] + +*Winlogbeat* + +- Add `event.category` and `event.type` to Sysmon module for EventIDs 8, 9, 19, 20, 27, 28, 255. {pull}35193[35193] + [[release-notes-8.7.1]] === Beats version 8.7.1 https://github.com/elastic/beats/compare/v8.7.0\...v8.7.1[View commits] @@ -123,6 +241,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Metrics hosted by the HTTP monitoring endpoint for the `aws-cloudwatch`, `aws-s3`, `cel`, and `lumberjack` inputs are now available under `/inputs/` instead of `/dataset`. *Heartbeat* + - Users can now configure max scheduler job limits per monitor type via env var. {pull}34307[34307] - Remove host and port matching restrictions on hint-generated monitors. {pull}34376[34376] @@ -153,6 +272,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 === Beats version 8.6.2 https://github.com/elastic/beats/compare/v8.6.1\...v8.6.2[View commits] + ==== Bugfixes *Affecting all Beats* @@ -199,10 +319,12 @@ https://github.com/elastic/beats/compare/v8.6.1\...v8.6.2[View commits] ==== Added + *Filebeat* - Added support for HTTP destination override to Google Cloud Storage input. {pull}34413[34413] + [[release-notes-8.6.1]] === Beats version 8.6.1 https://github.com/elastic/beats/compare/v8.6.0\...v8.6.1[View commits] @@ -9537,7 +9659,7 @@ https://github.com/elastic/beats/compare/1.0.0-beta3\...1.0.0-beta4[Check - Add tls configuration support to elasticsearch and logstash outputers #139 - All external dependencies were updated to the latest version. Update to Golang 1.5.1 #162 - Guarantee ES index is based in UTC time zone #164 -- Cache: optional per element timeout #144 +- Cache: optional per element timeout #144 - Make it possible to set hosts in different ways. #135 - Expose more TLS config options #124 - Use the Beat name in the default configuration file path #99 @@ -9577,3 +9699,4 @@ https://github.com/elastic/beats/compare/1.0.0-beta3\...1.0.0-beta4[Check - Redis output was deprecated #169 #145 - Host and port configuration options are deprecated. They are replaced by the hosts configuration option. #141 + diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index e97b5956f597..8c1cfd142f1b 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -4,7 +4,7 @@ :pull: https://github.com/elastic/beats/pull/ === Beats version HEAD -https://github.com/elastic/beats/compare/v8.7.1\...main[Check the HEAD diff] +https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] ==== Breaking changes diff --git a/libbeat/docs/release.asciidoc b/libbeat/docs/release.asciidoc index 23ebd3d9b11c..f242bd0fb830 100644 --- a/libbeat/docs/release.asciidoc +++ b/libbeat/docs/release.asciidoc @@ -8,6 +8,8 @@ This section summarizes the changes in each release. Also read <> for more detail about changes that affect upgrade. +* <> +* <> * <> * <> * <> From d09aa32ea7db5ba24691e60b381e8f32a0ccb46a Mon Sep 17 00:00:00 2001 From: ShourieG <105607378+ShourieG@users.noreply.github.com> Date: Fri, 9 Jun 2023 18:24:31 +0530 Subject: [PATCH 37/52] [filebeat][gcs] - Fixed the source of max workers in scheduler (#35729) * changed Maxworkers source in scheduler * updated changelog --- CHANGELOG.next.asciidoc | 1 + x-pack/filebeat/input/gcs/scheduler.go | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 8c1cfd142f1b..24c5ecae956b 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -129,6 +129,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Fix filestream false positive log error "filestream input with ID 'xyz' already exists" {issue}31767[31767] - Fix error when trying to use `include_message` parser {issue}35440[35440] - Fix handling of IPv6 unspecified addresses in TCP input. {issue}35064[35064] {pull}35637[35637] +- Fixed a minor code error in the GCS input scheduler where a config value was being used directly instead of the source struct. {pull}35729[35729] *Heartbeat* diff --git a/x-pack/filebeat/input/gcs/scheduler.go b/x-pack/filebeat/input/gcs/scheduler.go index 8e1ba95ae8e7..d88112979b2a 100644 --- a/x-pack/filebeat/input/gcs/scheduler.go +++ b/x-pack/filebeat/input/gcs/scheduler.go @@ -87,7 +87,7 @@ func (l *limiter) release() { func (s *scheduler) scheduleOnce(ctx context.Context) error { defer s.limiter.wait() - pager := s.fetchObjectPager(ctx, *s.cfg.MaxWorkers) + pager := s.fetchObjectPager(ctx, s.src.MaxWorkers) var numObs, numJobs int for { var objects []*storage.ObjectAttrs From 0f0599804d836e36bb82dfb7987aad06a3b848f8 Mon Sep 17 00:00:00 2001 From: James Moon <118876885+jmoon-elastic@users.noreply.github.com> Date: Fri, 9 Jun 2023 23:29:26 +1000 Subject: [PATCH 38/52] Update input-mqtt.asciidoc (#35672) Added the default value of QoS levels in MQTT. If the field is not initialised then zero-value of the type is considered i.e., QoS field is of type int and for numeric types the default is 0 unless the field is initialized. https://github.com/elastic/beats/blob/5eb82caeda0fd76abb9547bb3ce39996ac1d2b50/filebeat/input/mqtt/config.go#L29 --- filebeat/docs/inputs/input-mqtt.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/filebeat/docs/inputs/input-mqtt.asciidoc b/filebeat/docs/inputs/input-mqtt.asciidoc index 87ba15442804..081f9788234c 100644 --- a/filebeat/docs/inputs/input-mqtt.asciidoc +++ b/filebeat/docs/inputs/input-mqtt.asciidoc @@ -50,7 +50,7 @@ A list of topics to subscribe to and read from. An agreement level between the sender of a message and the receiver of a message that defines the guarantee of delivery. -There are 3 QoS levels in MQTT: +There are 3 QoS levels in MQTT. Defaults to `0`: * At most once (`0`), * At least once (`1`), From 7fe2d7cf07a9d36c8d2302d9606597aa6f490d49 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Jun 2023 09:20:34 -0700 Subject: [PATCH 39/52] Bump github.com/elastic/go-elasticsearch/v8 from 8.8.0 to 8.8.1 (#35731) * Bump github.com/elastic/go-elasticsearch/v8 from 8.8.0 to 8.8.1 Bumps [github.com/elastic/go-elasticsearch/v8](https://github.com/elastic/go-elasticsearch) from 8.8.0 to 8.8.1. - [Release notes](https://github.com/elastic/go-elasticsearch/releases) - [Changelog](https://github.com/elastic/go-elasticsearch/blob/main/CHANGELOG.md) - [Commits](https://github.com/elastic/go-elasticsearch/compare/v8.8.0...v8.8.1) --- updated-dependencies: - dependency-name: github.com/elastic/go-elasticsearch/v8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] * Update NOTICE.txt --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] --- NOTICE.txt | 8 ++++---- go.mod | 4 ++-- go.sum | 9 ++++----- 3 files changed, 10 insertions(+), 11 deletions(-) diff --git a/NOTICE.txt b/NOTICE.txt index 6224f80db989..2d2d261fadcd 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -13307,11 +13307,11 @@ Contents of probable licence file $GOMODCACHE/github.com/elastic/go-concert@v0.2 -------------------------------------------------------------------------------- Dependency : github.com/elastic/go-elasticsearch/v8 -Version: v8.8.0 +Version: v8.8.1 Licence type (autodetected): Apache-2.0 -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/go-elasticsearch/v8@v8.8.0/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/elastic/go-elasticsearch/v8@v8.8.1/LICENSE: Apache License Version 2.0, January 2004 @@ -35110,11 +35110,11 @@ SOFTWARE. -------------------------------------------------------------------------------- Dependency : github.com/elastic/elastic-transport-go/v8 -Version: v8.2.0 +Version: v8.3.0 Licence type (autodetected): Apache-2.0 -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-transport-go/v8@v8.2.0/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/elastic/elastic-transport-go/v8@v8.3.0/LICENSE: Apache License Version 2.0, January 2004 diff --git a/go.mod b/go.mod index 7649e8af49ec..897039109327 100644 --- a/go.mod +++ b/go.mod @@ -204,7 +204,7 @@ require ( github.com/elastic/elastic-agent-libs v0.3.9 github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3 github.com/elastic/elastic-agent-system-metrics v0.6.1 - github.com/elastic/go-elasticsearch/v8 v8.8.0 + github.com/elastic/go-elasticsearch/v8 v8.8.1 github.com/elastic/mito v1.3.0 github.com/elastic/toutoumomoma v0.0.0-20221026030040-594ef30cb640 github.com/foxcpp/go-mockdns v0.0.0-20201212160233-ede2f9158d15 @@ -263,7 +263,7 @@ require ( github.com/docker/go-metrics v0.0.1 // indirect github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21 // indirect github.com/eapache/queue v1.1.0 // indirect - github.com/elastic/elastic-transport-go/v8 v8.2.0 // indirect + github.com/elastic/elastic-transport-go/v8 v8.3.0 // indirect github.com/elastic/go-windows v1.0.1 // indirect github.com/evanphx/json-patch v4.12.0+incompatible // indirect github.com/fearful-symmetry/gomsr v0.0.1 // indirect diff --git a/go.sum b/go.sum index 7ad2f76ab849..295c9bbd4c21 100644 --- a/go.sum +++ b/go.sum @@ -525,16 +525,15 @@ github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b6 github.com/elastic/elastic-agent-shipper-client v0.5.1-0.20230228231646-f04347b666f3/go.mod h1:rWarFM7qYxJKsi9WcV6ONcFjH/NA3niDNpTxO+8/GVI= github.com/elastic/elastic-agent-system-metrics v0.6.1 h1:LCN1lvQTkdUuU/rKlpKyVMDU/G/I8/iZWCaW6K+mo4o= github.com/elastic/elastic-agent-system-metrics v0.6.1/go.mod h1:Bj8XM/uNKm553blQHkGNEICRLGnVEtw8yttmV5vBngA= -github.com/elastic/elastic-transport-go/v8 v8.0.0-20230329154755-1a3c63de0db6/go.mod h1:87Tcz8IVNe6rVSLdBux1o/PEItLtyabHU3naC7IoqKI= -github.com/elastic/elastic-transport-go/v8 v8.2.0 h1:hkK5IIs/15mpSXzd5THWVlWTKJyMw6cbCWM3T/B2S5E= -github.com/elastic/elastic-transport-go/v8 v8.2.0/go.mod h1:87Tcz8IVNe6rVSLdBux1o/PEItLtyabHU3naC7IoqKI= +github.com/elastic/elastic-transport-go/v8 v8.3.0 h1:DJGxovyQLXGr62e9nDMPSxRyWION0Bh6d9eCFBriiHo= +github.com/elastic/elastic-transport-go/v8 v8.3.0/go.mod h1:87Tcz8IVNe6rVSLdBux1o/PEItLtyabHU3naC7IoqKI= github.com/elastic/fsevents v0.0.0-20181029231046-e1d381a4d270 h1:cWPqxlPtir4RoQVCpGSRXmLqjEHpJKbR60rxh1nQZY4= github.com/elastic/fsevents v0.0.0-20181029231046-e1d381a4d270/go.mod h1:Msl1pdboCbArMF/nSCDUXgQuWTeoMmE/z8607X+k7ng= github.com/elastic/glog v1.0.1-0.20210831205241-7d8b5c89dfc4/go.mod h1:EWib/APOK0SL3dFbYqvxE3UYd8E6s1ouQ7iEp/0LWV4= github.com/elastic/go-concert v0.2.0 h1:GAQrhRVXprnNjtvTP9pWJ1d4ToEA4cU5ci7TwTa20xg= github.com/elastic/go-concert v0.2.0/go.mod h1:HWjpO3IAEJUxOeaJOWXWEp7imKd27foxz9V5vegC/38= -github.com/elastic/go-elasticsearch/v8 v8.8.0 h1:yNBPlXNo6wstMG7I3KiZPbLFgA82RMryYqkh1xBMV3A= -github.com/elastic/go-elasticsearch/v8 v8.8.0/go.mod h1:NGmpvohKiRHXI0Sw4fuUGn6hYOmAXlyCphKpzVBiqDE= +github.com/elastic/go-elasticsearch/v8 v8.8.1 h1:/OiP5Yex40q5eWpzFVQIS8jRE7SaEZrFkG9JbE6TXtY= +github.com/elastic/go-elasticsearch/v8 v8.8.1/go.mod h1:GU1BJHO7WeamP7UhuElYwzzHtvf9SDmeVpSSy9+o6Qg= github.com/elastic/go-libaudit/v2 v2.3.2 h1:qWNcA3nkwNEGh1UBDbDTVF55KR6SM1W2Ji1LGDqFEpw= github.com/elastic/go-libaudit/v2 v2.3.2/go.mod h1:+ZE0czqmbqtnRkl0fNgpI+HvVVRo/ZMJdcXv/PaKcOo= github.com/elastic/go-licenser v0.4.0/go.mod h1:V56wHMpmdURfibNBggaSBfqgPxyT1Tldns1i87iTEvU= From c4398dcf5f62ca4606eaf7d1dbf76635ecf76146 Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Sat, 10 Jun 2023 07:04:58 +0930 Subject: [PATCH 40/52] x-pack/filebeat/input/httpjson: fix benchmarks (#35726) The addition of metrics broke benchmarks due to thre repeated re-registration of the same ID. So make a new ID for each iteration of the benchmark. --- x-pack/filebeat/input/httpjson/input_test.go | 8 ++++---- x-pack/filebeat/input/httpjson/metrics_test.go | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/x-pack/filebeat/input/httpjson/input_test.go b/x-pack/filebeat/input/httpjson/input_test.go index 619d451561d9..bf12335ac3df 100644 --- a/x-pack/filebeat/input/httpjson/input_test.go +++ b/x-pack/filebeat/input/httpjson/input_test.go @@ -1308,7 +1308,7 @@ func TestInput(t *testing.T) { chanClient := beattest.NewChanClient(len(test.expected)) t.Cleanup(func() { _ = chanClient.Close() }) - ctx, cancel := newV2Context() + ctx, cancel := newV2Context("httpjson-foo-eb837d4c-5ced-45ed-b05c-de658135e248::https://somesource/someapi") t.Cleanup(cancel) var g errgroup.Group @@ -1378,7 +1378,7 @@ func BenchmarkInput(b *testing.B) { chanClient := beattest.NewChanClient(len(test.expected)) b.Cleanup(func() { _ = chanClient.Close() }) - ctx, cancel := newV2Context() + ctx, cancel := newV2Context(fmt.Sprintf("%s-%d", test.name, i)) b.Cleanup(cancel) var g errgroup.Group @@ -1478,11 +1478,11 @@ func newChainPaginationTestServer( } } -func newV2Context() (v2.Context, func()) { +func newV2Context(id string) (v2.Context, func()) { ctx, cancel := context.WithCancel(context.Background()) return v2.Context{ Logger: logp.NewLogger("httpjson_test"), - ID: "httpjson-foo-eb837d4c-5ced-45ed-b05c-de658135e248::https://somesource/someapi", + ID: id, Cancelation: ctx, }, cancel } diff --git a/x-pack/filebeat/input/httpjson/metrics_test.go b/x-pack/filebeat/input/httpjson/metrics_test.go index d72243ad1f09..59043a8fcf8c 100644 --- a/x-pack/filebeat/input/httpjson/metrics_test.go +++ b/x-pack/filebeat/input/httpjson/metrics_test.go @@ -113,7 +113,7 @@ func TestMetrics(t *testing.T) { chanClient := beattest.NewChanClient(len(tc.expectedEvents)) t.Cleanup(func() { _ = chanClient.Close() }) - ctx, cancel := newV2Context() + ctx, cancel := newV2Context("httpjson-foo-eb837d4c-5ced-45ed-b05c-de658135e248::https://somesource/someapi") t.Cleanup(cancel) reg, unreg := inputmon.NewInputRegistry("httpjson-test", ctx.ID, nil) From 54b5d97a77598bb2932a7ab268b4b506f830b405 Mon Sep 17 00:00:00 2001 From: ShourieG <105607378+ShourieG@users.noreply.github.com> Date: Mon, 12 Jun 2023 15:30:08 +0530 Subject: [PATCH 41/52] [libbeat][reader][parquet] - Updated Apache Arrow library from v11 to v12.0.1 (#35640) * updated apache arrow library from v11 to v12 * updated changelog * updated notice * updated library to v13 branch * updated notice * changed test files from ndjson to prettified json * updated changelog * downgraded to 12.0.1 stable release of apache arrow * updated docs and notice * shortned vpc flow json file by keeping only 4 records --- CHANGELOG.next.asciidoc | 2 +- NOTICE.txt | 85 +- go.mod | 6 +- go.sum | 11 +- x-pack/libbeat/reader/parquet/parquet.go | 8 +- x-pack/libbeat/reader/parquet/parquet_test.go | 68 +- .../reader/parquet/testdata/cloudtrail.json | 96 ++ .../reader/parquet/testdata/cloudtrail.ndjson | 1 - .../reader/parquet/testdata/route53.json | 76 + .../reader/parquet/testdata/route53.ndjson | 1 - .../reader/parquet/testdata/vpc_flow.json | 330 +++++ .../reader/parquet/testdata/vpc_flow.ndjson | 1304 ----------------- 12 files changed, 559 insertions(+), 1429 deletions(-) create mode 100644 x-pack/libbeat/reader/parquet/testdata/cloudtrail.json delete mode 100644 x-pack/libbeat/reader/parquet/testdata/cloudtrail.ndjson create mode 100644 x-pack/libbeat/reader/parquet/testdata/route53.json delete mode 100644 x-pack/libbeat/reader/parquet/testdata/route53.ndjson create mode 100644 x-pack/libbeat/reader/parquet/testdata/vpc_flow.json delete mode 100644 x-pack/libbeat/reader/parquet/testdata/vpc_flow.ndjson diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 24c5ecae956b..9f297216f3dd 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -65,7 +65,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - 'add_cloud_metadata' processor - add cloud.region field for GCE cloud provider - 'add_cloud_metadata' processor - update azure metadata api version to get missing `cloud.account.id` field - Make sure k8s watchers are closed when closing k8s meta processor. {pull}35630[35630] - +- Upgraded apache arrow library used in x-pack/libbeat/reader/parquet from v11 to v12.0.1 in order to fix cross-compilation issues {pull}35640[35640] *Auditbeat* diff --git a/NOTICE.txt b/NOTICE.txt index 2d2d261fadcd..96a74dcb3bfb 100644 --- a/NOTICE.txt +++ b/NOTICE.txt @@ -2757,12 +2757,12 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. -------------------------------------------------------------------------------- -Dependency : github.com/apache/arrow/go/v11 -Version: v11.0.0 +Dependency : github.com/apache/arrow/go/v12 +Version: v12.0.1-0.20230605094802-c153c6d36ccf Licence type (autodetected): Apache-2.0 -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/apache/arrow/go/v11@v11.0.0/LICENSE.txt: +Contents of probable licence file $GOMODCACHE/github.com/apache/arrow/go/v12@v12.0.1-0.20230605094802-c153c6d36ccf/LICENSE.txt: Apache License @@ -2969,77 +2969,6 @@ Contents of probable licence file $GOMODCACHE/github.com/apache/arrow/go/v11@v11 -------------------------------------------------------------------------------- -src/plasma/fling.cc and src/plasma/fling.h: Apache 2.0 - -Copyright 2013 Sharvil Nanavati - -Licensed under the Apache License, Version 2.0 (the "License"); -you may not use this file except in compliance with the License. -You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, software -distributed under the License is distributed on an "AS IS" BASIS, -WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -See the License for the specific language governing permissions and -limitations under the License. - --------------------------------------------------------------------------------- - -src/plasma/thirdparty/ae: Modified / 3-Clause BSD - -Copyright (c) 2006-2010, Salvatore Sanfilippo -All rights reserved. - -Redistribution and use in source and binary forms, with or without -modification, are permitted provided that the following conditions are met: - - * Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - * Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in the - documentation and/or other materials provided with the distribution. - * Neither the name of Redis nor the names of its contributors may be used - to endorse or promote products derived from this software without - specific prior written permission. - -THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" -AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE -IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE -ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE -LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR -CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF -SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS -INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN -CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) -ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE -POSSIBILITY OF SUCH DAMAGE. - --------------------------------------------------------------------------------- - -src/plasma/thirdparty/dlmalloc.c: CC0 - -This is a version (aka dlmalloc) of malloc/free/realloc written by -Doug Lea and released to the public domain, as explained at -http://creativecommons.org/publicdomain/zero/1.0/ Send questions, -comments, complaints, performance data, etc to dl@cs.oswego.edu - --------------------------------------------------------------------------------- - -src/plasma/common.cc (some portions) - -Copyright (c) Austin Appleby (aappleby (AT) gmail) - -Some portions of this file are derived from code in the MurmurHash project - -All code is released to the public domain. For business purposes, Murmurhash is -under the MIT license. - -https://sites.google.com/site/murmurhash/ - --------------------------------------------------------------------------------- - src/arrow/util (some portions): Apache 2.0, and 3-clause BSD Some portions of this module are derived from code in the Chromium project, @@ -12003,11 +11932,11 @@ OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR -------------------------------------------------------------------------------- Dependency : github.com/dustin/go-humanize -Version: v1.0.0 +Version: v1.0.1 Licence type (autodetected): MIT -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/dustin/go-humanize@v1.0.0/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/dustin/go-humanize@v1.0.1/LICENSE: Copyright (c) 2005-2008 Dustin Sallings @@ -43353,11 +43282,11 @@ SOFTWARE. -------------------------------------------------------------------------------- Dependency : github.com/mattn/go-isatty -Version: v0.0.16 +Version: v0.0.17 Licence type (autodetected): MIT -------------------------------------------------------------------------------- -Contents of probable licence file $GOMODCACHE/github.com/mattn/go-isatty@v0.0.16/LICENSE: +Contents of probable licence file $GOMODCACHE/github.com/mattn/go-isatty@v0.0.17/LICENSE: Copyright (c) Yasuhiro MATSUMOTO diff --git a/go.mod b/go.mod index 897039109327..58404c39ee69 100644 --- a/go.mod +++ b/go.mod @@ -66,7 +66,7 @@ require ( github.com/dolmen-go/contextio v0.0.0-20200217195037-68fc5150bcd5 github.com/dop251/goja v0.0.0-20200831102558-9af81ddcf0e1 github.com/dop251/goja_nodejs v0.0.0-20171011081505-adff31b136e6 - github.com/dustin/go-humanize v1.0.0 + github.com/dustin/go-humanize v1.0.1 github.com/eapache/go-resiliency v1.2.0 github.com/eclipse/paho.mqtt.golang v1.3.5 github.com/elastic/elastic-agent-client/v7 v7.1.2 @@ -192,7 +192,7 @@ require ( github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0 github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v0.4.1 github.com/Azure/go-autorest/autorest/adal v0.9.14 - github.com/apache/arrow/go/v11 v11.0.0 + github.com/apache/arrow/go/v12 v12.0.1-0.20230605094802-c153c6d36ccf github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.7 github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.17 github.com/aws/aws-sdk-go-v2/service/cloudformation v1.20.4 @@ -311,7 +311,7 @@ require ( github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect github.com/mailru/easyjson v0.7.6 // indirect github.com/markbates/pkger v0.17.1 // indirect - github.com/mattn/go-isatty v0.0.16 // indirect + github.com/mattn/go-isatty v0.0.17 // indirect github.com/mattn/go-runewidth v0.0.9 // indirect github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8 // indirect diff --git a/go.sum b/go.sum index 295c9bbd4c21..1e3423cdcae8 100644 --- a/go.sum +++ b/go.sum @@ -233,8 +233,8 @@ github.com/antlr/antlr4/runtime/Go/antlr/v4 v4.0.0-20230305170008-8188dc5388df/g github.com/aokoli/goutils v1.0.1/go.mod h1:SijmP0QR8LtwsmDs8Yii5Z/S4trXFGFC2oO5g9DP+DQ= github.com/apache/arrow/go/arrow v0.0.0-20191024131854-af6fa24be0db/go.mod h1:VTxUBvSJ3s3eHAg65PNgrsn5BtqCRPdmyXh6rAfdxN0= github.com/apache/arrow/go/arrow v0.0.0-20200923215132-ac86123a3f01/go.mod h1:QNYViu/X0HXDHw7m3KXzWSVXIbfUvJqBFe6Gj8/pYA0= -github.com/apache/arrow/go/v11 v11.0.0 h1:hqauxvFQxww+0mEU/2XHG6LT7eZternCZq+A5Yly2uM= -github.com/apache/arrow/go/v11 v11.0.0/go.mod h1:Eg5OsL5H+e299f7u5ssuXsuHQVEGC4xei5aX110hRiI= +github.com/apache/arrow/go/v12 v12.0.1-0.20230605094802-c153c6d36ccf h1:s5MDQXJmEalr0Urt0rPlX5UAE2BcHTiex/2Lt2O9p84= +github.com/apache/arrow/go/v12 v12.0.1-0.20230605094802-c153c6d36ccf/go.mod h1:weuTY7JvTG/HDPtMQxEUp7pU73vkLWMLpY67QwZ/WWw= github.com/apache/thrift v0.12.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ= github.com/apache/thrift v0.13.0/go.mod h1:cp2SuWMxlEZw2r+iP2GNCdIi4C1qmUzdZFSVb+bacwQ= github.com/apache/thrift v0.16.0/go.mod h1:PHK3hniurgQaNMZYaCLEqXKsYK8upmhPbmdP2FXSqgU= @@ -496,8 +496,9 @@ github.com/dolmen-go/contextio v0.0.0-20200217195037-68fc5150bcd5/go.mod h1:cxc2 github.com/dop251/goja_nodejs v0.0.0-20171011081505-adff31b136e6 h1:RrkoB0pT3gnjXhL/t10BSP1mcr/0Ldea2uMyuBr2SWk= github.com/dop251/goja_nodejs v0.0.0-20171011081505-adff31b136e6/go.mod h1:hn7BA7c8pLvoGndExHudxTDKZ84Pyvv+90pbBjbTz0Y= github.com/dustin/go-humanize v0.0.0-20171111073723-bb3d318650d4/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= -github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo= github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs= github.com/eapache/go-resiliency v1.2.0 h1:v7g92e/KSN71Rq7vSThKaWIq68fL4YHvWyiUKorFR1Q= github.com/eapache/go-resiliency v1.2.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs= @@ -1211,8 +1212,8 @@ github.com/mattn/go-isatty v0.0.10/go.mod h1:qgIWMr58cqv1PHHyhnkY9lrL7etaEgOFcME github.com/mattn/go-isatty v0.0.11/go.mod h1:PhnuNfih5lzO57/f3n+odYbM4JtupLOxQOAqxQCu2WE= github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU= github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94= -github.com/mattn/go-isatty v0.0.16 h1:bq3VjFmv/sOjHtdEhmkEV4x1AJtvUvOJ2PFAZ5+peKQ= -github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= +github.com/mattn/go-isatty v0.0.17 h1:BTarxUcIeDqL27Mc+vyvdWYSL28zpIhv3RoTdsLMPng= +github.com/mattn/go-isatty v0.0.17/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= github.com/mattn/go-runewidth v0.0.2/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU= github.com/mattn/go-runewidth v0.0.3/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU= github.com/mattn/go-runewidth v0.0.9 h1:Lm995f3rfxdpd6TSmuVCHVb/QhupuXlYr8sCI/QdE+0= diff --git a/x-pack/libbeat/reader/parquet/parquet.go b/x-pack/libbeat/reader/parquet/parquet.go index c9089457a13a..2d91f778f334 100644 --- a/x-pack/libbeat/reader/parquet/parquet.go +++ b/x-pack/libbeat/reader/parquet/parquet.go @@ -10,10 +10,10 @@ import ( "fmt" "io" - "github.com/apache/arrow/go/v11/arrow/memory" - "github.com/apache/arrow/go/v11/parquet" - "github.com/apache/arrow/go/v11/parquet/file" - "github.com/apache/arrow/go/v11/parquet/pqarrow" + "github.com/apache/arrow/go/v12/arrow/memory" + "github.com/apache/arrow/go/v12/parquet" + "github.com/apache/arrow/go/v12/parquet/file" + "github.com/apache/arrow/go/v12/parquet/pqarrow" ) // BufferedReader parses parquet inputs from io streams. diff --git a/x-pack/libbeat/reader/parquet/parquet_test.go b/x-pack/libbeat/reader/parquet/parquet_test.go index 1f89bd6628c0..1163156e65d3 100644 --- a/x-pack/libbeat/reader/parquet/parquet_test.go +++ b/x-pack/libbeat/reader/parquet/parquet_test.go @@ -5,7 +5,6 @@ package parquet import ( - "bufio" "bytes" "encoding/json" "fmt" @@ -15,10 +14,10 @@ import ( "path/filepath" "testing" - "github.com/apache/arrow/go/v11/arrow" - "github.com/apache/arrow/go/v11/arrow/array" - "github.com/apache/arrow/go/v11/arrow/memory" - "github.com/apache/arrow/go/v11/parquet/pqarrow" + "github.com/apache/arrow/go/v12/arrow" + "github.com/apache/arrow/go/v12/arrow/array" + "github.com/apache/arrow/go/v12/arrow/memory" + "github.com/apache/arrow/go/v12/parquet/pqarrow" "github.com/stretchr/testify/assert" ) @@ -171,20 +170,22 @@ func createRandomParquet(t testing.TB, fname string, numCols int, numRows int) m func TestParquetWithFiles(t *testing.T) { testCases := []struct { - parquetFile string - jsonFile string + parquetFile string + jsonFile string + maxRowsToCompare int }{ - { - parquetFile: "vpc_flow.gz.parquet", - jsonFile: "vpc_flow.ndjson", - }, { parquetFile: "cloudtrail.parquet", - jsonFile: "cloudtrail.ndjson", + jsonFile: "cloudtrail.json", }, { parquetFile: "route53.parquet", - jsonFile: "route53.ndjson", + jsonFile: "route53.json", + }, + { + parquetFile: "vpc_flow.gz.parquet", + jsonFile: "vpc_flow.json", + maxRowsToCompare: 4, }, } @@ -198,43 +199,38 @@ func TestParquetWithFiles(t *testing.T) { } defer parquetFile.Close() - jsonFile, err := os.Open(filepath.Join(testDataPath, tc.jsonFile)) - if err != nil { - t.Fatalf("Failed to open json test file: %v", err) - } - defer jsonFile.Close() - - orderedJSON, rows := readJSONFromFile(t, jsonFile) + orderedJSON, rows := readJSONFromFile(t, filepath.Join(testDataPath, tc.jsonFile)) cfg := &Config{ // we set ProcessParallel to true as this always has the best performance ProcessParallel: true, // batch size is set to 1 because we need to compare individual records one by one BatchSize: 1, } - readAndCompareParquetFile(t, cfg, parquetFile, orderedJSON, rows) + readAndCompareParquetFile(t, cfg, parquetFile, orderedJSON, rows, tc.maxRowsToCompare) }) } } // readJSONFromFile reads the json file and returns the data as an ordered map (row number -> json string) // along with the number of rows in the file -func readJSONFromFile(t *testing.T, file *os.File) (map[int]string, int) { +func readJSONFromFile(t *testing.T, filepath string) (map[int]string, int) { + fileBytes, err := os.ReadFile(filepath) + assert.NoError(t, err) + var rawMessages []json.RawMessage + err = json.Unmarshal(fileBytes, &rawMessages) + assert.NoError(t, err) data := make(map[int]string) - scanner := bufio.NewScanner(file) - row := 0 - for scanner.Scan() { - data[row] = scanner.Text() + var row int + for _, rawMsg := range rawMessages { + data[row] = string(rawMsg) row++ } - if err := scanner.Err(); err != nil { - t.Fatalf("failed to read ndjson file: %v", err) - } return data, row } // readAndCompareParquetFile reads the parquet file and compares the data with the input data -func readAndCompareParquetFile(t *testing.T, cfg *Config, file *os.File, data map[int]string, rows int) { +func readAndCompareParquetFile(t *testing.T, cfg *Config, file *os.File, data map[int]string, rows int, maxRowsToCompare int) { sReader, err := NewBufferedReader(file, cfg) if err != nil { t.Fatalf("failed to init stream reader: %v", err) @@ -248,9 +244,17 @@ func readAndCompareParquetFile(t *testing.T, cfg *Config, file *os.File, data ma if val != nil { rowCount = readAndCompareParquetJSON(t, bytes.NewReader(val), data, rowCount) } + if maxRowsToCompare > 0 && rowCount == maxRowsToCompare { + break + } + } + // if maxRowsToCompare == 0 then we compare the row count + if maxRowsToCompare == 0 { + // asserts of number of rows read is the same as the number of rows from the input file + assert.Equal(t, rows, rowCount) + } else { + assert.EqualValues(t, rowCount, maxRowsToCompare) } - // asserts of number of rows read is the same as the number of rows from the input file - assert.Equal(t, rows, rowCount) // closes the stream reader and asserts that there are no errors err = sReader.Close() assert.NoError(t, err) diff --git a/x-pack/libbeat/reader/parquet/testdata/cloudtrail.json b/x-pack/libbeat/reader/parquet/testdata/cloudtrail.json new file mode 100644 index 000000000000..979f14428f33 --- /dev/null +++ b/x-pack/libbeat/reader/parquet/testdata/cloudtrail.json @@ -0,0 +1,96 @@ +[ + { + "activity_id": 1, + "activity_name": "Create", + "actor": { + "idp": { + "name": null + }, + "invoked_by": null, + "session": { + "created_time": null, + "issuer": null, + "mfa": null + }, + "user": { + "account_uid": "123456789012", + "credential_uid": "AKIAIOSFODNN7EXAMPLE", + "name": "Alice", + "type": "IAMUser", + "uid": "123456789012", + "uuid": "arn:aws:iam::123456789012:user/Alice" + } + }, + "api": { + "operation": "CreateLoadBalancer", + "request": { + "uid": "b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE" + }, + "response": { + "error": null, + "message": null + }, + "service": { + "name": "elasticloadbalancing.amazonaws.com" + }, + "version": "2015-12-01" + }, + "category_name": "Audit Activity", + "category_uid": 3, + "class_name": "API Activity", + "class_uid": 3005, + "cloud": { + "provider": "AWS", + "region": "us-west-2" + }, + "http_request": { + "user_agent": "aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.1" + }, + "metadata": { + "product": { + "feature": { + "name": "Management, Data, and Insights" + }, + "name": "CloudTrail", + "vendor_name": "AWS", + "version": "1.03" + }, + "profiles": [ + "cloud" + ], + "uid": "6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE", + "version": "1.0.0-rc.2" + }, + "resources": null, + "severity": "Informational", + "severity_id": 1, + "src_endpoint": { + "domain": null, + "ip": "198.51.100.1", + "uid": null + }, + "status": "Success", + "status_id": 1, + "time": 1459524708000, + "type_name": "API Activity: Create", + "type_uid": 300501, + "unmapped": [ + { + "key": "responseElements", + "value": "{\"loadBalancers\":[{\"type\":\"application\",\"loadBalancerName\":\"my-load-balancer\",\"vpcId\":\"vpc-3ac0fb5f\",\"securityGroups\":[\"sg-5943793c\"],\"state\":{\"code\":\"provisioning\"},\"availabilityZones\":[{\"subnetId\":\"subnet-8360a9e7\",\"zoneName\":\"us-west-2a\"},{\"subnetId\":\"subnet-b7d581c0\",\"zoneName\":\"us-west-2b\"}],\"dNSName\":\"my-load-balancer-1836718677.us-west-2.elb.amazonaws.com\",\"canonicalHostedZoneId\":\"Z2P70J7HTTTPLU\",\"createdTime\":\"Apr 11, 2016 5:23:50 PM\",\"loadBalancerArn\":\"arn:aws:elasticloadbalancing:us-west-2:123456789012:loadbalancer/app/my-load-balancer/ffcddace1759e1d0\",\"scheme\":\"internet-facing\"}]}" + }, + { + "key": "requestParameters", + "value": "{\"subnets\":[\"subnet-8360a9e7\",\"subnet-b7d581c0\"],\"securityGroups\":[\"sg-5943793c\"],\"name\":\"my-load-balancer\",\"scheme\":\"internet-facing\"}" + }, + { + "key": "recipientAccountId", + "value": "123456789012" + }, + { + "key": "eventType", + "value": "AwsApiCall" + } + ] + } +] \ No newline at end of file diff --git a/x-pack/libbeat/reader/parquet/testdata/cloudtrail.ndjson b/x-pack/libbeat/reader/parquet/testdata/cloudtrail.ndjson deleted file mode 100644 index de3a2bd3ee09..000000000000 --- a/x-pack/libbeat/reader/parquet/testdata/cloudtrail.ndjson +++ /dev/null @@ -1 +0,0 @@ -{"activity_id":1,"activity_name":"Create","actor":{"idp":{"name":null},"invoked_by":null,"session":{"created_time":null,"issuer":null,"mfa":null},"user":{"account_uid":"123456789012","credential_uid":"AKIAIOSFODNN7EXAMPLE","name":"Alice","type":"IAMUser","uid":"123456789012","uuid":"arn:aws:iam::123456789012:user/Alice"}},"api":{"operation":"CreateLoadBalancer","request":{"uid":"b9960276-b9b2-11e3-8a13-f1ef1EXAMPLE"},"response":{"error":null,"message":null},"service":{"name":"elasticloadbalancing.amazonaws.com"},"version":"2015-12-01"},"category_name":"Audit Activity","category_uid":3,"class_name":"API Activity","class_uid":3005,"cloud":{"provider":"AWS","region":"us-west-2"},"http_request":{"user_agent":"aws-cli/1.10.10 Python/2.7.9 Windows/7 botocore/1.4.1"},"metadata":{"product":{"feature":{"name":"Management, Data, and Insights"},"name":"CloudTrail","vendor_name":"AWS","version":"1.03"},"profiles":["cloud"],"uid":"6f4ab5bd-2daa-4d00-be14-d92efEXAMPLE","version":"1.0.0-rc.2"},"resources":null,"severity":"Informational","severity_id":1,"src_endpoint":{"domain":null,"ip":"198.51.100.1","uid":null},"status":"Success","status_id":1,"time":1459524708000,"type_name":"API Activity: Create","type_uid":300501,"unmapped":[{"key":"responseElements","value":"{\"loadBalancers\":[{\"type\":\"application\",\"loadBalancerName\":\"my-load-balancer\",\"vpcId\":\"vpc-3ac0fb5f\",\"securityGroups\":[\"sg-5943793c\"],\"state\":{\"code\":\"provisioning\"},\"availabilityZones\":[{\"subnetId\":\"subnet-8360a9e7\",\"zoneName\":\"us-west-2a\"},{\"subnetId\":\"subnet-b7d581c0\",\"zoneName\":\"us-west-2b\"}],\"dNSName\":\"my-load-balancer-1836718677.us-west-2.elb.amazonaws.com\",\"canonicalHostedZoneId\":\"Z2P70J7HTTTPLU\",\"createdTime\":\"Apr 11, 2016 5:23:50 PM\",\"loadBalancerArn\":\"arn:aws:elasticloadbalancing:us-west-2:123456789012:loadbalancer/app/my-load-balancer/ffcddace1759e1d0\",\"scheme\":\"internet-facing\"}]}"},{"key":"requestParameters","value":"{\"subnets\":[\"subnet-8360a9e7\",\"subnet-b7d581c0\"],\"securityGroups\":[\"sg-5943793c\"],\"name\":\"my-load-balancer\",\"scheme\":\"internet-facing\"}"},{"key":"recipientAccountId","value":"123456789012"},{"key":"eventType","value":"AwsApiCall"}]} diff --git a/x-pack/libbeat/reader/parquet/testdata/route53.json b/x-pack/libbeat/reader/parquet/testdata/route53.json new file mode 100644 index 000000000000..90fd9d5cc80f --- /dev/null +++ b/x-pack/libbeat/reader/parquet/testdata/route53.json @@ -0,0 +1,76 @@ +[ + { + "activity_id": 2, + "activity_name": "Response", + "answers": [ + { + "class": "IN", + "rdata": "127.0.0.62", + "type": "A" + } + ], + "category_name": "Network Activity", + "category_uid": 4, + "class_name": "DNS Activity", + "class_uid": 4003, + "cloud": { + "account_uid": "123456789012", + "provider": "AWS", + "region": "us-east-1" + }, + "connection_info": { + "direction": "Unknown", + "direction_id": 0, + "protocol_name": "UDP" + }, + "disposition": "No Action", + "disposition_id": 16, + "dst_endpoint": { + "instance_uid": "rslvr-in-0000000000000000", + "interface_uid": "rni-0000000000000000" + }, + "metadata": { + "product": { + "feature": { + "name": "Resolver Query Logs" + }, + "name": "Route 53", + "vendor_name": "AWS", + "version": "1.100000" + }, + "profiles": [ + "cloud", + "security_control" + ], + "version": "1.0.0-rc.2" + }, + "query": { + "class": "IN", + "hostname": "ip-127-0-0-62.alert.firewall.canary.", + "type": "A" + }, + "rcode": "NoError", + "rcode_id": 0, + "severity": "Informational", + "severity_id": 1, + "src_endpoint": { + "instance_uid": null, + "ip": "10.200.21.100", + "port": 15083, + "vpc_uid": "vpc-00000000000000000" + }, + "time": 1665694956000, + "type_name": "DNS Activity: Response", + "type_uid": 400302, + "unmapped": [ + { + "key": "firewall_rule_group_id", + "value": "rslvr-frg-000000000000000" + }, + { + "key": "firewall_domain_list_id", + "value": "rslvr-fdl-0000000000000" + } + ] + } +] \ No newline at end of file diff --git a/x-pack/libbeat/reader/parquet/testdata/route53.ndjson b/x-pack/libbeat/reader/parquet/testdata/route53.ndjson deleted file mode 100644 index 63a75e64cb77..000000000000 --- a/x-pack/libbeat/reader/parquet/testdata/route53.ndjson +++ /dev/null @@ -1 +0,0 @@ -{"activity_id":2,"activity_name":"Response","answers":["A"],"category_name":"Network Activity","category_uid":4,"class_name":"DNS Activity","class_uid":4003,"cloud":{"account_uid":"123456789012","provider":"AWS","region":"us-east-1"},"connection_info":{"direction":"Unknown","direction_id":0,"protocol_name":"UDP"},"disposition":"No Action","disposition_id":16,"dst_endpoint":{"instance_uid":"rslvr-in-0000000000000000","interface_uid":"rni-0000000000000000"},"metadata":{"product":{"feature":{"name":"Resolver Query Logs"},"name":"Route 53","vendor_name":"AWS","version":"1.100000"},"profiles":["cloud","security_control"],"version":"1.0.0-rc.2"},"query":{"class":"IN","hostname":"ip-127-0-0-62.alert.firewall.canary.","type":"A"},"rcode":"NoError","rcode_id":0,"severity":"Informational","severity_id":1,"src_endpoint":{"instance_uid":null,"ip":"10.200.21.100","port":15083,"vpc_uid":"vpc-00000000000000000"},"time":1665694956000,"type_name":"DNS Activity: Response","type_uid":400302,"unmapped":[{"key":"firewall_rule_group_id","value":"rslvr-frg-000000000000000"},{"key":"firewall_domain_list_id","value":"rslvr-fdl-0000000000000"}]} diff --git a/x-pack/libbeat/reader/parquet/testdata/vpc_flow.json b/x-pack/libbeat/reader/parquet/testdata/vpc_flow.json new file mode 100644 index 000000000000..f50fef9d0ea8 --- /dev/null +++ b/x-pack/libbeat/reader/parquet/testdata/vpc_flow.json @@ -0,0 +1,330 @@ +[ + { + "activity_id": 0, + "activity_name": "", + "category_name": "Network Activity", + "category_uid": 4, + "class_name": "Network Activity", + "class_uid": 4001, + "cloud": { + "account_uid": "unknown", + "provider": "AWS", + "region": "us-east-1", + "zone": "use1-az3" + }, + "connection_info": { + "boundary": "Unknown", + "boundary_id": 0, + "direction": "-", + "direction_id": 0, + "protocol_num": null, + "protocol_ver": "-", + "tcp_flags": null + }, + "dst_endpoint": { + "instance_uid": null, + "interface_uid": null, + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": null, + "svc_name": "-", + "vpc_uid": null + }, + "end_time": 1680171303000, + "metadata": { + "product": { + "feature": { + "name": "Flowlogs" + }, + "name": "Amazon VPC", + "vendor_name": "AWS", + "version": "5" + }, + "profiles": [ + "cloud" + ], + "version": "0.39.0" + }, + "severity": "Other", + "severity_id": -1, + "src_endpoint": { + "instance_uid": "-", + "interface_uid": "eni-0a5df14ccfec68e31", + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": "subnet-73bd7642", + "svc_name": "-", + "vpc_uid": "vpc-d514c4a8" + }, + "start_time": 1680171259000, + "time": 1680171259000, + "traffic": { + "bytes": null, + "packets": null + }, + "type_name": "Network Activity: Unknown", + "type_uid": 400100, + "unmapped": [ + { + "key": "log_status", + "value": "NODATA" + }, + { + "key": "sublocation_id", + "value": "-" + }, + { + "key": "sublocation_type", + "value": "-" + } + ] + }, + { + "activity_id": 0, + "activity_name": "", + "category_name": "Network Activity", + "category_uid": 4, + "class_name": "Network Activity", + "class_uid": 4001, + "cloud": { + "account_uid": "unknown", + "provider": "AWS", + "region": "us-east-1", + "zone": "use1-az5" + }, + "connection_info": { + "boundary": "Unknown", + "boundary_id": 0, + "direction": "-", + "direction_id": 0, + "protocol_num": null, + "protocol_ver": "-", + "tcp_flags": null + }, + "dst_endpoint": { + "instance_uid": null, + "interface_uid": null, + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": null, + "svc_name": "-", + "vpc_uid": null + }, + "end_time": 1680171323000, + "metadata": { + "product": { + "feature": { + "name": "Flowlogs" + }, + "name": "Amazon VPC", + "vendor_name": "AWS", + "version": "5" + }, + "profiles": [ + "cloud" + ], + "version": "0.39.0" + }, + "severity": "Other", + "severity_id": -1, + "src_endpoint": { + "instance_uid": "-", + "interface_uid": "eni-04ec237a893668df7", + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": "subnet-89dda387", + "svc_name": "-", + "vpc_uid": "vpc-d514c4a8" + }, + "start_time": 1680171291000, + "time": 1680171291000, + "traffic": { + "bytes": null, + "packets": null + }, + "type_name": "Network Activity: Unknown", + "type_uid": 400100, + "unmapped": [ + { + "key": "log_status", + "value": "NODATA" + }, + { + "key": "sublocation_id", + "value": "-" + }, + { + "key": "sublocation_type", + "value": "-" + } + ] + }, + { + "activity_id": 0, + "activity_name": "", + "category_name": "Network Activity", + "category_uid": 4, + "class_name": "Network Activity", + "class_uid": 4001, + "cloud": { + "account_uid": "unknown", + "provider": "AWS", + "region": "us-east-1", + "zone": "use1-az4" + }, + "connection_info": { + "boundary": "Unknown", + "boundary_id": 0, + "direction": "-", + "direction_id": 0, + "protocol_num": null, + "protocol_ver": "-", + "tcp_flags": null + }, + "dst_endpoint": { + "instance_uid": null, + "interface_uid": null, + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": null, + "svc_name": "-", + "vpc_uid": null + }, + "end_time": 1680171314000, + "metadata": { + "product": { + "feature": { + "name": "Flowlogs" + }, + "name": "Amazon VPC", + "vendor_name": "AWS", + "version": "5" + }, + "profiles": [ + "cloud" + ], + "version": "0.39.0" + }, + "severity": "Other", + "severity_id": -1, + "src_endpoint": { + "instance_uid": "-", + "interface_uid": "eni-08bb1f5c30966d3bf", + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": "subnet-bae9bdf7", + "svc_name": "-", + "vpc_uid": "vpc-d514c4a8" + }, + "start_time": 1680171294000, + "time": 1680171294000, + "traffic": { + "bytes": null, + "packets": null + }, + "type_name": "Network Activity: Unknown", + "type_uid": 400100, + "unmapped": [ + { + "key": "log_status", + "value": "NODATA" + }, + { + "key": "sublocation_id", + "value": "-" + }, + { + "key": "sublocation_type", + "value": "-" + } + ] + }, + { + "activity_id": 0, + "activity_name": "", + "category_name": "Network Activity", + "category_uid": 4, + "class_name": "Network Activity", + "class_uid": 4001, + "cloud": { + "account_uid": "unknown", + "provider": "AWS", + "region": "us-east-1", + "zone": "use1-az3" + }, + "connection_info": { + "boundary": "Unknown", + "boundary_id": 0, + "direction": "-", + "direction_id": 0, + "protocol_num": null, + "protocol_ver": "-", + "tcp_flags": null + }, + "dst_endpoint": { + "instance_uid": null, + "interface_uid": null, + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": null, + "svc_name": "-", + "vpc_uid": null + }, + "end_time": 1680171363000, + "metadata": { + "product": { + "feature": { + "name": "Flowlogs" + }, + "name": "Amazon VPC", + "vendor_name": "AWS", + "version": "5" + }, + "profiles": [ + "cloud" + ], + "version": "0.39.0" + }, + "severity": "Other", + "severity_id": -1, + "src_endpoint": { + "instance_uid": "-", + "interface_uid": "eni-0a5df14ccfec68e31", + "intermediate_ips": null, + "ip": "-", + "port": null, + "subnet_uid": "subnet-73bd7642", + "svc_name": "-", + "vpc_uid": "vpc-d514c4a8" + }, + "start_time": 1680171319000, + "time": 1680171319000, + "traffic": { + "bytes": null, + "packets": null + }, + "type_name": "Network Activity: Unknown", + "type_uid": 400100, + "unmapped": [ + { + "key": "log_status", + "value": "NODATA" + }, + { + "key": "sublocation_id", + "value": "-" + }, + { + "key": "sublocation_type", + "value": "-" + } + ] + } +] \ No newline at end of file diff --git a/x-pack/libbeat/reader/parquet/testdata/vpc_flow.ndjson b/x-pack/libbeat/reader/parquet/testdata/vpc_flow.ndjson deleted file mode 100644 index 9f8573d86df7..000000000000 --- a/x-pack/libbeat/reader/parquet/testdata/vpc_flow.ndjson +++ /dev/null @@ -1,1304 +0,0 @@ -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171303000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171259000,"time":1680171259000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171323000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171291000,"time":1680171291000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171314000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171294000,"time":1680171294000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171363000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171319000,"time":1680171319000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171390000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171341000,"time":1680171341000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171383000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171351000,"time":1680171351000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171374000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171354000,"time":1680171354000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171415000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171359000,"time":1680171359000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171423000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171379000,"time":1680171379000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171450000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171401000,"time":1680171401000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171433000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171404000,"time":1680171404000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171443000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171411000,"time":1680171411000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171434000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171414000,"time":1680171414000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171475000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171419000,"time":1680171419000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171483000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171439000,"time":1680171439000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171480000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171453000,"time":1680171453000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171510000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":64121,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":12186,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22121,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":45990,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":20558,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":524,"packets":4},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":32522,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":52217,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":44852,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":56516,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37340,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":49038,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35533,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":52791,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":44852,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11167,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19145,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19145,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35533,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":12186,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":52791,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":34059,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":49038,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":52217,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35247,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23567,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":34059,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19958,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":51644,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":64121,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":51644,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37340,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19958,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":20558,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":605,"packets":5},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":51912,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22121,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":26702,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23567,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":51912,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40510,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45105,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":32522,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59841,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19579,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35247,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40510,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":56516,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":26702,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19579,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45105,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":45990,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59841,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11167,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171519000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171461000,"time":1680171461000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171482000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171462000,"time":1680171462000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171493000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171464000,"time":1680171464000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171486000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171467000,"time":1680171467000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171503000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171471000,"time":1680171471000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171544000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171473000,"time":1680171473000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171494000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171474000,"time":1680171474000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171533000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171475000,"time":1680171475000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171535000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171479000,"time":1680171479000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171543000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171499000,"time":1680171499000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171540000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171513000,"time":1680171513000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171560000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171517000,"time":1680171517000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171570000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21304,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19739,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1175,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22031,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34685,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23551,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64727,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":39093,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":24539,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":49412,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40652,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16342,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22031,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37231,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13495,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34685,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":43731,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63988,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":58098,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23688,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41940,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":26430,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47342,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34654,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23688,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63988,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":50875,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":32234,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":24539,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47283,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34654,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":5000,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35272,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23343,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47102,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23343,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21304,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1175,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27392,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":38456,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47102,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":38456,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41940,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16342,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":5000,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":62840,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":26430,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14958,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47283,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":43731,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19739,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":20419,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":39093,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":32234,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":15655,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":62840,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23551,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37231,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11271,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42205,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":58098,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":50875,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35272,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42205,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":7687,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":28511,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40652,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":49412,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":18012,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14958,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11271,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47342,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":28511,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":20419,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27392,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":7687,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":15655,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13495,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":18012,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171579000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64727,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171521000,"time":1680171521000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171542000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171522000,"time":1680171522000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171553000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171524000,"time":1680171524000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171546000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171527000,"time":1680171527000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171563000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171531000,"time":1680171531000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171544000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171531000,"time":1680171531000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171554000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171534000,"time":1680171534000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171593000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171535000,"time":1680171535000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171595000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171539000,"time":1680171539000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171603000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171559000,"time":1680171559000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171583000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171570000,"time":1680171570000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171600000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171573000,"time":1680171573000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171620000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171577000,"time":1680171577000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":17254,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":64801,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1428,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8607,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":19843,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":13099,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":49207,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18015,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23506,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":53005,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":2726,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40759,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":20671,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9013,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":54340,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":10614,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34637,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":20671,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":2726,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17400,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":13085,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":49207,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1428,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25453,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34637,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37132,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":3379,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":36909,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55128,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29133,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":13588,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11038,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47680,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":54340,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":10614,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9013,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9334,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40759,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":50564,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":11434,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":26995,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":64801,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29133,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":56082,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":17254,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9766,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25980,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17865,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":19843,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":14679,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64473,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55128,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23506,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":25878,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37132,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":13099,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25453,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":3379,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9334,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17400,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":14679,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8607,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":26995,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":53005,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":13085,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":36909,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64473,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":25878,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":50564,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11038,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1620,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":11434,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4914,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47680,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17865,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":56082,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18015,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":13588,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4914,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9766,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171639000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25980,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":4728,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":4728,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171579000,"time":1680171579000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171630000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171581000,"time":1680171581000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171602000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171582000,"time":1680171582000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171613000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171584000,"time":1680171584000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171606000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171587000,"time":1680171587000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171623000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171591000,"time":1680171591000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171604000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171591000,"time":1680171591000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171664000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171593000,"time":1680171593000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171614000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171594000,"time":1680171594000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171653000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171595000,"time":1680171595000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171655000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171599000,"time":1680171599000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171622000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171600000,"time":1680171600000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171663000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171619000,"time":1680171619000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171643000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171630000,"time":1680171630000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171660000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171633000,"time":1680171633000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171680000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171637000,"time":1680171637000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":50891,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63522,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63915,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32753,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46830,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34182,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":43935,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":10108,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":36571,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50644,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":4344,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35673,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":26080,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16676,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50644,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59654,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12894,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34559,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":15875,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59654,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11126,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":30221,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27600,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":30221,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63522,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":10108,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55208,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1829,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":36571,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59914,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63915,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12894,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":33533,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27029,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":2392,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27698,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":4344,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16676,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7335,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27698,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":12190,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7335,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":43963,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":8913,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":43935,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55208,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27600,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":43963,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":26080,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":8913,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":15875,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":12190,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65249,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65249,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":40259,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46830,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":33533,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":40259,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55429,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11126,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27029,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":2392,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34182,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1829,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":50891,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55429,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59914,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34559,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35673,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32753,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171699000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171639000,"time":1680171639000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171690000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171641000,"time":1680171641000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171662000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171642000,"time":1680171642000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171673000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171644000,"time":1680171644000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171726000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171647000,"time":1680171647000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171683000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171651000,"time":1680171651000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171664000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171651000,"time":1680171651000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171674000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171654000,"time":1680171654000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171713000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171655000,"time":1680171655000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171715000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171659000,"time":1680171659000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171723000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171679000,"time":1680171679000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171721000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171693000,"time":1680171693000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171740000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171697000,"time":1680171697000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":61883,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13150,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1620,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":26502,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63379,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12018,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27847,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57834,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21599,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57874,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4850,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45658,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":36598,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47571,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":48131,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":9146,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":61883,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":4099,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":42605,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":35434,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":35324,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":36598,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9634,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":48131,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":53159,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":51005,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41038,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42347,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57874,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8550,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6647,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":6345,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34823,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":15676,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16533,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34823,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47036,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":48282,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14512,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9542,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64844,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47571,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":49524,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62456,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":26502,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64844,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":53159,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25604,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":51005,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12018,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":36071,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45767,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62119,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4642,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":37884,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":56288,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8550,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1620,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":54463,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9634,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":9146,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21599,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":49360,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":33819,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":48282,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55995,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":42605,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":34597,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63756,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27847,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47036,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45658,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":36071,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":29840,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":4099,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27539,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63379,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16332,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":5776,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13592,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41038,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":5776,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62456,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":6345,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":9542,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":56288,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13150,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25604,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63756,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18973,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45767,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":35434,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":2785,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13592,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18973,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":49524,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":29840,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21132,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62818,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":27539,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42347,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14512,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62818,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":49360,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":34597,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":54463,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21132,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22972,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16332,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":33819,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16533,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22972,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4642,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55995,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":35324,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":15676,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":2785,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4850,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":37884,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57834,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171759000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62119,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65299,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65299,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171699000,"time":1680171699000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171750000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171701000,"time":1680171701000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171722000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171702000,"time":1680171702000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171733000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171704000,"time":1680171704000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171743000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171711000,"time":1680171711000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171724000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171711000,"time":1680171711000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171724000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171713000,"time":1680171713000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171734000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171714000,"time":1680171714000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171773000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171715000,"time":1680171715000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171775000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171719000,"time":1680171719000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171783000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171739000,"time":1680171739000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171763000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171750000,"time":1680171750000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171781000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171753000,"time":1680171753000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171801000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171757000,"time":1680171757000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27569,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":48630,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":51752,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29343,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":14029,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13388,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":40906,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29470,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":40906,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":15951,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":45883,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40008,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":52090,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":39316,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42840,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":45883,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59751,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":22736,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":56576,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45874,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":39316,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":31864,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":61141,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8212,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":62676,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":10916,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50449,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27133,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":57135,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29343,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":56576,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27133,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55553,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":15951,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":14029,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16657,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":51752,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":22736,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":31864,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":16657,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27569,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59751,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40008,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":48630,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":12711,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":12711,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":61141,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":60229,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":49202,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":56776,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29470,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63151,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":57135,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65450,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1556,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63151,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8212,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":10916,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42840,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47770,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45874,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":52090,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50449,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":60229,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13883,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47770,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":56776,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":49202,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65450,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13883,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":55553,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":62676,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171819000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13388,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34335,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":34335,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32985,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47120,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47120,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32985,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171760000,"time":1680171760000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171811000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171761000,"time":1680171761000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171782000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171762000,"time":1680171762000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171793000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171764000,"time":1680171764000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171786000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171767000,"time":1680171767000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171803000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171771000,"time":1680171771000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171771000,"time":1680171771000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171773000,"time":1680171773000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171795000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171774000,"time":1680171774000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171805000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171775000,"time":1680171775000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171833000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171775000,"time":1680171775000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171835000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171779000,"time":1680171779000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171843000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171799000,"time":1680171799000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171841000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171813000,"time":1680171813000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171846000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171815000,"time":1680171815000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171861000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171817000,"time":1680171817000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171850000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171819000,"time":1680171819000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23971,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":34954,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":52931,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18288,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12621,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":6839,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":24458,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":10411,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":62020,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":16562,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":6839,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18288,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":61932,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47727,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63231,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59930,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":34954,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11291,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12621,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":24458,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":52931,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":29695,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46468,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":54466,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":51950,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23971,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29771,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45146,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":41933,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":28186,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59930,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62612,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":21230,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":61932,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":45146,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11291,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":29695,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":42968,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":22074,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":28186,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46442,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25318,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":42968,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":62020,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":11510,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25318,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29771,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":51950,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46468,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12217,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":44496,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17426,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":54466,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12217,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47727,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":44496,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":3002,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46442,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":21230,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":22074,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":11510,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":16562,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":3002,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":41933,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17426,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63231,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":10411,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":44845,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":17441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":62612,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":44845,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46937,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46937,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171820000,"time":1680171820000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171821000,"time":1680171821000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171842000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171822000,"time":1680171822000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171853000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171824000,"time":1680171824000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171846000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171827000,"time":1680171827000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":34335,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171830000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171830000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":34335,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":29695,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171840000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":62612,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171840000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171840000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":62612,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171840000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":27133,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171840000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":29695,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":27133,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171840000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171858000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06549ab89f11eea12","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171828000,"time":1680171828000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":63151,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171837000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171829000,"time":1680171829000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171837000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":63151,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171829000,"time":1680171829000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171837000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":61932,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171829000,"time":1680171829000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":61932,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171837000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171829000,"time":1680171829000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":62020,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171837000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171829000,"time":1680171829000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171837000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":62020,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171829000,"time":1680171829000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171831000,"time":1680171831000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171855000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171834000,"time":1680171834000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171865000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171834000,"time":1680171834000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171836000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":22074,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171834000,"time":1680171834000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":23971,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171836000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171834000,"time":1680171834000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":22074,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171836000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171834000,"time":1680171834000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171836000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":23971,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171834000,"time":1680171834000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171835000,"time":1680171835000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":54466,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171836000,"time":1680171836000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":58204,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171836000,"time":1680171836000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":24458,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171836000,"time":1680171836000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":24458,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171836000,"time":1680171836000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":54466,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171836000,"time":1680171836000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171844000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":58204,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171836000,"time":1680171836000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171895000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171839000,"time":1680171839000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171847000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":18288,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171846000,"time":1680171846000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":18288,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171847000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171846000,"time":1680171846000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46657,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171862000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":51950,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171862000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171862000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":17426,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171862000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":51950,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":17426,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171862000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171862000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46657,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":52931,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171869000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171869000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":23035,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171869000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":52931,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":23035,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171869000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171852000,"time":1680171852000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":12217,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171853000,"time":1680171853000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":11510,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171853000,"time":1680171853000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":10553,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171853000,"time":1680171853000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":11510,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171853000,"time":1680171853000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":10553,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171853000,"time":1680171853000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":12217,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171863000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171853000,"time":1680171853000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":1604,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171872000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"94.102.61.27","port":44743,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171854000,"time":1680171854000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":110,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171872000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"27.47.27.95","port":58914,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171854000,"time":1680171854000,"traffic":{"bytes":44,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":3840,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171872000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"193.163.125.185","port":39322,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171854000,"time":1680171854000,"traffic":{"bytes":44,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":5252,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171872000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"94.102.61.49","port":33922,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171854000,"time":1680171854000,"traffic":{"bytes":44,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":17,"protocol_ver":"IPv4","tcp_flags":0},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":5353,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171872000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"94.102.61.31","port":57148,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171854000,"time":1680171854000,"traffic":{"bytes":74,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":44496,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171860000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171855000,"time":1680171855000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171860000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":40862,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171855000,"time":1680171855000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":40862,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171860000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171855000,"time":1680171855000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171860000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":44496,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171855000,"time":1680171855000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171879000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171859000,"time":1680171859000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171890000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08ba8b44461eb2885","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171860000,"time":1680171860000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":44114,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171863000,"time":1680171863000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":44845,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171863000,"time":1680171863000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":44845,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171863000,"time":1680171863000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":42968,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171863000,"time":1680171863000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":44114,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171863000,"time":1680171863000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":42968,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171871000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171863000,"time":1680171863000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":27178,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171888000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171866000,"time":1680171866000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171888000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59930,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171866000,"time":1680171866000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59930,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171888000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171866000,"time":1680171866000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171888000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":27178,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171866000,"time":1680171866000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":23005,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":21230,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":23894,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":21230,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":25963,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":23005,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":25963,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171893000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":23894,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171871000,"time":1680171871000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171901000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171873000,"time":1680171873000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171906000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171875000,"time":1680171875000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":35225,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171876000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171876000,"time":1680171876000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171876000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":35225,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171876000,"time":1680171876000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171921000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171877000,"time":1680171877000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171892000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19737,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171878000,"time":1680171878000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":46511,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171892000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171878000,"time":1680171878000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171892000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":46511,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171878000,"time":1680171878000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19737,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171892000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171878000,"time":1680171878000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171879000,"time":1680171879000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171891000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":11596,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171891000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":12318,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":11596,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171891000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":12318,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171891000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171931000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":58204,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":58204,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25963,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41846,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12154,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":9887,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6647,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":11596,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":48992,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21369,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50704,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40862,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":37996,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59736,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12318,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8237,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":26187,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41846,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27178,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":9887,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1568,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40862,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23005,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47543,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":10553,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46223,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11063,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1556,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23894,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":38452,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":1394,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":1394,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":51267,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":26187,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21369,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":48992,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23894,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35225,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":22915,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":22915,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":19707,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":23005,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46511,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21425,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":44114,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":60225,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":11063,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":51267,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35225,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12154,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47944,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21425,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":59736,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13234,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50704,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":11596,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46657,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":8237,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":12318,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46511,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":30779,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":30779,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14467,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":38452,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":19707,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":13234,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23035,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65024,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46223,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":65024,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":23035,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19737,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":44114,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47944,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46657,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19737,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":37996,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":10553,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27178,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47543,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14467,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":60225,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":25963,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171939000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171881000,"time":1680171881000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171902000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171882000,"time":1680171882000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171913000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171884000,"time":1680171884000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171906000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171887000,"time":1680171887000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":47543,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46468,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":14467,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":14467,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46468,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":47543,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171918000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06549ab89f11eea12","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171888000,"time":1680171888000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":7446,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171912000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"89.248.163.175","port":43256,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171890000,"time":1680171890000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":43788,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171912000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"89.248.165.22","port":41749,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171890000,"time":1680171890000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171904000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171891000,"time":1680171891000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":60225,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171892000,"time":1680171892000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":65024,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171892000,"time":1680171892000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":60225,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171892000,"time":1680171892000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":65024,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171892000,"time":1680171892000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171964000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171893000,"time":1680171893000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171894000,"time":1680171894000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171953000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171895000,"time":1680171895000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171955000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08bb1f5c30966d3bf","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171899000,"time":1680171899000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":59736,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171900000,"time":1680171900000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":28186,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171900000,"time":1680171900000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":28186,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171900000,"time":1680171900000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":59736,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171900000,"time":1680171900000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171902000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":46937,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171902000,"time":1680171902000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":46937,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171902000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171902000,"time":1680171902000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":26187,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171904000,"time":1680171904000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":21425,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171904000,"time":1680171904000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":21369,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171904000,"time":1680171904000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":21425,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171904000,"time":1680171904000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":21369,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171904000,"time":1680171904000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":26187,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171910000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171904000,"time":1680171904000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":46116,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171929000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171905000,"time":1680171905000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":8237,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171929000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171905000,"time":1680171905000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171929000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":8237,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171905000,"time":1680171905000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171929000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":46116,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171905000,"time":1680171905000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":1394,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171906000,"time":1680171906000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":1394,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171906000,"time":1680171906000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":37161,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171907000,"time":1680171907000,"traffic":{"bytes":112,"packets":2},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":18},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":37161,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171907000,"time":1680171907000,"traffic":{"bytes":60,"packets":1},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":37996,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171907000,"time":1680171907000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171908000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":37996,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171907000,"time":1680171907000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":22915,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171911000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171910000,"time":1680171910000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171911000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":22915,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171910000,"time":1680171910000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":11063,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171916000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171916000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":11063,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":1556,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":47944,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":50704,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":50704,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":51267,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":51267,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":47944,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":19707,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171925000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":19707,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171914000,"time":1680171914000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171936000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171917000,"time":1680171917000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171942000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":30779,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171918000,"time":1680171918000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59521,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171942000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171918000,"time":1680171918000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171942000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59521,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171918000,"time":1680171918000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":30779,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171942000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171918000,"time":1680171918000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171950000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08ba8b44461eb2885","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171920000,"time":1680171920000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171924000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":21378,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171922000,"time":1680171922000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":21378,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171924000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171922000,"time":1680171922000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171940000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":38452,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171924000,"time":1680171924000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":2340,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171940000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171924000,"time":1680171924000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171940000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":2340,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171924000,"time":1680171924000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":38452,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171940000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171924000,"time":1680171924000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":1,"protocol_ver":"IPv4","tcp_flags":0},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":0,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171941000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"208.115.230.98","port":0,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171928000,"time":1680171928000,"traffic":{"bytes":34,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":3389,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171941000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"180.214.239.113","port":57147,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171928000,"time":1680171928000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171943000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171930000,"time":1680171930000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":13234,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171935000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171935000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":41846,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":12154,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171935000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":41846,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171935000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171935000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":12154,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171935000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":13234,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171962000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171931000,"time":1680171931000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171961000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171933000,"time":1680171933000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171966000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171935000,"time":1680171935000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":48992,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171938000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171936000,"time":1680171936000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171938000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":48992,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171936000,"time":1680171936000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171981000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171937000,"time":1680171937000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":20943,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":54321,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50476,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59521,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46116,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":39312,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":37161,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14990,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":50476,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19894,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64734,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57574,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6709,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59390,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":6354,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":14990,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63666,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":56897,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59390,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":2340,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":5488,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":41922,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":2340,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":30456,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":20943,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21378,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":5488,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":41922,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":39312,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":16494,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":64734,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":35441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":21378,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4752,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":37161,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":19030,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29844,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19894,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":30622,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":9420,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":30622,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63666,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":56897,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":1441,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":30456,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":54321,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":29844,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47421,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":6354,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":16494,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":9420,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4752,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57574,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":46116,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59521,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":47421,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171999000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":19030,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171939000,"time":1680171939000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171962000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171942000,"time":1680171942000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":47421,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171953000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171943000,"time":1680171943000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171953000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46223,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171943000,"time":1680171943000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171953000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":47421,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171943000,"time":1680171943000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46223,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171953000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171943000,"time":1680171943000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171973000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":18},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":55190,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"162.19.170.45","port":25565,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":52623,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"45.227.253.110","port":56413,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":52527,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"185.156.73.107","port":52137,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":3289,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"176.111.174.80","port":40040,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":7090,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"94.102.61.39","port":59554,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":53999,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"45.227.253.110","port":56413,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":8089,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"185.56.80.40","port":37078,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":20943,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":56897,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":56897,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":54321,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":54321,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":20943,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171944000,"time":1680171944000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171966000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171947000,"time":1680171947000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06549ab89f11eea12","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171948000,"time":1680171948000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171964000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171951000,"time":1680171951000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171984000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171953000,"time":1680171953000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171985000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171953000,"time":1680171953000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172013000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171955000,"time":1680171955000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171960000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59390,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171956000,"time":1680171956000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171960000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":64734,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171956000,"time":1680171956000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":64734,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171960000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171956000,"time":1680171956000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59390,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171960000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171956000,"time":1680171956000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171958000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":63666,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171957000,"time":1680171957000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":63666,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171958000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171957000,"time":1680171957000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":5488,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171962000,"time":1680171962000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":4796,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171962000,"time":1680171962000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":5488,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171962000,"time":1680171962000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171970000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":4796,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171962000,"time":1680171962000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":39312,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":6861,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":37161,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":1548,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":1441,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":39312,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":37161,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":6536,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":35441,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":6861,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":1441,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171978000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":35441,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171966000,"time":1680171966000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":9420,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171971000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171971000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":9420,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":50476,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171993000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171993000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":50476,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":19030,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171993000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":14990,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171993000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171993000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":19030,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171993000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":14990,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171969000,"time":1680171969000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":41922,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171974000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171972000,"time":1680171972000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171974000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":41922,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171972000,"time":1680171972000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171991000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171972000,"time":1680171972000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":16494,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171976000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171974000,"time":1680171974000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171976000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":16494,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171974000,"time":1680171974000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":9146,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171996000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"162.142.125.189","port":5769,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171976000,"time":1680171976000,"traffic":{"bytes":44,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":9302,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171996000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"162.142.125.187","port":23767,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171976000,"time":1680171976000,"traffic":{"bytes":44,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":83,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171996000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"170.187.165.139","port":44738,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171976000,"time":1680171976000,"traffic":{"bytes":44,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":18},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":30411,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171996000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"162.19.170.56","port":25565,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171976000,"time":1680171976000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":7169,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171996000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"94.102.61.39","port":33177,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171976000,"time":1680171976000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":18},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":28768,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171994000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171978000,"time":1680171978000,"traffic":{"bytes":60,"packets":1},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171994000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":33210,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171978000,"time":1680171978000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":30622,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171994000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171978000,"time":1680171978000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":33210,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680171994000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171978000,"time":1680171978000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171994000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":30622,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171978000,"time":1680171978000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680171994000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":28768,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171978000,"time":1680171978000,"traffic":{"bytes":112,"packets":2},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172010000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08ba8b44461eb2885","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171980000,"time":1680171980000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172004000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":30456,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171987000,"time":1680171987000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":29844,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172004000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171987000,"time":1680171987000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":30456,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172004000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171987000,"time":1680171987000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172004000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":29844,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171987000,"time":1680171987000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172003000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171990000,"time":1680171990000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172022000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171991000,"time":1680171991000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19894,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172008000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171992000,"time":1680171992000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172008000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19230,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171992000,"time":1680171992000,"traffic":{"bytes":1556,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172008000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19894,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171992000,"time":1680171992000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":14606,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172008000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171992000,"time":1680171992000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172008000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":14606,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171992000,"time":1680171992000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":18},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19230,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172008000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171992000,"time":1680171992000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172021000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171993000,"time":1680171993000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172026000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171995000,"time":1680171995000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172041000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171997000,"time":1680171997000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172030000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57218,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40136,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57381,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59875,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7789,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":14606,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":61869,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19230,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4796,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46019,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18719,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":30760,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1620,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41771,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":6861,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37026,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32247,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63589,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63007,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":46019,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":31487,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":4796,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40136,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":43573,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27824,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":33210,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":54238,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57200,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32969,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63589,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":41771,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":27824,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":30760,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63460,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32247,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57200,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":31602,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":6861,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":31602,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":61869,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":18719,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":59875,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":63007,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":54238,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7750,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":32969,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":19230,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":37026,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47616,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22255,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":22255,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":44323,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57381,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":44323,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":36704,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":31487,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42294,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":36704,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7750,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":7789,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":43573,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40369,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":63460,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":28768,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":33210,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":14606,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":28768,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.24.114","port":40369,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":42294,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":47616,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.32.136","port":57218,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172060000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-00b6881aa296e8f39","intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680171999000,"time":1680171999000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172030000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172000000,"time":1680172000000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172022000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172002000,"time":1680172002000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":36704,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":6354,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":4752,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":4752,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":37026,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":36704,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":37026,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":6354,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172028000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":3301,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172031000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"185.234.216.10","port":54412,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":6105,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172031000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"89.248.163.175","port":43256,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172004000,"time":1680172004000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az3"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172026000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0a5df14ccfec68e31","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-73bd7642","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172007000,"time":1680172007000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172014000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43573,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172014000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":42294,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43573,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172014000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":42294,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172014000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57218,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172011000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172011000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57218,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172011000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":54238,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":54238,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172011000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":40369,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172010000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172010000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":40369,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06549ab89f11eea12","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172008000,"time":1680172008000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":7789,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172039000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172011000,"time":1680172011000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172039000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":7750,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172011000,"time":1680172011000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172039000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":7789,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172011000,"time":1680172011000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":7750,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172039000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172011000,"time":1680172011000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172025000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172011000,"time":1680172011000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172024000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0fa968b39d58a2738","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172013000,"time":1680172013000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172045000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172014000,"time":1680172014000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az2"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172073000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-036d745e6b865b1f9","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-17dc5e36","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172015000,"time":1680172015000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59875,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":31487,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59875,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":27824,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":27824,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":32969,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":31487,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":61869,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":61869,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":63589,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":63589,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":32969,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172038000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172018000,"time":1680172018000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":64848,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172037000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172024000,"time":1680172024000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172037000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":64848,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172024000,"time":1680172024000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":63007,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172037000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172024000,"time":1680172024000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172037000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":63007,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172024000,"time":1680172024000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172036000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57574,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":1776,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172036000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57381,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57381,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172036000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57574,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172036000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":6709,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172042000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":18719,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":47616,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172042000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172042000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":47616,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":18719,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172042000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172025000,"time":1680172025000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":9000,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172062000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"198.199.114.128","port":35591,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172034000,"time":1680172034000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":2017,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172062000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"185.234.216.16","port":54502,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172034000,"time":1680172034000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172037000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":7741,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172035000,"time":1680172035000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":7741,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172037000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172035000,"time":1680172035000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172070000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08ba8b44461eb2885","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172040000,"time":1680172040000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":31602,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":63728,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":63728,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":28768,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":6691,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":28768,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":1560,"packets":11},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":31602,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":63460,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172054000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":63460,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172046000,"time":1680172046000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172069000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172047000,"time":1680172047000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172063000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":40136,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172048000,"time":1680172048000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172063000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46019,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172048000,"time":1680172048000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":46019,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172063000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172048000,"time":1680172048000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":40136,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172063000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172048000,"time":1680172048000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172086000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172055000,"time":1680172055000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172101000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172057000,"time":1680172057000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172059000,"time":1680172059000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":44323,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172067000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172061000,"time":1680172061000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172067000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":41771,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172061000,"time":1680172061000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172067000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":44323,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172061000,"time":1680172061000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":41771,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172067000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172061000,"time":1680172061000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":27413,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172063000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172062000,"time":1680172062000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172063000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":27413,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172062000,"time":1680172062000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":17,"protocol_ver":"IPv4","tcp_flags":0},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":1604,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172068000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"80.82.77.139","port":20133,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172062000,"time":1680172062000,"traffic":{"bytes":70,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":88,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172068000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"74.82.47.27","port":49969,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172062000,"time":1680172062000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172078000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":34285,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172063000,"time":1680172063000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":6698,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172078000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172063000,"time":1680172063000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172078000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":6698,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172063000,"time":1680172063000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":34285,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172078000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172063000,"time":1680172063000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19230,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172071000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172067000,"time":1680172067000,"traffic":{"bytes":52,"packets":1},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":15327,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172071000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172067000,"time":1680172067000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":1},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172071000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19230,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172067000,"time":1680172067000,"traffic":{"bytes":104,"packets":2},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172071000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":15327,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172067000,"time":1680172067000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":32247,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172092000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172092000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":65104,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59805,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172092000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172092000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":32247,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":65104,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172092000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172092000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":59805,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172098000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06549ab89f11eea12","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172068000,"time":1680172068000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":51361,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172069000,"time":1680172069000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":51361,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172069000,"time":1680172069000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":48536,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172069000,"time":1680172069000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":48536,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172069000,"time":1680172069000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":17839,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172069000,"time":1680172069000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172090000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":17839,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172069000,"time":1680172069000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172072000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":22563,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172071000,"time":1680172071000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":22563,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172072000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172071000,"time":1680172071000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"unknown","provider":"AWS","region":"us-east-1","zone":"use1-az1"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172085000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-06b8365d2ee14ba40","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-4067e326","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172071000,"time":1680172071000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172105000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172073000,"time":1680172073000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":55192,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172094000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172094000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":53941,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57200,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172094000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":53941,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172094000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172094000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":57200,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172094000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":55192,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":30760,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172076000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172076000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":30760,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172074000,"time":1680172074000,"traffic":{"bytes":1620,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172078000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":6004,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172076000,"time":1680172076000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":6004,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172078000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172076000,"time":1680172076000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172084000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":22255,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172076000,"time":1680172076000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":52875,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172084000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172076000,"time":1680172076000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172084000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":52875,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172076000,"time":1680172076000,"traffic":{"bytes":1764,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":22255,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172084000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172076000,"time":1680172076000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":48647,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19498,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":1620,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":15391,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":19498,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":6699,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":51948,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":47677,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":15391,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":47677,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":48647,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":51948,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172077000,"time":1680172077000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":9500,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172080000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172079000,"time":1680172079000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172080000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":9500,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172079000,"time":1680172079000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172111000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172090000,"time":1680172090000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":18391,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172109000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172092000,"time":1680172092000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":17237,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172109000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172092000,"time":1680172092000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172109000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":17237,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172092000,"time":1680172092000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172109000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":18391,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172092000,"time":1680172092000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172104000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":35725,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172095000,"time":1680172095000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":35725,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172104000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172095000,"time":1680172095000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":34361,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172104000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172095000,"time":1680172095000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172104000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":34361,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172095000,"time":1680172095000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43305,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172098000,"time":1680172098000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43305,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172099000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172098000,"time":1680172098000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":443,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172118000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"143.42.227.66","port":61000,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172098000,"time":1680172098000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":89,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172118000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"216.218.206.108","port":59135,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172098000,"time":1680172098000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":5,"activity_name":"Refused","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":2},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-006041a786af4cf00","intermediate_ips":null,"ip":"172.31.79.14","port":20155,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172118000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"91.240.118.77","port":48788,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172098000,"time":1680172098000,"traffic":{"bytes":40,"packets":1},"type_name":"Network Activity: Refused","type_uid":400106,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172130000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-08ba8b44461eb2885","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172100000,"time":1680172100000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":16350,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":17648,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":16350,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":17648,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":17962,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":17962,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":50414,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":50414,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172122000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172104000,"time":1680172104000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172109000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":42688,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172107000,"time":1680172107000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":42688,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172109000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172107000,"time":1680172107000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172116000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":36804,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172114000,"time":1680172114000,"traffic":{"bytes":1672,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":36804,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172116000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172114000,"time":1680172114000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":0,"activity_name":"","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az5"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"-","direction_id":0,"protocol_num":null,"protocol_ver":"-","tcp_flags":null},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"-","port":null,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172146000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04ec237a893668df7","intermediate_ips":null,"ip":"-","port":null,"subnet_uid":"subnet-89dda387","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172115000,"time":1680172115000,"traffic":{"bytes":null,"packets":null},"type_name":"Network Activity: Unknown","type_uid":400100,"unmapped":[{"key":"log_status","value":"NODATA"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172118000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":27835,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":27835,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172118000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43726,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172138000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":6751,"packets":16},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43004,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172138000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":6544,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172138000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43726,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":1724,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az6"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172138000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-0b2b98aac7015fe65","intermediate_ips":null,"ip":"172.31.32.136","port":43004,"subnet_uid":"subnet-482baa17","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":1608,"packets":12},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172129000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":36052,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":6710,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172129000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":6596,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":36052,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172129000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172129000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":6710,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172118000,"time":1680172118000,"traffic":{"bytes":1660,"packets":13},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Unknown","boundary_id":0,"direction":"ingress","direction_id":1,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":19},"dst_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":15999,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"end_time":1680172138000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"start_time":1680172138000,"time":1680172138000,"traffic":{"bytes":6648,"packets":15},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} -{"activity_id":1,"activity_name":"Established","category_name":"Network Activity","category_uid":4,"class_name":"Network Activity","class_uid":4001,"cloud":{"account_uid":"422354213072","provider":"AWS","region":"us-east-1","zone":"use1-az4"},"connection_info":{"boundary":"Same VPC","boundary_id":4,"direction":"egress","direction_id":2,"protocol_num":6,"protocol_ver":"IPv4","tcp_flags":3},"dst_endpoint":{"instance_uid":null,"interface_uid":null,"intermediate_ips":null,"ip":"172.31.23.137","port":443,"subnet_uid":null,"svc_name":"-","vpc_uid":null},"end_time":1680172138000,"metadata":{"product":{"feature":{"name":"Flowlogs"},"name":"Amazon VPC","vendor_name":"AWS","version":"5"},"profiles":["cloud"],"version":"0.39.0"},"severity":"Other","severity_id":-1,"src_endpoint":{"instance_uid":"-","interface_uid":"eni-04194a5466552c319","intermediate_ips":null,"ip":"172.31.24.114","port":15999,"subnet_uid":"subnet-bae9bdf7","svc_name":"-","vpc_uid":"vpc-d514c4a8"},"start_time":1680172138000,"time":1680172138000,"traffic":{"bytes":1712,"packets":14},"type_name":"Network Activity: Established","type_uid":400101,"unmapped":[{"key":"log_status","value":"OK"},{"key":"sublocation_id","value":"-"},{"key":"sublocation_type","value":"-"}]} From 7a59da36198357e492887af44dc465d9bee24a69 Mon Sep 17 00:00:00 2001 From: Marc Guasch Date: Mon, 12 Jun 2023 14:43:49 +0200 Subject: [PATCH 42/52] [filebeat] Fix syslog message parsing for fortinet.firewall to take into account quoted values. (#35522) * Fix syslog message parsing for fortinet.firewall to take into account quoted values. * Add date and time to avoid dynamic test result * Use KV processor with improved regexes * Simplify value split match * Use script --- CHANGELOG.next.asciidoc | 1 + .../fortinet/firewall/ingest/pipeline.yml | 65 ++++++++++++++----- .../module/fortinet/firewall/test/event.log | 1 + .../firewall/test/event.log-expected.json | 19 ++++++ 4 files changed, 70 insertions(+), 16 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 9f297216f3dd..43f5914bd8d8 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -124,6 +124,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Fix crash when loading azurewebstorage cursor with no partially processed data. {pull}35433[35433] - Add support in s3 input for JSON with array of objects. {pull}35475[35475] - RFC5424 syslog timestamps with offset 'Z' will be treated as UTC rather than using the default timezone. {pull}35360[35360] +- Fix syslog message parsing for fortinet.firewall to take into account quoted values. {pull}35522[35522] - [system] sync system/auth dataset with system integration 1.29.0. {pull}35581[35581] - [GCS Input] - Fixed an issue where bucket_timeout was being applied to the entire bucket poll interval and not individual bucket object read operations. Fixed a map write concurrency issue arising from data races when using a high number of workers. Fixed the flaky tests that were present in the GCS test suit. {pull}35605[35605] - Fix filestream false positive log error "filestream input with ID 'xyz' already exists" {issue}31767[31767] diff --git a/x-pack/filebeat/module/fortinet/firewall/ingest/pipeline.yml b/x-pack/filebeat/module/fortinet/firewall/ingest/pipeline.yml index b53c97f8ce8e..92037a746b16 100644 --- a/x-pack/filebeat/module/fortinet/firewall/ingest/pipeline.yml +++ b/x-pack/filebeat/module/fortinet/firewall/ingest/pipeline.yml @@ -7,18 +7,51 @@ processors: field: message patterns: - '%{SYSLOG5424PRI}%{GREEDYDATA:syslog5424_sd}$' -- kv: - field: syslog5424_sd - field_split: " (?=[a-z\\_\\-]+=)" - value_split: "=" - prefix: "fortinet.tmp." - ignore_missing: true - ignore_failure: false - trim_value: "\"" -- rename: - field: fortinet.tmp - target_field: fortinet.firewall - ignore_missing: true +- script: + lang: painless + if: ctx.syslog5424_sd != null + description: | + Splits syslog5424_sd KV list by space and then each by "=" taking into account quoted values. + source: + def splitUnquoted(String input, String sep) { + def tokens = []; + def startPosition = 0; + def isInQuotes = false; + char quote = (char)"\""; + for (def currentPosition = 0; currentPosition < input.length(); currentPosition++) { + if (input.charAt(currentPosition) == quote) { + isInQuotes = !isInQuotes; + } + else if (input.charAt(currentPosition) == (char)sep && !isInQuotes) { + def token = input.substring(startPosition, currentPosition).trim(); + if (!token.equals("")) { + tokens.add(token); + } + startPosition = currentPosition + 1; + } + } + + def lastToken = input.substring(startPosition); + if (!lastToken.equals(sep) && !lastToken.equals("")) { + tokens.add(lastToken.trim()); + } + return tokens; + } + + def arr = splitUnquoted(ctx.syslog5424_sd, " "); + + Map map = new HashMap(); + Pattern pattern = /^\"|\"$/; + for (def i = 0; i < arr?.length; i++) { + def kv = splitUnquoted(arr[i], "="); + if (kv.length == 2) { + map[kv[0]] = pattern.matcher(kv[1]).replaceAll(""); + } + } + if (ctx.fortinet == null) { + ctx.fortinet = new HashMap(); + } + ctx.fortinet.firewall = map; - script: lang: painless source: | @@ -42,11 +75,11 @@ processors: - set: field: _temp.time value: "{{fortinet.firewall.date}} {{fortinet.firewall.time}} {{event.timezone}}" - if: "ctx.event?.timezone != null" + if: "ctx.fortinet?.firewall?.date != null && ctx.fortinet?.firewall?.time != null && ctx.event?.timezone != null" - set: field: _temp.time value: "{{fortinet.firewall.date}} {{fortinet.firewall.time}}" - if: "ctx.event?.timezone == null" + if: "ctx.fortinet?.firewall?.date != null && ctx.fortinet?.firewall?.time != null && ctx.event?.timezone == null" - date: field: _temp.time target_field: "@timestamp" @@ -56,7 +89,7 @@ processors: - yyyy-MM-dd HH:mm:ss z - ISO8601 timezone: "{{event.timezone}}" - if: "ctx.event?.timezone != null" + if: "ctx._temp?.time != null && ctx.event?.timezone != null" - date: field: _temp.time target_field: "@timestamp" @@ -65,7 +98,7 @@ processors: - yyyy-MM-dd HH:mm:ss Z - yyyy-MM-dd HH:mm:ss z - ISO8601 - if: "ctx.event?.timezone == null" + if: "ctx._temp?.time != null && ctx.event?.timezone == null" - gsub: field: fortinet.firewall.eventtime pattern: "\\d{6}$" diff --git a/x-pack/filebeat/module/fortinet/firewall/test/event.log b/x-pack/filebeat/module/fortinet/firewall/test/event.log index f3baa713171a..923874bef3fe 100644 --- a/x-pack/filebeat/module/fortinet/firewall/test/event.log +++ b/x-pack/filebeat/module/fortinet/firewall/test/event.log @@ -25,3 +25,4 @@ <190>devname="firewall" devid="FG201EAB12CD34EF" vd="root" date=2021-05-07 time=08:31:14 eventtime=1620372674900167367 tz="+0100" logid="0112053203" type="event" subtype="connector" level="information" logdesc="Dynamic address updated" fctemssn="(null)" addr="MAC_FCTEMS0000011111_AV-Running" msg="Updated tag MAC_FCTEMS0000011111_AV-Running." <190>devname="firewall" devid="FG201EAB12CD34EF" vd="root" date=2021-05-07 time=08:31:14 eventtime=1620372674900749585 tz="+0100" logid="0112053203" type="event" subtype="connector" level="information" logdesc="Dynamic address updated" fctemssn="(null)" addr="FCTEMS0000011111_Connected-to-EMS" msg="Updated tag FCTEMS0000011111_Connected-to-EMS." <190>devname="firewall" devid="FG201EAB12CD34EF" vd="root" date=2021-05-07 time=08:31:14 eventtime=1620372674900961834 tz="+0100" logid="0112053203" type="event" subtype="connector" level="information" logdesc="Dynamic address updated" fctemssn="(null)" addr="MAC_FCTEMS0000011111_Connected-to-EMS" msg="Updated tag MAC_FCTEMS0000011111_Connected-to-EMS." +<190>date=2023-05-22 time=08:19:38 desc="Object update request from device of FortiClient received" msg="Send new version object to device (sn:FSAxxxxxxxxx, ip=127.0.0.1): objid=0000000000, curr_ver=00091.03310" diff --git a/x-pack/filebeat/module/fortinet/firewall/test/event.log-expected.json b/x-pack/filebeat/module/fortinet/firewall/test/event.log-expected.json index 784d0b289c4b..debdaf06adb5 100644 --- a/x-pack/filebeat/module/fortinet/firewall/test/event.log-expected.json +++ b/x-pack/filebeat/module/fortinet/firewall/test/event.log-expected.json @@ -1138,5 +1138,24 @@ "fortinet-firewall", "forwarded" ] + }, + { + "@timestamp": "2023-05-22T08:19:38.000-02:00", + "event.dataset": "fortinet.firewall", + "event.module": "fortinet", + "event.timezone": "-02:00", + "fileset.name": "firewall", + "fortinet.firewall.desc": "Object update request from device of FortiClient received", + "input.type": "log", + "log.offset": 11198, + "message": "Send new version object to device (sn:FSAxxxxxxxxx, ip=127.0.0.1): objid=0000000000, curr_ver=00091.03310", + "observer.product": "Fortigate", + "observer.type": "firewall", + "observer.vendor": "Fortinet", + "service.type": "fortinet", + "tags": [ + "fortinet-firewall", + "forwarded" + ] } ] \ No newline at end of file From 5ec2a5396da6a1a80ea3fa5629bbc6e3adcffa9f Mon Sep 17 00:00:00 2001 From: kaiyan-sheng Date: Mon, 12 Jun 2023 12:54:46 -0600 Subject: [PATCH 43/52] Fix include_linked_accounts documentation (#35665) --- metricbeat/docs/modules/aws.asciidoc | 14 ++++++++++---- x-pack/metricbeat/module/aws/_meta/docs.asciidoc | 14 ++++++++++---- 2 files changed, 20 insertions(+), 8 deletions(-) diff --git a/metricbeat/docs/modules/aws.asciidoc b/metricbeat/docs/modules/aws.asciidoc index d67dfb41eee2..da21bdbfad24 100644 --- a/metricbeat/docs/modules/aws.asciidoc +++ b/metricbeat/docs/modules/aws.asciidoc @@ -77,10 +77,16 @@ If endpoint is specified, `regions` config becomes required. * *include_linked_accounts* -The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html[Cross-Account Cross-Region feature in Amazon CloudWatch]. -By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring account are collected. When set to true, the parameter allows the CloudWatch service to access and retrieve metrics from the linked accounts, providing a comprehensive view of metrics across multiple accounts. - -*_Note_:* Enabling the include_linked_accounts parameter requires appropriate permissions and authentication credentials for the linked accounts. Users should ensure that the necessary IAM roles and policies are properly set up to establish the necessary trust and access between accounts. +The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a +main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are +linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html[CloudWatch cross-account observability]. +By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring +account are collected. When set to true, the parameter allows the CloudWatch ListMetrics API to include metrics from +the monitoring account and all linked accounts in the returned data, providing a comprehensive cross-account view. + +*_Note_:* Users should ensure that the necessary IAM roles and policies are properly set up in order to link the monitoring +account and source accounts together. +Please see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account-Setup.html#CloudWatch-Unified-Cross-Account-Setup-permissions[Link monitoring accounts with source accounts] for more details. * *tags_filter* diff --git a/x-pack/metricbeat/module/aws/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/_meta/docs.asciidoc index c55570b3d356..cb6f05a9336b 100644 --- a/x-pack/metricbeat/module/aws/_meta/docs.asciidoc +++ b/x-pack/metricbeat/module/aws/_meta/docs.asciidoc @@ -65,10 +65,16 @@ If endpoint is specified, `regions` config becomes required. * *include_linked_accounts* -The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html[Cross-Account Cross-Region feature in Amazon CloudWatch]. -By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring account are collected. When set to true, the parameter allows the CloudWatch service to access and retrieve metrics from the linked accounts, providing a comprehensive view of metrics across multiple accounts. - -*_Note_:* Enabling the include_linked_accounts parameter requires appropriate permissions and authentication credentials for the linked accounts. Users should ensure that the necessary IAM roles and policies are properly set up to establish the necessary trust and access between accounts. +The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a +main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are +linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html[CloudWatch cross-account observability]. +By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring +account are collected. When set to true, the parameter allows the CloudWatch ListMetrics API to include metrics from +the monitoring account and all linked accounts in the returned data, providing a comprehensive cross-account view. + +*_Note_:* Users should ensure that the necessary IAM roles and policies are properly set up in order to link the monitoring +account and source accounts together. +Please see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account-Setup.html#CloudWatch-Unified-Cross-Account-Setup-permissions[Link monitoring accounts with source accounts] for more details. * *tags_filter* From 7ad25481227cc19993e7f2c3bcc0c24e49967cc3 Mon Sep 17 00:00:00 2001 From: Dan Kortschak <90160302+efd6@users.noreply.github.com> Date: Tue, 13 Jun 2023 08:58:57 +0930 Subject: [PATCH 44/52] auditbeat/module/file_integrity: remove garbled PE executable test file (#35724) This file is detected by some malware detection systems as malicious likely due to the source obfuscation that garble does to it. The testing of the underlying library already tests the infrastucture, so removing the test here does not harm coverage. The executable itself is a garble built compilation of the file at https://github.com/elastic/toutoumomoma/blob/dev/testdata/main.go. In that repository the executable is built on the fly during testing rather than being retained as an asset. --- CHANGELOG-developer.next.asciidoc | 1 + .../file_integrity/exeobjparser_test.go | 64 ++---------------- .../testdata/garble_pe_executable | Bin 1284608 -> 0 bytes 3 files changed, 5 insertions(+), 60 deletions(-) delete mode 100644 auditbeat/module/file_integrity/testdata/garble_pe_executable diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index 13ac5ac6e678..5ff66ad373bd 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -165,3 +165,4 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Deprecated the `common.Float` type. {issue}28279[28279] {pull}28280[28280] - Deprecate Beat generators. {pull}28814[28814] +- Remove garbled PE executable test from auditbeat FIM module testing. {issue}35705[35705] {pull}35724[35724] diff --git a/auditbeat/module/file_integrity/exeobjparser_test.go b/auditbeat/module/file_integrity/exeobjparser_test.go index 1ab8ef564169..0958305afb8f 100644 --- a/auditbeat/module/file_integrity/exeobjparser_test.go +++ b/auditbeat/module/file_integrity/exeobjparser_test.go @@ -40,6 +40,10 @@ func TestExeObjParser(t *testing.T) { key := fmt.Sprintf("%s_%s", builder, format) t.Run(fmt.Sprintf("executableObject_%s_%s", format, builder), func(t *testing.T) { + if builder == "garble" && format == "pe" { + t.Skip("skipping test on garbled PE file: see https://github.com/elastic/beats/issues/35705") + } + got := make(mapstr.M) err := exeObjParser(nil).Parse(got, target) if err != nil { @@ -262,66 +266,6 @@ var want = map[string]mapstr.M{ }, }, }, - "garble_pe": { - "pe": mapstr.M{ - "import_hash": "c7269d59926fa4252270f407e4dab043", - "imphash": "c7269d59926fa4252270f407e4dab043", - "imports": []string{ - "kernel32.writefile", - "kernel32.writeconsolew", - "kernel32.waitformultipleobjects", - "kernel32.waitforsingleobject", - "kernel32.virtualquery", - "kernel32.virtualfree", - "kernel32.virtualalloc", - "kernel32.switchtothread", - "kernel32.suspendthread", - "kernel32.sleep", - "kernel32.setwaitabletimer", - "kernel32.setunhandledexceptionfilter", - "kernel32.setprocesspriorityboost", - "kernel32.setevent", - "kernel32.seterrormode", - "kernel32.setconsolectrlhandler", - "kernel32.resumethread", - "kernel32.postqueuedcompletionstatus", - "kernel32.loadlibrarya", - "kernel32.loadlibraryw", - "kernel32.setthreadcontext", - "kernel32.getthreadcontext", - "kernel32.getsysteminfo", - "kernel32.getsystemdirectorya", - "kernel32.getstdhandle", - "kernel32.getqueuedcompletionstatusex", - "kernel32.getprocessaffinitymask", - "kernel32.getprocaddress", - "kernel32.getenvironmentstringsw", - "kernel32.getconsolemode", - "kernel32.freeenvironmentstringsw", - "kernel32.exitprocess", - "kernel32.duplicatehandle", - "kernel32.createwaitabletimerexw", - "kernel32.createthread", - "kernel32.createiocompletionport", - "kernel32.createfilea", - "kernel32.createeventa", - "kernel32.closehandle", - "kernel32.addvectoredexceptionhandler", - }, - "imports_names_entropy": 4.2079021689106195, - "imports_names_var_entropy": 0.0014785066641319837, - "go_import_hash": "d41d8cd98f00b204e9800998ecf8427e", - "go_stripped": true, - "sections": []objSection{ - {Name: strPtr(".text"), Size: uint64Ptr(0x83000), Entropy: float64Ptr(6.18), VarEntropy: float64Ptr(0.0001)}, - {Name: strPtr(".rdata"), Size: uint64Ptr(0x97a00), Entropy: float64Ptr(5.10), VarEntropy: float64Ptr(0.0001)}, - {Name: strPtr(".data"), Size: uint64Ptr(0x17800), Entropy: float64Ptr(4.60), VarEntropy: float64Ptr(0.0001)}, - {Name: strPtr(".idata"), Size: uint64Ptr(0x600), Entropy: float64Ptr(3.60), VarEntropy: float64Ptr(0.0001)}, - {Name: strPtr(".reloc"), Size: uint64Ptr(0x6800), Entropy: float64Ptr(5.42), VarEntropy: float64Ptr(0.0001)}, - {Name: strPtr(".symtab"), Size: uint64Ptr(0x200), Entropy: float64Ptr(0.02), VarEntropy: float64Ptr(0.0001)}, - }, - }, - }, "go_elf": { "elf": mapstr.M{ "go_imports_names_entropy": 4.156563879566413, diff --git a/auditbeat/module/file_integrity/testdata/garble_pe_executable b/auditbeat/module/file_integrity/testdata/garble_pe_executable deleted file mode 100644 index 8436222de761960c9ba235e39d98def894c53368..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1284608 zcmeFadwf*Y)i*u~2@KaW+$0D{s8NF#%phnYMkg3>4^A{HkD^!`FQjNuFw9^Ogb9-X z$K%n_QZLn~rB&P7+Sc2HT)ZR!l7NZy_ z`{#`^XPgwUjaPhCb-Q}`W$mQ}m&l5euNE|SF{Q%c1z26zL zHZAbZnCY``pPxOiV(yPCZoV`7)|>CTYi=<6mRZ>qp}Vqgzbm`=%4@RkoO|1>asB)E z$#E(!o#Jxcw!Ei)dwj5Zwz__h-Z#C6%QfEZa#g13v@dW7;2J`ux)qL8{)2z;U0q^mi!fXwg8%0fvQ9T;0!@DJBVIdHWb?x{Q zHCyf*FvVNzJt)jQaj!Aj=Mn{bj1@m)&Gy}CqTqnB>^{DXeM{Jj+WlsmIP{UIYrjN{ zIV#c`MCAL7#s68Af9t%^xX{nMJB-n;m|s<2uc|kLIr9SOQmLrfVLWg-*mYDCY&BMl zWR;P_8OE}7)zZEH^qb!&YL0xKA?%U)0sHE-K*4rn*)FUe0W**zh?g=kc6-3SzCD0& zR*Ct6|4@s+?#Lx2W8S~Q9_eB13;@+5WK1<)9pWi3syaOPuHcw>IUx;|A@XcS{%dY| z=$fgZ8%H*@m&2vH{jWvt&(|zIgIiZ2VD*Wn_!7gtt`&Y~U z0UV#OhVDYFFsJ9_duwAAz%J6|lOLu7cbO0G?(N#Zbw^Iyj|dF-3=U+LoWxf<^OnJV zTpO~Pex{RN#&jV^==8JeQJ%bB_CbW)%vvp?6E&5_PCtsl0}!C9;+)y?4Bh7Tp{R2V z%e=Qww>g`2X3Ivt+L^oS5_PUYguJ_Rojd-8I<3qe?3301yNmItsa?{WEtGn9#D@sW zp{=S-B)N?uQkQLb(u{%CIbpmTo+1y!QG~;<BE@*7evU1Sc(V}7Frh;;E3M~;C_xAu28=O2rEyC-*$qww|t=LK5`Uw zpUk=|JGXtiZo9Y*=~(bxat7NT+_i1dUJv?jHXf?O@Wr0z7`E4O!r62F+1_rfncyyu z`oc%g4$0Uph(LDE7W+>s@gk2gy4d9cMHYrWjr|I7etR-zXtQBAp;6FiQQ=@$z#2N4 z4@5^YfqTDMFY5MY2CN%Im#7m-LNzN;R^sHULFh;ZbEwKylQq4?sgG~`;Vb3MmLLDT%Z zgniM)!d^O@mHGUbrpBsX9ZkfpI?~=Al`~ruwtvwFw0sJ&+2C2abw=Wl}F=%e&|P&SY}i+9wi0a=jTiTE9r4EVj5J! zX|Jk;JrxfI%qF7u3h?!fe8uFze+x>a7** zS^ioD-)o!X zZ22icX%zOvv>kn2<;Li0z(&@lpDfYJ60Nd-Pe5wj>53GdzX)`Xti{Mz^A`JJ_x~=O zg?a>5!2VJP^AP+<2TKwBs}9aX@GTWwsR+pK|Au~hLD%!5erwim&*-;S{r0$i^N`8d z{Vn~Lr{9+9w^IE!U%$=MZ{_+es^6~FZ!hS#srs!MZ?ThAR3-ax8lp)ba>GA?Zo875 z@gPqALBF#{>3n}uzq4Bhmg3z~?`xgD?PFA>j&eHqE~94YD5saNGwNy`<#hEAh*IrO z($O9b?W4?@tE2LCR5hc9>Znp3HJ?%GI%=Mdx`k2S9ARJ9Ms-vvqA>nC?gbrpA+t5< zsAe5?8l(P;QH_~9@-b^T7LA$jI>AU`?m|#Q2n$E%pAi@DC+x!CARwy_vrI+~@`Hb) zvMI)O?Xv>bgwt{nQ(~=Q0=Tt1(w1f{dlnf$ova*1;|_oka-(d269Fd3s6#Bk~DW59QQ+2 zJplAo8n8?N4IY*=n!sM97@zs>Q* z2=p_44IFqNuML4+9w2&~UOxtZg^ufWv`#?v%42XJUcN@Ycpha(x58o9tl#^Y{kOy1qnL5%RDz zS-@m=swh7DuOM6k&K1ZLTL{^<1E6C<3ck6=z?XyuV-GN=L)y2eVTB}+s4@>rjB(#t zlyp3zZeOObC!~qAJqq-$tOilJ;V+$lopTJZ0!!O=Dc1jo z^C!kMi!ob;-7j63TSZ+gU2Hhd`4eOIh%q}AAWX>+Y1_qm!}((&EKzk|xEZaAdXk}R zVP^~!k-bZg9lf{T4i|oKFW5t{KUhZ2{4Ccc=t#UTUWVaiG+w$E>4afXaMY;&0lF^= zcKXfcfDzc}kF>dsW#k?RU9w13D_(8m9!OR23+@APnlpDdOa${GW zm`DR%=u8o5fcDks@kgX5{ujJqJR0-jgAmF_C_C;>>VL@ME^%Rx?Q72?fvxcDpRwW zntg2QPA4^wsd>ky{(*9Cq`?PNLgp-;UVWTr|4*=-iX=Z#4duXX9sX_U2E6 z^_%~-s}{r4-X1!2^IwDC;k7}(jy$%iib3($Hn-gqD?^2RPIaDcJUda2ei0_5-^0Ru zH}(?rovs-~9L2nN3Zn+q>WHtR5Xk6>e+K?t zOU(Qzd-K17`+%JQ}bqXm$*hf*2;@Cr=Mpp3l+oE81 z$SoRc$)LbPf$Wcj`Bv=N#AtMvZr$LHRXZ8Vg>hGHxl!i)n^((m@GPD#%tHud8!K!= zW*48*8XpQACnocDd5MYt$2F^LtRifM92!lN4Dxpo=N(8qRygz@d-}G?K1Wsv9B$<15?yvj8g9d}oGc{b;2ck!sQB#iE z75D-B##8og+J9eV6Gm;==C6W#@G`6=bUL|7px~p$GGKnxIjJwkD*+%zb|-3Aa2`er zNa|pURC4q>bboP9R=|b`5Nk>x7v!wgpC5Eyf7bQEXvkZTtGgvbn%h!WjQHzaCq+t3 zxAl84Ci0eVSk0WS%jektas6XE!!Il>)mY-qX4uc3yawanT{HFXbn3>M6rfXrgx^@c zo>z<~nAvGcFe1-D2IC-&}jgukH%Dgttkod-K+ZHvHt9t6jqQb6p4Q z>oSmEp7nJnw5{zZh+4WY*s8-CYoD!#dIkMewkR_gO>2?53<1-r*(4iPTsKDA zD>^kE|Ftv!PE`LQH4SzBAZbHKV zw`%a7$_e8cK0M@}>EXizLqo}iD!n^m(@|N{PK0EmW)jIGQt5Ls({8N)a+X8kvq4t# zK=Udx&zV*_GJH5Ict$jQcsRsOwr7?4Kz{k$I(Tq2D}*}egQ0!A3abi?82ipHuvRsH z!-oglGbwzyfAAE9jG7l&lWr{?I%!8{C-N&;%Q_;#Kf{NOB+$*>l^8+GY_d%*P1wkQ z&=fiBP8QrHQ{mE0Df6DsB`0;0Cd)fT%2$8fl`5Xy-y0O*l8bhLFs{9k-QuK~^B1>E zUiK$gKVdUW0Sl&5Vb2GXBZGnYkb{*kupuL;X66a&Bw^izWpxR7&~zBc&BfTDfWlk` zt{^YCI|JHs5XM>9iQ}j8F@tJrnb`gXjpkuu)gFl|P?dbn;h6cfW+Ru6R_lkTB}3Va z-KL(@xUG3;_F}AoheaBM!d77(k$0-HOog%A(iBD&6)jeZf>Pf-n>zOky#T<_!r6-~ zxovYQ@e`b^*vY6eg&`ahRGM>#ICV_w+ix3d-1&XADBC5C5yq?T@`4j&u-qp~g?wy5 z{ysr@ogV711RmHjpt!;Qv&C$3V5Xdce|@n|BguHOc1&F|jqq_D$G^T@$h*s+WQT4l zA;#T^_hsPc@(fkFp4Hcn*`C^fD&JirssbeV-1xa1qBq;`T7!}w&+jaIX!{Lj@?dSh z3DQi1VcseKbU;tGE+(13ZcH8c_;c*K`cw6D|1~?+J_JI?LS|j=hJ9$Ts=lwY`pqFX z!My3x!u-xHB=%qbr}ZcHce~U-`1ti3%W1hoAM)4-n5y_wQyVM*Pt4*1e~GbXo?g`l zih{R5t?YqXv7;M>HC{8E_V<#p8Mk!%E(erHL(Al@7M8*;=p@Rx(v zF^T-8Uo-g2=g)OobM)N1x;}LX)ZC-|IqBb#KOgS4e-{bMhf&gfyg1oMsC1qB`0sUb z{w-a*IQhdI%nuiS z!cg#Bn8H-x^k_rot3QGY33UJGZCS1jVKp#&Wa}($Y9(pY&TPLKso75I4yH!>e}Opc zQ61-*EG?g|&EWbGn|b2#0o7sApr{L~^H2d2mbn^DR>NNTaP3K)Eg(zqZ;;sy7%d$a zsRu{a!GedIkPAitu=fE)x(8aY4}|n4rT`U{5+HTliw_3pRrJh9w?ni2~nR>uI=@-n}5E%tE_ih`F| zC}^xzJECjLiFK7cH80v8E=DZT8V#6#7v{=*0Lxduxt!e>4#H;}o-j79UB*C|r4ep* z!ubfprBTHTVO=qg(;wo%wUv|{vSc6hmKZDp8_#nv!e9a&$z`1wW5!CkOEuf62nIob z)TTq0gDtA&Dds>s^P=%Qj`Dww(W4Cg|F!N1#sL9EytQwTN-)+ha;$yEszzURdvGmH z?SLC*6M53O9)LMOnEiQ%haDbRr8DeCTHC3!VdN6c#%!N z?-)?}=d9KKIU`uE>dPk8mFIJ6`NVMYS!@h^E$4TMzza-)$4;|)K9I9lJ#WmZY$(pT z47=BK`>->&X7@q3I%h3XnUGe3fh!8HZNod98H%mURWq|(Q)+4#_}R&MdN@=n_9CAd zO$7GKkux_O4}T5-@VnTH8i}n+I0zZl)CTBwGOxs1IfJwV&mh0GwhX}%D_V+&C^$6V zM<1Os;N|e+Zos)SU~Z8QJqa}1^D(xlOI5+Ge{8SU!vIT<3)N$%!OP8lTe1Gv95j}5 zr!QQ%_eQeGOX#OC+mT!s=al;GFq=dRvQ)|EiCPFQh#n-0Tux&sS+YWb=re)9!( zLE)bRDH^MDR^!P(VCg8*g!zDSOd+lx*U^6-N#s4Catd1~^PL07q3E#=L+y(9QLU~+ z9hhJ9@*;1LEx1BCD+4)G;aO8R2tGtD^6&_>;q={DqmuMcPf1f?g;55(?}HU630XUs zGewxMI4r@5#5+kSvL%BJ;NNAU5rR6R0IZVOgOura3wwIbjP~~c=oDym$a=6YBX~+= z-;rc7Yn7@=Sn1LBW+zK}a8zX9zf!ZXx5$#rkrwP1*>{xf%7$XjCx^zXHj(5vg72Dt zmuK$-r{g|W%DK0n>o-0uu8d0tn%!VnomL} z3v04lD*fAHT4a-FqwEVaTYO6Z`Ld|rmK2trYb6WYSGAi_1|r|5g$5Oc-=Mnd3c}Pq z)$<|t6S~oJI`@oHW{9v?hVyVbGP;n5e2{Cq{kLl!I6q#NM-jBxtEa} zDgPgt|Jw1Zk9O0gPB=#Ya!DE4q>OBmS3dg(kz%*D@6mn)-S!6Z$UOO#dJ9eFFkp3L z`|jYGqCk`eb0TYN0hEjWf2x8yc>LXYU6w0;7JHiw^2&uMdg9O^it8ibrB!i2*q}_1 zc){-ZpLZ0)lwS-Q!oXG_}BiKRpqCq(@w5!nrN zO1|_FzI?(5J&^DP2wxeY0zi~q03`HS-OL>bUbaon58?s2jS2gAB&QJ zZ8w!@<&le?RATJHswX<+=S=-LP*86?$Wtm;Sp6DGtcN)}OROjKr2QaJu(KjFP|#9w zGLrV{B+gjIzlr$y>(P|?eqiiQ|JWUV>tV@ND{ar^cE%6b^ft(lM55DlO2)R%8J|5i zV^q9>W*`QjEj#0s60^=5zLCukEi+EyE+y+${6VPtUspx@ z)uW84`}!om`K_q>jMe+C34e!(68wQ*IX`5Is{QR~N2GlV7<%|4`+5ZIUoa-#cZzq% z6z`TP-WKpp$O@06MfyU6@D}IfVTkVHq%TD*COrgGFoH=8%+`TX*APJ(lL62J={c=7nWz`=T?)?Ea_-=1KAzl(xaBeIc=qS{|)S) z4*X7Y@{8a=Ilo^Kq(lK@Zxx%{u`Mb`ybe6EmLhYj z`5}BD{pJzQ&y>c{PV97+>!2(<^VZe`2P^nxx@(;eV99rPX8`B5`lTK(QN2HU&M~Wm zbpw|5X<5R$H(QAihg6>u%v3hL0A|?GE&o%FFFl314SqX4qft)Nv|XAVrX3JzbsRDb zw)Y@B@i7iuU)tu+63<JW#S zlATyX(rBG6Xj2YBnBvGnmZ^9Ol7VXoz;M(CH;zX;7$x}oly4H)8S#q_WhI60B!XBU zvW(@QlK3KDR+1Be*!TlZ#PKJ)36dqv>dKPNSNjD6Lk5+ZFnWm1fl;VQ+4R4~J1X%x zHvJ_9q&9dV#4qb$RiF>~BvxdCJ`bF*QgN#jgdz=D0dqH04JsVgRN&WN;D-JKrI#GVq?LNeLO@_XX|Sxs0;j9Gvw!pCQxJt=>>hh4 zVAci9w`k=ymgg#X=0Vpj7_i_Xq6SNq12rZ(<`WF&#J`-W@T2id;4$vZjKMEeaBDOB z`J&+Oei;6Z%eMJ3_s4D{;AwkEe~0b~r{EU|aT7HjHj>3Qvt{K!x=7+`QD*xw?vEyj zrJE<^3uE~&H2nbSa{wFY2LP7h-}tDgItq)6%ZS`g!nk*++gNc0Go#1o;%;&1Gb22f z5$jh2C3K0Qi~EX`5T*GuPO>~eS(rcz$gf8A&lF{`eB@rYD+J?mZJD=4sbR9@hp=3M z!IqXq3Zqv*#G+qnsVDXj%h;73*>5}C6|4Bh35S_-gEY#6i`dgK%D0)1vveB9bH)SG~0BgzqyN>8M)rz#D$QR$(b z`+Hg5OpL3+99V9aW^H7 zX25Ucsl*|m!YDv4K5hk?J`5g$>LlqT{mVI`FQBgKEunKGl_OmtiZX7nolqZ0bNMjc z)q|H7c<`*=5$vZ`553Z@bXFsn$)bb?Txcbqk;2T&fz5j|y*r}uT=@iiCc1Nr6;?(L z)*I^Ps+gLDwwS@0;RC{&)ck9i%6{rBgwLqS&V=so1H7Gp0n=|$9v*Lc0K*#)SU|v- zzl&a0!?F737!G9)y#H}TaPzJ-pX)QWJFDvnwOt7wG}&DO70n+h+{qq}EJ#T4KY`-uylQql&rHyF*?;j~nw{`4FG>BDXwUMZ6zBJyLkTs;C#FjLQ7@ zNstxg?J8HLPt7km6K~;rC%A%R0v3Ei>%6r^YLr{27%#4@#KbGYenU~DH4P_%%sQQh zS`yg${z(fj5Vv2@KC)YGy*Fp2oMl}|6hhV zQ%g$HgG%$4kh8F3EgF5f>@O!u9+gw5O+GTt_DJC?(}*6(#H*a4$0kCf&&TXamJd`BSg2=hIRSPlJn zAZ3~#MI(iu``MX3=zv?5I5}XKVXmUo=Q{Uw$=saA;IdF}XePt@hGn3{zPYr-y1lfd z=Bwb8NZ}KzwgCZiw#RQyar@1p(s(EUKBQ{INxE$%W=vM2O256(EnDDnf`;Tyx}KOH zVfBb#7Ac&rDj5Wj6#1bNp(;8%V9(YSeWO5w|1r9SiiCW`spx)H5xeHMqjc}qG*i61 z57^YK-mt8J$NJXs7{Qy^IM7o?PKTQVX(C@KP)YX!tY6EBP^0Dv{6-326GRo9iB+t^ z7LIi-&Y1x{Y#<J0Bx!zV$bz6~V1oJ$HJPwptKQ~+ou#?`vn9_sMheGI1tpe8A^a+; zZS>(4vmMeni5Q&6yG8SV`s=_zhJK)U4|W@!g2;TheLM4JRim;`r;x0bOo7?GlH?i( z;@2`j!pxTwP)$S8MC|-6%yk9NlAGWOaok0XC4^Z7f^#&6Qej`8CiCbvl3cPo2B1R} zWUq7OY~YARfk+C9s7((8&F#6dt)1irh5u>5T^{l8>|KNEgyvM%ObjhVDi}-T-Czcs z-I(IA2GN#+>V>>e9bjPD2oAIy0~O9EJ>3PE`2C&7Z$att+rI|wD^c?;Wv|&T<6sb} zP+(91pL}H}n>h{?^4e~Is8K*@`uU6tUgS$4Jt6-l)<-3=zRY9{yiYjdMJ~u6;sxj5 zqKgR+Bo59tqvm#GZ7doI62tljQy`wM_^^h_6ES0eJ5c$fs}Y6r!5nx1x?+uZD^e3! zFTT|ep)C81F}ooP`ztNMA~GIX@f^u^(WRs`5G@C_u}BlGGsgD9EU>dLKv@bPwwI-= zhNKOun;@@%6T^w94#)=8nOmJw>=u-O>YkCp9;)4b0G~7+I}5A0u-{-4+d4+e`Pg&QXm?vq60RD}{@-rXS&`2+Cj7ChP72n&pSjvX)?<;{HB z_qyfd2*h(Dg-cZ(6onS%$A@?is`)udI;}KAT&?tZmDM;b8wb*!Zc_lE4UB!mT z!L+#H;2MR)0N&-RK4{cj3V35nF)vcb>8GoajB%ojO_jwNo_xhUz9Z(j`IMtC{++a zZ_+5oY``WzXa*=RRpo*5OC6M7FOnkY6m0Vm<#5v{%Fid*K>0S%heG*jh=^xL3j3)# z6v{>1gAP8gax5&BPa~kv4X?73y|qMigowsgedIt|yqC8{&5!C9qvkrI_f4QzuPV9n z$Av)IP|+A(P2}Nk17?j&mcpxpjK#xkj^WX$T0aqlW6a9c$Ur{li8pbYYh5Z)-!RmN zH7fciwW>W4!W#9-aMzkxa!B~6VpFn%9d!wTD`14?V6tIl z%2JZG%q1)UA`2WZ`}nGps*C%}ZF+y%rV>^4B?plAKZNF!g89e+C*ru z^~VLSa~zbj)r1hr+2iV|uL^*2HoFise-FWgeODeijvI%tlG<5Rl~-r?w00&i3{A4A z0M$b?V=^@}b|>EzD$=7WWYHw1JI$jT*w=AHAhN?-pE+)K;>A$zhIH2{rR0&;I+Q&5 zbJ(&$Ja0abQ1G6+9}!By6U1MKeuo3~N&W5skzG_!^tu*T$QEH`hvIrt$sHS6EL2l-~EQ`S)>3Gq{~?TC`ZS-KCiQ6t93oq zf9P{yf?(!F+3-E1D2jdJ;?*pb7!M~|Zu@m=>{WR*oSAq)iKGx*l!vw;1ow7^nEK;P zP=R9AT}hA{Cz^3VV$wPK zCR60opld|U3eRr#cfUJTQqBfjKKhMwp)XU|IS)hxrH@=`0p8KcZ3^ zuzjTg`+iO|=s&6$?j+D!ZNMxog)YQ2{>Af@jt3V%uslca9f6u)D1a@Kn(v*u-V(Ff zZ^GvMEws+hI z>TG8&tW-jJ6RiUH9J6^`1S`p&v`R=?6;KK1DV0$E5wFLYO~BsYUQ6hBn`;tlp%QS= zhb-xJ9K*EQptLvoPaaowOUlm+PNcsrnn;$A)Zfm2tULYf5zMJ$bpUt;QAnOa0DXF) zI}2lCRR4)x#)_u-;|Aq&%q-AuW)Qulu?Ls~$O6wQ&BHB0zAV4-=Vs9ZGz@ldx+7iB z%f|jM4@H};GV~FZ9z z^vNBtUZ!f8x4e2{!4uVJ4HJ!VlbssoHf+Ulu)5Xd)MkU$Fnc~qNP?4oA=x>{qzDXSypmSkXseGsC?Q)x#C)rKU#QUAPx-FpGu@kCNL3Gie^h ztqm(PKRPd~^NDt?A1WWEPLd!2gBECK9ymJ4B^O}y#jX8WS_!G>kDa*(De#{dPs$1a zr8QfYsuLQXxUxAw`-A?7?OYH=QkX=sXc&{U4-lj2d(t`%3Cf%OSD||O2lY-NxuX#I zw5(X=;3p=q+$RLt&RVVF|8x=#nBOM+dmg6zWz;A!z^1}i&}aSvQ83M2F;8(HxB7*$ zi4G$tWu+B-piv0LYCWMX03ob8-1kKYgq@M2;eYaxr@|mt~|eP%?k$`laj`7S7f|oi2qdoE%UGzqgv&5Eui^IgOXOPexOb z!qZ4NSk3LsE&qiD#_YvgP%>XfST2HR4Plu9VZRLK4RQu_Gha?_=mGl?4mtNT9@;>F zBS-p%{sRY${A+KUbxY{Sm)<-F`~mJ7p;OAMD&2F=3k?oe_8D(f^Q<+ZCRC@ z_XU;be4Kzn82Kg`)sG_-jqy?h)kw`_40Wzvl@EDXy?1=RQ9TP;*y13@jGuUZdDN)B zO29Y(f)Gw&ox`})mRRShs+IH43k?IP{qiSh`Z22i zj$-Ui4`w=rna&%3L1+*&ou7~Px2L2VH9PReJm*iGsOZC}sYMJkpLf1d4Hd-|`!jxs z=Un0$yOI6xuI}x6vp-_x*KfkgP*b}U77->L3*s;ZV&3>r-*9EW3BenZVBNrk@p%(M zS0N!kSQPi4pn?f`1*(GcgTs>*3}*%T-hz+^6^z$2)}aWj6=0V~+)H4j8}$mVBV9*1 zOg>$!_Lt$V)In^ckq{|d>rD{bVq6-RAhvl3%KPK63ny&mnfe3`HKW)z5s`2jhRc zNf&yoDbPNu@=46*{Su%+2SO%K!?IThKWDYTtS&u~3a|OgMQW0K30Y(gzy~J4O)5N4 z2eT-XtD&1+1%cxv>K?%)Q_`bO^9BZ^lk8yo$ES(*EE+nx->vYvch@pG%Gq zgoG#ROzbp2b*`ojF#LS(8%MEG4Jn%oK)!5+?~oEmtJ5Qe70ik8#s0VwImxlsa|+8X zaDNfji|jDDagZ= zA#^j1LkWS#S@%51)sv3ui@7XjRy!Hg5(&2eXNg2FK`*QjeWN*;{@E;5O0QuY?O+p|c5mwp_Rn^_#TT+=!avU=7{d zD>*z0d9#7bg#1=vSVKpCH3%J=wsVMw?VJH)3Ok4qEFT`bmN0Cm2jz^5yChUw0lm?an4mSt#(!Z}bMeWQB{u6V6d>Hp5R(8^~ zPsH7qW!Rqn6jNGTqoR&hi7`tme7C= zy;WlWpM-k5aDx?$Z9~pNvplHlWW-pPYE{yrX5TCioJqJIaH_$k|L8F4(1Y?enFUIe ziG+&=3e=|-h%C&847o{xMz<{FV{u{Yn?-SpJCQu}%BQ$AIo25G za0d~`*-^=a-#IUUc9lB7fkMB#Qx{sxG!&}EGlO9?+oYaP>7y$4P4KVwzfaYA&>CH1ob2UR;JE8HLw_F<2<4U9N+1( z^_1ENmcL$$>t*Pl3~67bBWLUp)l>q@MQ)srA{qfVrEpd>yJHai7?>t`ufj7uNpTe@ z&N0AJt8;7qItk67kN-*|pHkMs}ah(92jeC0p^DIH(597CxvUh_9u=3$bUV)=McR8&RN-<0jxo+ z&z@CLF}LDE6|)gB-W_i!2btRt4%oUKxWTp82h7j>I57EO43M#YWBKpFxs;)c%M%U- z9XTyHH(;0JGVRaj&!o^SidWu<18H`q=VqSNg9Pw*)FSua+5=VJs^kc8AE$#fg3&Ju zdV}shmPnNLo3+jnzAzx7ZSS%vD@Wq~#n@~NPQbn)tpxWPFCPq8=#x}A8MjLgqW^dJ zaHUc67|H!oC)3?5_Ej1EM8m35Z~_mZgA5*w+A};{ike^2%;tDQd{bJI8Ns z5{Gujd-4gv4x>Y(C;tMVk;n0zVhp^`^~PX?Vw12W5r5&s3ym6O@2hF)4BP%6rNZ{g zE&of{J`jgm2-^n^Y~*tMBW%y(*#TR;G+@5(H@{Q-ImUbKytR7R z#QZW~|0J(?jX!OX)@FZ)zX^qZT-+IO5e=r?zXLm%TlM;u_t zdBnf{lfc-IMdav^iWg!>P)m}A8D~UV6rdfA_|3nHvEM?Vf=}Rd5RAR#%Yb>rkBj01 zV~z&w*AyfQevb4dT$koi6vno}YdP6~8e_lgCWYUC8ROVbznPqc*}z_A2P~aU4|M>u zPHSPXeP3>8L8B2thB!WOFYJ=!Am@exZK~SU~vRqw9mfusCb}ni_BE9wc6Ct_8aDJUPqx*#_;juj@+F{`OF(bKt%+Vq+5ySOEQ=;<( zNibfX`A6Ir@$5?=M~B%H4y?Y8f&)FvlPhPv(B9s?mIHXX%kaQ%%Di?FoLaa81S{P# zZZrk#qI4LAmY%8vgv~o(?eUT_K<{BbF%#~;AMMYY19w8&ca3FBQOsXZYb?8iH98r= zl>-Is_#IMERJY$frT2Dx$Kd;MxuM^xlr-oxXNI068gqGW1Ctb%gvm!4fv(hHIpQ^<@{w%4L5(UKe4X?cfjaJb2)D#HTG_SW5`%Bo9I^C*m0ph!(WbTtder=rOh4f zgR3}N!8DQ=*H?Suh`TBKy`r;YAt3XoaF)Ex2x+U;J3QK$QE^Ut;x%QuoDw}zjtT;x zLS3tJYSlBLAiSc*Oyr?vpz>hp%ok%DaP=lWZ_z3aeJJXV;=>u+MB007VlVQMlS$TN zPuvN4iqRB3xmLB|$(4ysu|AH9n@@Y_J+rhVt8c`p&dEZw8(Fo)N|dOnLl1#J)&RS? zgIJulls7C~b~5}nT$n%o8CW;oeHs|DX(O{o{c0HoM>Xi6oQyF~_FIVxKEFL3pep@W zjzB?#mQ|ESQPZK@Vu5u%Gp(j7`N&zW57N)9A}aK0b3X z9Z{Lcixi%&3c*Svvee;?ELp?6pjSmmpw|>Ja6J%8GL>TzP&(LQ8H6gI@v{aldtpKZ9h@_WGl`@@-Av)JY7@H(Ume;KK`ZzO%rQxd z>&iRsW#izpYJSFe{-_(dJrO0&8+H8%>{_iq_qNw7ZyU8>weapF|Es1+jQgAT5KF~f z!Q1e3R}{mR9r@m~0PacO=PejOs|X!J4#idjGQ7q9Mu1^;<%QVxf;KvB48p(j<7Etj zbA21XR;6Er^riodMsdQ(8fG?|-SbW>aHDv$CHIxp+n4nCTzGd0FQCE<{#iQNsI{ z@HSIq@-{<*&P&aIG=O`I{I~_w+=#PgR6P!ThT9}tqW~IZ;3*fNB^iQuE4zPBtpi_*MZ&Lt=V*K9sRTK2x@E?MVcd5s};p2vt zPqp6h+JhzD-2v;?EWh_VbRQC+-~5ZtlkIi?zBjV75UB zL>_?J3{V5!&-gfr0Y27vOS=I>~xa{9=K-(8z=h7Pa z(#JW7g_1uwo&%==AHHexAQK@2lyZIuW6k^_xL`9aG+fOOy8FKa>IE-`*o7iEJPw%! z+-T^!n_!dVO?(*mW(lWw7{h9fn*E@0blc9{eiFaGu!zjs%6x#CwVembmxReyum30# z%x1&%V8XpPC?jV>R^<%M#{7!?RLyaw!CtvtjwP`(KQGNqPNw(7wRh z!o$ega34J_JSM~_ZfcsP?l|gKEKbO6Pmpcl_!YDR08>i&no$%Rz#`FSH*va?PSD=LilP#MyDa##P)wTv)$gQK{B&Rn^)F&|s2|HPE}K9Xe;)&Lo^mdk z@itWH3SC8r0Vz+xDbR8F2>}>zM0TX`_bLy3b_1+JAeIZ?=9P*2Ge`Uo)@kLKg$(j5 z_^8A`NNkC)e=YP{;prIGE#G1KudI`0Mwa7Wb7Z9Me-gevgzs61HIc$`{|0=0x`pqw zBz%i*Oogwc3w)D0!FP^=4;>u&TUdy>A1E)prIUde#Fr(169mxY;T^JaY*4ocIk5*S z+P7NsJ?Gu+5o6wa6Qu0IX(#(Ke39TNBH&XU1)FLGoATgvEKjEy{(`K~-~0u_9fCJk zEmo8hOkh2~=+BP%B{;u)oL@fPWEELoi`HQG{T#oTFe_(r4#4Hxx{zNUtNRA-au+S- z7XX(1k~tv7Vt7F+&;c=KzI1%Fr$^$vjG#lqd}0Yc)G!J5LB-N|eF=05pV3a7P5x zJx$H>30QqNdk}k-&vYtZt&sDe2G=YLlWSG6D3FZ?(u`&`Bm!PHg*3nRC; z9llK5iGiVWVH&?bg^@(fJky7bQFS4W;2@RqlTC<(C4HA+^U!&KH|ki|`*7d75qXTv z7Tc%UG~zvuj_7SxT+2YwsK~nUFcy6rzySU?P&foAGuRM_K=iEq2XGLow%eF~I|xhbK*$DSEfU_X>Jn=+&kIhP0r z(sKQEdovjDO}0it{%w|T57HRYqGw9CGIX~BLv*)h@H-j2_j6(rg%1zYN%{Chno7cD z!g~^8t^DaP*>P-R^Jhji{oNsdBnuB2j>5n{rX+40!+lLeBJe9G0U&w4s#<%*8fyj} ztjAqeN?Bctj^J#F3X6jGRkOGt1kJ(}rRZaXY8QGfnyk4-;S%kuQ&1GO)vR#N(GZw0 zv5LX~)0sLBioq$RLAN*k1-1+XH*hk@!z%K9{qhxF9B#1xE}{c`AvWW<+EZfxS@}tH zl3yq+%o~6ec?4X+aKY0>4PaAUFL=Vt1LK0ukCEtstDJa`(`lRz*}@u$qtP!brChO1 z>&Y@8ORdu0_P9{u$N;vmr!QMb2tS;5SWGjH$~4?a#nJGnT~+i1b)qHWI+rNQ;%tCv z-ze2cwM?J_@j0p#nCS zrz9QDY)5`TcOgG?sBy^2UXfEr!>A!Xox9me9)g4e{t(45*!&s+oGWpXOm0;XT42b< z{u^H7Fi&u?1xN4@oGf`7dZPx99o6DW%-f}N=%Vi5OS*pmat_df^%3iwGCGmodA8$z zW^kA;@R?b&H!0to&K^J0KiT7ar^kRqOH4q)@p}A=rReeZ*CczKFW-hMPfB+^vPDJc z?&irq;w}C%?)jL{$#+br^X7Ev^uKpM|Mkc2Z*e(B<(NbsN0Dy;bAdJ@=ZxTJ!2-o0 z!}x-xkWc<&F7cyED8lNxMI|5kNh);l-Sy=nCHxfIrf1p{;;`q-x6Snil@n3LV z=k|pL0Ly#-f2FJD>*8my(`^3_^=MyNfAsm%nP^{6sjd*H0g_ML;dDIyNLLV4`@v({ zS51ML;v$O7MbPfy?xx96gWw?u9#Et{&a`K^h5&R{3P+paeMyS&NmT;5J83}4mGdaJ zCDEgRQ&UDB!maonvqfzwB_LJsE$R-wjtLUM;>C+T?96Q^1K3M}rCD_VkyBfPc)kN7 z5J;AT)ef@+QVK5QzfCcY>9@%!=`VS_0r>o(leJ z0Y9)qqQu+=2TGxD+F}yK{SW|Qd*F=9Q5;A_PMJj&?8LDo{ba!`HB7Da3`?~T!z%|Ib1^zFp>D18x5;JRBlKgKBsSmVPofawlPdA71 z)Z;U}KjOw1>Aq5_To8{T|Fzr?js`(bPlZq;H`pC=K?MrFvhL=O)j#VBFc*xn2S@R+_~Yxd0~eeHxVGb%Lrd^$ zisf!Wi68cx-TJgTCJ+~Nkf%HT&M|XY<|W`dmi|B^ss4Ewzf*q?9SAEI^dGD~QTdNq z7=`ZcA5`$)drWy;?9Oiwn7rTJd|%Xk>=C>Tu9r*n#(@m@SsfXS$Q~SD3U!&}o~^>d znsKt4Y`a^9@!|lSG=+an3%-p7ns;2p;J|$?AcIcmlKZYsXl9yAT?H6ZxYR8Q;|f0i zG4Np_sN3ri{S`=cZ2)F(kEEl%;{1`2OsF<3FL= zAKkfq9J8H*y|k2Wk-Fu>iCVkffAAV5yH4_>{uI(~00ytR2UZ}xz21D7?^x!%wfc5# zU~!;2P#T&S&s%x{g z;fw-kg1&URu+HQCXcgF)3X*ZbfVwS>qjw$;WJ5l~`RmYJa`kLjm=x)p;j0_DdxER;uEGuR-S63fO`yqFw7Lzy?Na3iF^h- z>8pZ@r-cJP08^VylfV*EoORay0mpCC_H{QZEW+10UGqobGirEgmn+rHBc1UCVXH0n z0o4yXb0|EU)O8$6zbQ>nseAz)R0OKN7p|88MIWOuw&3q`FrC5w-SWr12qj-5xH4Dq zKFRy@RpEGY?O=fAjpfQorIU=LoVV%A+e8k*`)EgkFqAsw-N8N&w3hNSR6$W;FRgbKL_b^dhR0cMQVB&{S|$UiW#0X^5O1bQGQYWvCvFne$bPJrmmN&EoKDfq$eL@Iw$F3JhU*Q75O zM~}v%N9tzreN?1|IQ9*6JvfMPzci3=r*M*b96Qh-5P$57Bn~+oW7nt?9P5`**gYTh4VSBz)u_Y{N_nkwmHdHxi>F*)1JjPrzk<-?h zeSOfA*k8#IvHpSOz$_)t$9ezmSqHYv!N-J1gYZN)ayIas7BbXCAT@v!=u6vrJ%nB< z24e<*Drz$jwkRWa8mh%pouNw5SJe^XcS+_3K6uLQj(+JbsDyU48imZuSpb_PkSR_l zo9jUPKJ2`953~~Fd3nDYN;w0YmEC7#?>I)7y<_XRt@jYGx?o(k(mAj`jdnWWPgHko z*DbGRk!?IdFa|8#dyu2!GI)!Z@*te!7 z=7*M2{&1r+Nl2IQ4_}mIbzNXf!Z*L`+K;0V3HW$pxMOU=~BuovcBKAUg{sK8SHWK&At(T>HON7V9DEN#vD3 zUdF3q)nB*kXX8OV94YIkM*g@?J&D&l^7pap?{C|>l$Qr?aFEd5`nz4rXW&L$=RiYQ z<&naiI|sTvM$OYmlM~^M09k63u!s1t+0he8#;X@ig-`2Ga-4 zIgklq;3`OALtj7}$p0K4k?(zC_zvwvvh!np@48^r<46eYjQx561fGjYQk;R5f#aZbvokaWW?`u#8S#3isL_~BgRv;P%~gTBBHwfBQs$4JPCqb zx6{*+zaGjY9yf(K{*@g6O722%FQXcZqaCg7fjgYD%WyrI#}UKUOe-!KT4~vI4W8-5@B86bZOHU@5{y9K6Wez@nXSj$^c zQJ`SC!~>TYB92JT+f4 zE9{KEB?Wa02Kd(}C>H$mx{kLi?UCvJx;XBgKZ1%fD!6x*&vO9y!R72Yza?9L!4XQC zS=38?-06ciJu-Gw=7*;c_P=0%BjHtNqe;5W&x4~ZNZZ|QJsqX#%sej^2hTu1%5h`t zCnd%d+%1ic?~V`Z$cI)CgWWz7_pep=H!7BZ`yy@wtt!+ET}AYg zUT4Vf{>Z+m+a%o$aGC=@T{t|+fA3-t{hT4+Mm_~!KyRXzPP2!MfN2%0j$h^HX|c?U zRep`BRCwPCm>*&!MwAq6TrkKFSn(I;{dOY}h)?c_xzf%V?yvjuq^Q5@pGeB6a2Kr| z!#t;yq&55NB!;Pt@kQVnDF0eEeoKr?H*vb1=Rc%4B@aWjLh+1c;tH>X#Z8kksCT9X zQe>5Kk55tWAAXGpdb7$VL_~=eh!~KuWd1ds(4{TSvuKQ$Yp1+I9M(C z0hHfCw7_YJib)t_Byj`Wo&Z2$SmE}E{S=89qBurP`9y%h&CpA5Yj7#6%2r~JlF5|* zwBbp0qLr!)2M7WJ*4V4t=>a^ZSr=ea@;p^DAfTP4pf!kkniUWr$a_!+St(Z4!?$7= z6yzEopGZ#;@+fdoQp5tBkLAjzoDDnPfYmSl03_xUiIGb>A(8mVl3!nyib>L2R&4!o z*G3{)QYMxbPDV?YR0UmMM2-VR3vLT|&q1V${XYp3liD8iSGZIJxPC);t znuY~@DyJxa!4#Z8n~i&58$^$yEaTO?%i0^t&AZEtSMhDPyYnlCih`ZccTj}+d@zⅆ48D}I03YUC zz8kL$mYA(Y@W^|k7VnS>&I4i)6)2cmYE%!!OXG5;5EK07TZt83%^-B2o+Xyg7w-#s z;d#K$`Hfhky16GoZwdAlkwtD^*j*Rzsc&5-~DjGNDmZa@ZFRB|BM?nT1G3}QGa_qB92~R zkM#H>M?Cl7GU_r9Zv(pwep*9H%o$n!c3-yc6Z(OVSv^QZ@MBhwGC<>DHy^Vi-Rl7c zK&TV9j2W+eT=cpRMM{j~PqqEcANi;6zPTmV9eG#Ui%$cQ?DAVzH~GaICmIvh>2*Y z2PE*0L!s{%QCiY6bfT^Vk?_6?e}OOS9$>rD!+Q$gzKahR_)T9{ya!&?6o~broLtz3 zfxG8aT&dQ}kMmpps>4-i+=#rMfu+|Twe^PsU6gDJ_LRZ5>NgeHwkG|*c zf#sqD?_F%ZTNL?wTD&I$aG%2}Q_OFq)WW}Y!%~n;qmL(9UFD5F z`0xa*GTaMnmEs%l33k;D$wHMXGXGYjHDw3(1i0*58M}%@Y&YhdR=jdf&KbP6Bp2KS z6RahEC$#F{|7wuy4S`m{!@)nf;6iXQajD>5-iLPSEl7c|tk|ypUY0LV&@dm{LAaa& z<36?(iWygywWtG?Ou>yuP8tyalPf;VM+vvdsT`Zy@{b_o?o64H!X=W-9)4lGh5)37 z^*TW76dot`tJaak<^$6wTXNin=7?dE#L@L=KWhT(Cz&%j-kKS+Ejf&3lcyx{JF z0$a|-AgTt!g>S~$o$PSo;TQv4`@To0W9>`p&v(6yf#9*PRha4B89=vQCnzar0_}=fV23}-(#H@1w$=7j7RIanxRa8%FEs@psyp(5GHzJ zCiykwyw{1!WCVs>OCba1X1IzWl3?PyWEx%qcp+bsL!6f?zVyNiD*4$jAj(W&#I-Qc zBjVz#5uuDQQ*^{yn)K*OD<|lPw{abWw*H=qh$txoL;?{9t6!FU=(1GtQXL_TjX0Dd zttZ9yWI);fmO#$HT%H5T7`7Mu^n)M=+Z6V-#_kbS=s<=G))G{X@9#k6g4`ybRxa3R zRoG9cBoKxNS1`=SUNjsjk{@q;9sRoQIh?H@KZU?C6G${G{w&d#4WWyk7>QoUccymg z0sKd2LKsg%+cluzKMU|@ci0Z;^KB+hNHxphjx`g~J-n7wV{%rao%kDF>r9Q&@?iu+ za7-JKBWb~lRZE!k_|DJ%c_m^!vf&RpWkK^j7c2e`u?5?;=3Cl3;=zAt!>9vFXE^Wf zoM>n6ov!X{zI{YrjQ=^EhFdIONI!y~l*^;CzZpGA9_w*n}&103Eu8D;D z!=gXXQp08=y#C(Kocl|Va6Zav`Eus?P94*FQbTbn8IWqSV&l8*B6D6$#c$-{IGMiDC1jx{n8XkC=zNAJ*Yc?gQr0x^Fz* zkIePVVh_21RD%$1`ILIUu^IWwjd9J<1wBxMQ>c~&Hs}JZ02Q9S)h>c9gQ$t% zUMFvDM;IIK>&5_1xe)$y$Nhe{rXLDNz_gE;&L^gEIX!3(u~>VdH>v<+PTq8;E;w^; zIvaW)b7;EZ{wnE)BMcf;Q=a=P2!X2LzwmHT_iG!uFUUNhb9ZnHO)Ed2+?7_QCTT_S z2P}A<_*?S(col#q2)M8$OYW(WmH{O!tPXFAZj?U{B-(0 z0*=6d5L;k#u&;p)f2ZD%)%*eGwrrPcL7y0Qyd8@xh?rj#Yf!jTW)w({ip!ITqwUMM z$f^kp%w}`?VtIUNHM8S3v%b|mMO8y7bmsV2<;1*j|1g*Q?gMfj)`Q6e`CZvdz&Sv_ zHzQpeV5}u@ptuO1ZCncbNsHp+V$4UvM08rCsA?ylzXzZ7yVw=F7*h;*w?}O_irP+n}x|di2W#GKb#PjjOP2Q8VI|BBc7ITI*!qN>g z4~%IP=0cFHLN_su?E<1bmI=Cq)9p8`t6;l2dh=BU*x_h&SYAaI9|bH;NS3$$4MwPs z@aDS@8BS$}JY-Qor;$F2oHR|$@&)AXc(;`SNu*a#ioeq7FAtcrlOhjJPtwthS2@2lYe-D43?d-Yj{CLbx%yE0<#WnAT`WUZ@ zKJ9hors%UVC75iR0nJ}e)BIxw`D-cpYbht+Z1!v(hq4Un3@-NB0TU?hRpcyRfExrZ zy&7M$^4k}IyqC7&Q`?bCTtOdhJiq5d3c0;SBi0>ofnK=$?;mAEOldA}Mx3FN`E3rx zx8eM3-wPK>xgB}p7hR6C$&tbdDo;;b;_Sh~k92u}srVq-H9p+Qr=%IIg4DmhgaQu5 z2gF{c?s$~X!Pv$jp3U=8>Klee4R=?g9N9AU^^Xud*fPhga>Fxn5~Q<8;ikV493Qgo?kwg(I+;$X}1Z@pTZ7 z5ayNeqW*!Z7N(J2IDoXAm9j>jdr zP>wnj!mz$x%|6aU34A#W1K0~g_nIo$hpqI{^3e#@6e%LY`y-R0vZ8wQ@5xDBNIv#k z&TRds*1uaYw=tWNQWDOOZcq3ZZ}<-52e%>XVMY5-DB6F5Ve`GZ{R6$e{1iV zOfJ}-_dM_Cd0+gP*?aAEU;p*Lum3VoKkT%Kh3+B6S=b}#NAfne)!rWmzONGz=tCa? zMgR%X57Al2&gc93aL)@<_oLvHBY)>+;bdWon0F{$x4rb*K^=&FeCjmp-DB!@UGzqE zur6|=-fANUI(Lt#t9-tm%l#_%cfLP_eOw<|U)z}|tgSpy7r8~5&y5x3MP_i{VbY5m z0Xk{Lt34jDiFBG1qt>?F)|U5!vD_P`#wOp)*~3NKr6uEY`;>g0)rwMya9u@YozxS1 z?59Ww*Sx#Kg#$wxxmL4KPy_eFwVG3KWO4k{vHprLig|svF|-p2*dDI=lPSq zVC%N=7dB@3exvTI4)s^}-3iQ~vfCNxqsUtzNQxDBr;YGT@vRy*BY8z=5GCL_PT5y4 z?o(D?h}5`Y>Il!dl%19QTp-r&DV36L{X#D~ndFE#DLqhQcy!M$#V5qNj8bJqkFV`z zdh75G00`>QefxA{BmoUD46i3FhIup=H{(nswvvelS#M}QU7NMk!JTKK&D(FVVl(FD z^;{ZZmz)EZCd{vSndW+7mtruBPVccjB!3Pdn1%$+;!akfOokxXl)xw!p&jzX` z5(`IqCRaMxgoF>{Q0EEZnmOAAh6Z=#+Z!)oqhb@AA#>wu>awfyUPiK)5H)u(Q7lW1TA!oP{W~?uQ;gZCkdT~-Oc1Y2`Pgoi7Lk4`M z-~+bV*S1DeA3h7Six?Fm6y&8HcnDRHivdgJnQf-aSiiJsqFfCWJvF+7sL7hx9Of=%_iCJ7?XWr^tNLJPG z!MvumzLgV)`m6Rd50N8wBKd;Q5gOw~4FUw_>3NY*nMcdF4T-{ltUyiklKhbpFbmFTU5?%A9y6s2m4>3n!5llKR1eFbQ1(wq;H4mp26l z&!oU0&wxQZ$?ffjhl4qB2NE3g)CU~E@PLEjv-ZM+p+W{8tmOCI?bH_@4gm%)8MMU1 zsRQ5vFe?R@^$yV>4y}cYIiAG;BVf!kYArQUk~rpYv`KixS^r(R27fHp`omE1r_cKT zfzQGk4zl>ZGWQF3scD@%2qXY14B83T=vz50FZ@AnJBM?^OR!;`C-r`-01De37n3+D zzTa_BCtUN7t-`o$c{kEyfbLstNuho2h0aK+{t;6PF#+Hk-Z6)b-F%oOocawD zus)TOj^y`2U*Ilti6^R80W{UDAR3snshL7RJXN97lyB9tnQY$Yt(2lj{;TiCGUP8shg3Fp&a9!W2Yd^?CdO;{HJ@XJsonO*oO-UF5C4M&Pkc`; ziKZeq%b4|fid}@j^UQR_(ok&X{!sKN_A*E%zkUH<^M;O^8$z8bBLNcF-#tsB}jlHjK*-19^4PD=y^R z%Ns7PWf)afbQw!=F&l{c3F;)?JrnPFi5*rYjC;JGy|MpN3DF|6i237>CH(>(SGfKq zhDn#;LSS@((0Wc2@);NGAX3v704@3G@zVqe4xsv0P6e+mFxb1)!QR83({9CW#-R_1 zlbLpwNpm&XC~-duMqaZog7=UoX1bmQ4MAs`2%HkgOLsc*BK(ROj1xgtGZS4#-*$VN zF4APpwh*&Zd&TgtOJ311hyy0s?Jv)#85OTxW}IcHAzi(@Q_T1Y{Ae0-s?Tbg;;cpV z3Wn}%MFYR~Xt(|b)&G^u`a6w}h_fTiyjnOTC=jWp&JLpwlo5$#X)d?gIoaeozV)C3 za;8%m8&WQYKoa<+JGZ$sy!&H+`?9>~Ove4XA%tLUHm^`q_^HLxfp0kr8d%KE;`}E8 zhDdobm10kI65g0>l>bX}Q2w7$JP3{a<;eq4<$IZ~S%%GW@MEpRzr&HHWWYZ7vBZ29 zf5l-Lj}Dqnd`=6299j#4xTFMLR3gg{E}%(nQMJ36I^W7!`Ry~N!qp-j=bHTJ3uctU z3dgQ1wZmq15%R(uN%gIGn!yUsgXBO+anK1znonooquY>qPJc^C^T}t`s8IrtEu{oN z)IkYQq^6l~up8uK7S@C_JuMIz?`7`~@z{Icba>;6loFuXROL$R+ow}D0=H{WA!VaS zasP*Ma6g3lJi+vNg8jT{L>Xps(0hWZL*J{+_bU5Az8e*6)EEz<#!3(|Qs+QLk@Q7q zj}Vy;MU2H^O04LJ)+PC47FzO=i9X>7t2a5q>P@}Esu4@M^hz@75d9#+zK_1CJMx6` zPKiwJTUj4M(*#%kmCg~X=iJ%)|fvnOwaJyk1}lI!D!9VrBEOZw{`>@tPS??rOAN$z#foDb9)*HW$q;&jhRe{+6Mwivz%52dP1BEK|;Ts&lI7!>s(4 zuM&N(1V4~V^ZAov^lN*b5lu6`T7hk^2YNP!%Ak6yu9yj$-xjA2BjEmr4Xq7#!u=n} zX&OQL_Fzt9sny*HZth8rL8J^t-bfauN@acx^mNb#YbwGBz6|MRLR=Cwq{|=3GBkLr zkQ#fz&>QXzNFvPrc%ya+F1{nGbag>D{)_v9+Lv55_?{kEyV)$*+;z1*YvZ-82Z{f! z^JKMcIcm_V&)QNS*;E^TZ3x{Te`Iazr&$aC%HP~(d@TOXMVp2|?q)D=LiZWw7)>># zu)8jLo=6%;IdenN@^ZO>94}W15x+SzD6pH{@8C#GiOVPe8DgU!M0TDCRUy+=$WTw^ z`Bt1@Xgj-6wPiQq+e(5b2}3m<;xGdONn`-Sq_5MlY(o|e1r*N?I`+F%ks7E~y%5Q( zC59iR=GQ|}&mrAEwYFzHa+#cx{gv0NcW@Ec|nPZMc8JYaB$G z7m6ekPcvD_MQoL!k{+Foe5{Tvg|A$B!PJ!6!-`F3x2;zPOF91Bd;$t?mQ(cC>87ZP zfY+KK$rD!S0xJn%j?tGkVaF|%&L3a)gP|>@(19*ul_?PMlm~s#3kJ?D^J55>WA3mg{TRhF!giZ zB(?a%3{Kye*FKAo7Df@$9u)gB3uMaf5wXa6F7grh;*03)oe5mIATP2n{MILME?Lbv z;pehp5%XCF*wMPI&i1MK{`Lis!V|i*ocP!X(jzEFB2x;Jqae&|Rg&z5mev$2!MEjs z(mkb=Il&ui%21J#sk+*)8AhQ}hKngy_&PBJzadAsX4BIKnQ`5Do}saMc2reGzh_kW z|7pHv7&124!}J+bDk|;oRfv9bGGAOp%)1rWQ2X7#3HlbAaxfAGW@?Q!L67K6?Puiq z;cU_hxaA5(jyx~bi^f9rVsWAUrtzei2fN{FEsj5fr8a)Zzr|1+@0DBaW6Rayl*pPm zi7lS7!lHi*zscHy#pf}3&^}gTR=#MT;0uv7uO+*OxB+6?!S>AUbCE55#k&vU_JvHB z!`K^1kDWEGRIQfSXPPgnJKV>YMvPVo@h3l@**#53N#g5JC%2D^kGI*meBv@MO)P)s zA=MZ8y&E#x`Sq=uFM;s`E2jw)|H^X(BGXL&Yxj1d6aI@alU&yU^blU zpJXjMqAU08+~j7Sy}lc#zzEhw=Zez5>4`UaL(!9xIibkk+<1d{{wXxSWn4|EWC=6h zo!6XKU)ht;vB|pjtILU2Do%4~v}sr{V$)j@&s$CJP^(D|lf^Mt`m1@4Hc58PZqkM6 ze(eCZ<+Oop09TNv>PVH8^_c8Qh=Ws=aosDvg_K1oek6Yd?0)v z+lQ|L(sSo)*b-n(rbm|!n~%#d49^eTi8*d+G&pQ-1_WWhL|>#%Okn6mbMdArnonl1 zslqok7cEYW4H#(v>+eB1%!fycT9qlXeXv2$wak%B=p6~OaCP}{W<2WM+}gGw)1!6j z<*p&;x0es8i~3y-Z=%u{*9tpUbO=X#Ly?N)Hv*AQU<3n^eZk0k4*c)L{U#VW6pZXn zvZM_YrbaIxwpa=y9U$;?e*5#iaQa!D)tqPc)a^-D)1>LqwqY7Aoe4!h7p}Qm*IKJT zrOB%Tkxx_odCP7{b>;me)TW_oYV=-H(5R6%+kgDr|D&Ev?O}qLIDf!a>zrEZ>wZ`0(lOWs;-wOW}{;51PxsN9PKmcEy7^ zehE6Tz8#0m`Wd^$CLCj0E(q70{e)&#SEZNGZP}y_O&ZCAN>qJl{Y|cOpF;g@Wc9NIOE5wTl^8UF{QuI1`~W4`_LnF z!?6$P5UEI0+CH?m6Z4Rd;z-`|iHJ@sO#DXKK{TZf>yXA(az$es8f=Be^;4`nTU4Pr9`0c`th=Wp674noDrx>9<6ER_IttjO$k-bB#JP*U0dH zTBpDDU#GOy%xRNKhs;PV)`=XF$v`G%vF=iI*fbAn7V9c!v7G($Ja~!y18~n1ugo8c zS?T?AFQ2t*%w}1pyl|s_EkRW;CD-n-oZZ0(7=N;;P^L+wMwE;)8TOES){7(m`x;>u zIC4`j#t;}-J<1YNeU{UCs-!RhS2)T4resbAL|w|J5g8$o478b_mWGT3?pi;}gjdz6jeSmb4-<-+_%4gk7a>yOqu`o25`wFv8dCN}V zj)lm9w2mgQ~Fp7@FUL5qh;558#9-^hHWS@r30vt&TY?y4e!JW?IFAlhOos31>M8FPvc1 z;op8|DEGe{;*7kY6MBf{(CmOajvlZBvZRarzb=1$toYl^3Impv)9lTD^4Bg${))nQ zBY)i|_(T4ZG-Sn`-%R;SPze)quA^V5-P;hUQ+!10pu@X)L;xf z8sb&89wdmF2MJ<4I49!u3{|tlD{Kt1NyNuCh9Evh3JZigE0iK`$dK4Nm@>(KUkb&B z6&j%jC1ASXVyB>c3f`2x)j1A@NLSG=<{J^q5jUM%F{SOSN}gdvEmXOkX-3)pr#Zvn zPRjD9G)I!MteJQa561+Blx4IFc;pZ~oqIlF(=p;*RH5^WbJF6~uX@F+dsO%{#H+T^ z!U9gWgg_vjPG6<)sxo2n0zGtLzu(}w!k_1WjOPd*L?@ZFUCClLM=x#a`qGtl`aatkUCB!ls@ zCAYN9LR=Z&*t-fB{53;XX_Txon}R^8Bdg5ip+Z8-{8SfvyW{kPyWplqFC5?4mOVAv zJbpGo1&7qNm!GP%xwX;C2#zRX+bZP{`LRQ{Lxu!|GWHAe!mh9e}q#7JSAi&b#NB1rEtLFCB7yO$yuMb2JlBJ27~0R&z~~+qdWi4@<&Ua z6o2&8Lx<;&j𝔛AYbN(bI|l34ioO4FOR8cle{F{rRK!wc`zc#GXFaWsqQ2u&)fp zAsGfK09NFBSCeS~hvZPL+HJe$)Kz!+!ehysh|!44B#j%4NfMe3p+_9ZC2ctjmlTR@ zN^wbDCRDw{C2bIwgv}tB=90+h@Po;p1tZ)KvmrT;j>B$ca!K`@Gr1(JaD#A3Z9^z5 zCTU80u20uY#U?*5CJ9Gx;cDWBJ@=nlb+GObe99lL1Vqzp6SsI7wh3oIzjZja>6Xzc zwyF4Ij#b3G*QFD3orIr`F>KT6Z@@Nv@Q;C54gZ6JfjeV&FHZZv&ObdqY+(Ne=b!fd zd;F7uTK@cZ^w$pmggy`s$>^^SugErRP^R)4{>f2Z&n2`31Rs}wTAw8qh2fuYDusU< zpteRwp3+&jvl*PS?s0PJs2ZGqf~fTJPra&Y`_Xp=uLJm}2Kc8wT51f+F8_29{L>X& zSd+m%{koTZy7ynOPxVI$N%XQ$NE0dci7qBCW&66?Y1pT=c_^nH&9rV?W_HTY&d^K0 z=x|R*7`%&u*5#g%YBZVsxu;7qxu?ya%{`@iH9%bo4@Ld-q#yfK*FIV5-gndbC5M0d z3Y=Yvf2!!^pRVi2KlwH}SOX@hu4r)n$?C&Dr4^7IM%4g+5 zl|f*cYcy9J1#c=en+HHHy}kgI-9_j`iBAgHB95HLi-`=BXaZIkK@J)b$-s?hm1d(O zCFEHz`DYk8BclzU`tRY%KC4q!NTX}Ix&BZ8ZjS0B^zD9CaYx|&ZAI^`bvNqzLFdg9yuR3>`giYoX?#PHNFk}{eay*$xHxRVDH~n_L*NMgTV%H;8bzngT^_gfp*B-za2tW zhS$2o{*jpx7nrNRm)GKqIJXl0!2Ya7Oonge=jZ;!3W_Oa)tIOb1G!zTL#XEau(+XrDpGyvI&D zvpyWSzl|x<{zdM9O>PilqN105arygS{mcFBYx@p)#1$ANXoK0@+LPMh12-nyk`IiU zEGjfW2}+p^CFos$5|jVx146Dw2}->wCFp#k1fA%5jhKm?%Z**B_**;iXmBUgpa`=P z>owg#!eKO_sPmw*R3Z7<<@KppX)5RRIztz#Q+R#1ztN5g{u9>$Iugbm|L^5eVMLE4 z9xA(Mmht~SVDzK-%5ACrGhaP{ZGR7J!3%8s)hJ1SAFAHuyYUpLx}2Gm2~0JuuZGl- z8fv$_j`#N#UpSl033F6Swst&hr71muVpH+{MzJ|8U;3UcXetQnO#)$TNX`)30lt!^1t2IDG{TDP3PzIlvs{8@EY+!L)|O!Em4m%fnpTLQ zsll?$9n>;Q6IJL)r?mvQkL3nEhHD=BrND(Sp81J3It4AZho8XNt?x)?N{Y`8S8+Fkt*k`6X4hSA;PtU~Qu+3zr+mDC-CbgNiU8avt;F5n*r; z%n)IIrXC~3d@HR4exO&1`SE8p0p-lqpP$GPC)> zS`8-3{9P;{SmXboD3k71rfgt*SpJnL<47=dbSWjlI2vF_J~evarTyfX^PhCk4J76; za?C@92g_6ir$w2Jp7s-E26R_w*K}rpD3g{#qTkC45o;q{bK_6bk_%=Fi7kdc*q4T}|snSx4={O*Y5@m@+$S&$fr-k{GrKOTr5cK3=Z zeXX{{*J@rS&Vwx@z8LP=-&zyBm!UV~p4*V87!eSp?KOROq~C9% zR=HX1d+_3KtqGVa@X$3GVG~@dD+&Pn5SXi1NI2hQ+=d$!|7*y{Ktt}M(i4# z(T8b1FN?TT`Pa`S&^czJ&iw?x*q_}5M|5wtZg4dhQbFy;=~9oSh;9c;>yPPhoD*xe zy;fh=S=;t<^J>W8hgRg(HjJ`C5?sN-;Gk$XQ>V)8E52R9uZcGT#?#1FGi?8@>O zyMY5=qsu-cdeWv%%nySFj5R+**~6bN_#B<`wLPF#nF|Gutej!Bl^>R(k@e+z(dGs%D2BJzn&qbW7gTMjHExTQBhP16`eXZ% zBLoIYW^$dk*j(F+%pL#xp0mZyMUc=fFlkYIK$!( zYugt{!cnOS zLKeC4TNfZGAQuCp5zhKK=4UN zGoV{bZecY3TNYd;6Ict%yD25X>W&3RSk+VJFA9*D-CP;2S#r1b8$1ut18rmLZnoRa zlA&oi`qgo0u2d2b{C^R=Xt|L12a&X9c0@O*d@WIqrE&`J|sqKRF6MuNc`H$%7 zEv4a_EVUf(*L1<*n;tN=CV}~7T~c0sS}->G(((y}trKFmxj409Nq?o!8=_4 z*s8HHryA4vE9|9gb|f_DEkYR|2v&DDH3!D+55yX9#n}vqj6gvX^Jfm|8w}{c%H9Ee zp%!5`HKHO$w6&QK|8TrqN0GG|7f(GU^T=gRXB#!lN1PjjI`j?=JrLlv zu0~Vn4-}wn$F9R8W2v?t8SM8zbhjQfsE{pAcpH5~L@qTKE)N1C^lYx+W47@BY^`Me zb}N5Qh~~H_(N`A+tWZ( z?Je`KGUc^-ox?7u9ZP&SbM=K3kn?>v-JvHAf?Cm)_wh*7KJbVydDFysr0LJK!SKXmMIFOx*jaC<@te9?4`9qUO2L_VNw0xFhFg%4kC;i-YnN4X z7PBK1y=^m<1gl?KU<*G7s@H7ieId~V_Xo!jy!?+y`5yZ}Sgwo;qQy%O+mLf@``TrM z+BVhi>aCvjp?+KS??~6bU-j4bt3N%Ya7P|T^?Wz&qmY4ftT~^n_uaqA7rvP!f(DcX zW8^Ccc>d|tvmZ-W5tFo7UVa|Wo~>OyP-l#XAT>%P((e5M1jTNtd~ z+KkR^EsL2rQ}2<@byB9`AoY^{7(U~sBBx}8^TJ>}_N_S`kRG{A@30))PJoLLD7^xI$ieG4C%X!b(&yEc=C>FfoJUAI3C~1q1(B z;?VNfaSLxR{@J%qQTBW*KzEVUXK%*?t4SgU=~*4PU~-4ciDrL5-h5%M zpCglc<)_*FIbC_vX?ukbxH&3TPCmlthu?4@ETnc43q)`oTv8P|8mp! zh=EZUOaVbY>#zQ^6GCi*?>pO|lWkxggVoMY`l)C1Mt~*6s-+^oYQn9ID!*aQElI0HJYlWNad{PfVFTm}pzKP(w(AmK-+rXXSC%bAb>{ecvw z6YHzWFCXnx0u~@w_%+`NsL=7>^$To$}Mi`$!o}59>apcPl=!u z8NAusV|(H)uwF6mPb&cPa(ZjO@ggyXf&bCYhqm;GjeH>FTcE@Io};xsLlUhnoO7 zStKR|$88jTfQI2NMM5bkf(L1hR%~7PWf#41{TPy%eX0V1(yErU9Gq9G*4eBaiLuOG ze3+f7D-hnF*TM}m#;~+Cj-`!MD)`9W0!>KXs5x_N^0i%AJrG^)f9b@DZNZ+zRiYqR z?sJ)$5;Fil_t$ZiE{UfdNur6rdkYD1btI3D^yh%z-FVyP0Qe5Z9w-+HbX>&q zburNLcPcd9k>8h>>Nn>8%Kf+vWmO-}H*2l#({P1UU-)sNO9f*m-|$=Uyi5Pekvgte zd52T2Zv~eBU3~8a(aF0*D|(tw64#j~GyzT^5RMtN31WlX?1J2Mi`-xmN^*zG7Jdz1 z$RW_my@b37M!#Ol7G!<#1t|2jeIO%b_~Q~^+aq*27M*d+v z#yH)(6yK)LM?3uE3(c6oo~GvHk^D*(Z^|%y!)W3{zTT~?!~EV`US-<2)toNX8DY7Y zvnjtj3Lk3_z?&vpTlpS-gV9rh)d}BCztA&PI-qz%UH~L+`j7s*deP}(oc)??A`tCz zi?{PDaT+++Pg{AbKF~dVNN^P*?vXI=Zygw8qYBBy$aWw%_yq8(Kme*HAq6ly+=wz8?3jJ2`G zESQ7^W$@nzo4rIzP+W-3kq;P`{lDHfhL_9B>k;})3-8r-B(rP7Z;YtTUsu@@#vntSkSccJ5#4mp^(z9_km=2!xaFFvWHr zv$qz{jPmgAoZ2;onsrXrm#yzve}aHFznjs??RJf-@}AA0Rmm zrU+ZK!&Kj9s*{OnyWVkfD(5tTaWWFMYY2?n8rKpiw`N_r0Rr3W>Zaxv;S*L=kb?PZeWMab&Q@u@Z#E-Hv^0 z$#Cxfy+=$OK@d(P@*aIUIu3sX-c|48RK6PI#;lm|a863Hn9rJ@MuQH81_ezm%*b~^ z&hO?VCpq*bwBlV~+gEc`oHmKe8`$?x3&k5=3U3Ehlk(_F$}mo4`KJUNn+uKWn7DMzTkM zOJHI`va{h>xPB?XvEkJ;KnsK-+@Yz~u2hf23pFNBu5Uj-D=xTcRXSaU^5DZoETmLs z7ELg;n(sj--Q)}JV&v;J@?fknH&p#M-%YwjtG-?S>AiKS3K5zh287cU?y(7HoRz~h z#%-^K^4IIUxx3j@O_)tZ|Ms)L6tP!Je;q|-reO8)Ly<=jF}2FJr~>A9K3HUgao-u8 zB8`CXQ3|&~w*1WjE>=q(txR(MNo5H}&})HCoPj~ba1cuMCAFQBm8Q>MG%fB9NVL(==0;B!OypN7ibP7=N75CsE7 z-jIx6y?xPe1Cim5T)|E9^k8gBc05$QzvXDw13=uhsXl)#SpwBBB)))Bh+pP^3{SOP z*?>z&uDQyvdi%on9WYDkZl)2%Fs^0v!``wHPByaN&R=Fkg||-P!^!%vnh*BvT%xEr z4?x^(VO#?eu={|R!(oZN_zl?;Bk{;_7JFwXHZ_k0cUC)CwnJ0iN**g8bDZENh4NBW zxHIUeEZn@55$~0rZ@^`4sQTc7dqR=7g$f8YdNRXdweK23`LDv68ZdF%Pwl%;{R^KZx^DBgLXl5v zpRA@TxTBsqb<}bmOL54zs;>OJ%B^#1_wD0#Kd9&s-SZ1dj**8b7MaY|50vc-#1{1g z%ic>ND#Cs#oVYtXiL>aUJ@PkN9anwTm5n;z$QY7#3Nx%*x9)TW3@I23T@fC$SK?2E zl^-Bor2L=Pf?oP-+D$Y*XF3D>)*i13ThUHFE&hGHi2-dlzuXfiXWna#_ItLf(g4>B z7w_SaVEF`cA*bLpm%1JZ&w9>LaPgqT3B}BQ4+pcSxDt;l7M{>W5%A*vtc4?aJau^> zHoxa_aJDD$6mamkP+@W*2Rj!KJevUhdWY87*BUB-ntxZ0mR@}$zJ7IAOSKi7ngeGA zN_4y4`8Jm@NCzGpbF`(i$#4eaAnfbyO+#c2Pb)}c-pwbl4Njsi`;XnMK=|VdU-%fh z(N#BQLaP;P%1VxbcMkX-duK>p`_&V<`P^0r4u)gki<>1|DZGHIOAl2n_-kSdFM9Na zg^NuI(ZZM?AnZtv(k%EMv#F|1RlVa>wJWfEzo{k9)UqSFK)+32HM#ID*JM>Rotu`2 zOS|eOR%%YH7@ibng6vsZ7q*U3yUD~y*lu?Lv$(1L?VQAmpf);D1M^j7)XIq$4&!F%=s*5UAJ{*zWAjis#Po+otAx0%*sLK&^$XfoRGvV*`P_BDrcJmP%)_TxNd zpb~r9OPL5Ho)``C83b>nk{ES~MqQ{;8$>h#3|F}q4&A}857JvP-jVIN_a}bA8#pm9 zF5PzcwHx3(ve1#eK4igIdGZ#Z#`Lv4M zwpqklDWUNydowid1ui6|>E_b{a2;vd-2-bL*eF#iTS~C>uEJhOTjeA zew~vzNC&AM#_;WI8R!Pqeg?Joat3bg@TLD=3)zWFX~B}|Z^ed%Ujj3T&4MBomG?Si z_iPH4y;??P>yXO<;FT*O49b{t{G#Bvey!gr&t1Ob0)LSa0z#0qmH zERdBXAO#m9rw(Rn@NOypu~2=qJ+!;Zr^-UW*u zP26jyr*~>$*!$GgTiQlIbxQ-ED&5WE43W>*O|gEp{ObiuTuPBZ=dN7FJh?m&-t7zJ z?`KuI=;J2p#~{C87k?I(1jjw+447c2PT%ZM*)F-=Kd)<|bdTB?5!IFvYs9hyaF;Ou zvUIa!XR@5@EOeN+dQl!Akl0Taez{*5nC3w=jzz2PTy(N{8Nv#qKQa^al*izqqqM(xKM_r$wsAZ$m|J2^}|fKE4aZ?Ap&qzT`C} z6FP|yjO3P^{%>MjPUo%Y#PUG?9^{LB!ksf${)I2ga}BqFuGMC?oGV{GFfKBNfycPE z=Lt5Rhx>1WWp7zM&zUi7WLgsISTp;|pP?V^+?8h*&RsM>W0O{FcOqaQp#z;NFt$w- z6gp-rSw9a{z8MJr{RXp$+z!oVeIbv$rK}yK1Ye%!y^+_B?EEf`wXyd@g z-bDms-7I=l2)!ynL8pBCO?MRhwIS%p%DSh3DN_xT*@H;nL+IiP;eX8ym@j|+%S zrA9gxXA!*Li;wi!E#IWEn0N2NB99%R|EAAYBr94FzOBd;X*UE~xr566bz&g(0)$<{ z;FEXtYuJ4??a!e7QmsET#ve1K#2hO4swO}k$(&ba^NY_8KAURO@$xk*Y~bT88aH#3 zykoE)nD&?SAHQzyW;&Ta`*FAzQ{Jw8jKEzQ_l7PQ<>C7W&8J2u{pANm zo^V%A^|g(@6;fWoTg*gbdIUFgKK4V#63aas3U5!B{Yp$V_f7EqHNKDiiSzv!djw_$ z$c3-1nF=_WG27sWYOBiEHbYg?enqrkmRjn}iCB%y#hb3kiA*iX!w`$33Yuq6Ol+Mc5gWi@=0?G#BkC!S5_uuZ? zQl^H^dzY!55kYuovM@t4W?Ruq=0Xf`kh}!z<{Mm{PH>XqE1Jx`pq=RU

nL6eyfD z!%aMnz{q*3u(jsSTR9)!e0IE7I*t~9j%=FR39HN0Xg5c?v}X`oTvT+(zF?AIksg@p zIrH#M8L^RIy^pdMcKmwEr9TVks(}8r1gs4O*<*~1kCtl2Z;1vV|%>Vem;J-q` z_n$}|S6JsH`UbU1TMSQ0fC{dH4omRRi0>8*`g3l z7Ek80R@v&m%2s-nzj0a)QCEL8m$l`5K9@6iUz$%N4=-U?a9Z$74odfh-%*XRVSeqS zXz^LMYMV_8vOP%TplzUW%iH1CAqz!6Wc#5_LPoStK38LrNjy5;P`kNS))p%=eZJoN zx=ez23VEm+TR)GL;k}!CgPfF9218c1rPS( zVC*L;_as??jE54sTin>z;l&z^ylVgHRbe&cTtUpq0@(%#QKRd>`q%e!JPx4!jwhz% zP0qDA!Bvl4X(0E7bV5D}4k#KD&61Z0W{$DvuXlk`b5SUe;0g*pBo-YOJYD$wo#3MH z{gr?hsD$$svEupPb(fsLsb+&m3;u8mR1F7Le7f;pT${qOF~`<+`Q{3is_feae}2@A zspUe*F8l;bGEIAySy(k|wvx%{^>8@H{?mEFa@yXdX&lE^Mw<+N`_uu2^$vb>J$5Eo z<8}y6b&mWm9Bi>0&d-w3s3OF}bi9YVEcXk((ISAtQs^51r^l;6c*9h5ZJFI8o?E4pMKg|Qhg`e_Eb>|?qTi;FL zA$xh3yWEL0Xm@b*EVM^?>W>CLw&zq;h`u^CS>@6T5Pt`I+u{jEQxpws9_?43`idU@?&G~D4I6RJ7< zPJ{5HCH!b%*xURzq;4x-!vMfz%0T}hiUov*0lD0^DWYk*_WE2C=@3j ztwMLr*)?lhl5;2|XvAUpE5^KEdyQEv(JY?uu%Jd8CN`}n-6zS|x9Wz_*rh%DI2}}{ zS^JpycDEYUF#8?Ucn|+;qrh9O2Yw$v$BfL^RzkUGLnGi@N*vhg51WsW>vVEjymcv) z)KdJI@IKJIS& z+^^AAE7Gnh6Ng`6l!5ll|A0=JwtQ`^G-cLi4H;nqim!1R9on-&TC!-t4Bi>+ot!+V z+`#eincN*bdk!098T-il5_|!uyGZ+M3Eo2_J*A|RykDW5zSvhg$u+#&jXZzoEA(2t z%&~mSI_&dEal(F1NR&xZ)rt!VlxVJH(|4!dd@%E`ssC|m>NEK-&A-PG@V@g8vDf^c z#n~%EdoTVs=l{|b|D*Y@()>@(oc}6k{+!UsKu9yMIyO0|g%YZCv2oXM_Lc5tq7n_Bmc0(rvHnNa4i;s1go?y;JrpSN{$T zou@s{pE=lBBerdF~>C3TV=nH9(A;Dr8`5hFz=obPl zbuG*ZQV`iu9+>EIvJrpn4=H+JirCLQ>5f|vSokmX?+$&qKvUm`KS9Ut3PXf}*$;&% zQsI-lR<3KpSSS7YT|jaj8@RIO|2t6?)4)MeY$Kt<-{9zX;f^133BG- zqJYcMy6bRLsbeqkJ-AlE<%1DFyktX3ABXqNuETo(R?-*Nxi*~L4=(@L&hFc&A9fNh z6Lu0`#(vK3N2ZZYASa9uVVm?7^UM^Zuo)?b1GuU4;lecOW=^a3 zT))JMPR3nR4&+5?1d9HSDZ5j1uK@;Q1#4U7pEdaauA4d_=EFT}ayPLCqc?XHW}EX$ z((iy>mzI~T_F$&RXcQ|LwgjH(l<$EHbc{f4mROM+RU+|ikYShih|5QL=um2o0EPb? z0+61l30d{qEKhA$E}=RIDkSq%mS^ev38EB%`S!2zE6c>cGiUbjzo3gqWX_Y(k6hiC zze2&`g;qKA8G3e1wBUN)s|%L!ci|AkO0>uM%#_zW5({cXmv_!(U`X}P<*s7hQ=Wty z7^%ib(Z9HT+n-Sr{h;3pIqM?_d-?!NI!`mNKTHoy)F^-3hrYJksU%bQ(a}zU-ifk* z9P~GFT5r;{8(7U~(Tkio@5Cu^`5T&g5_XUf{h=n(J&SH1<6E`e%Gz-PBbPIbW1c^4-1Ye;{8U1(7p0$iD2yS2(Lgix_AQ|@Ej zxnvSmsxt1-cJW+ZW8V9J&L?;s^9cn8PP%BK_kSIAKX+SpwaT)nBebpWl20am&bQ-N z-~hXWvS<#-06?+D%4|v(>@%oSG$ha9B*O<77}oVFSW3xa47UBI-n{n3O74iHB!pj|&;^uyP?#BSWbbGx$O!m3VL>&_k&PZqI4S8dM#sPO_m=Kuiyu^}pI# z|At=vSv_Ho;9f=JUrjYmB5a{Bw`tQ)Q%lfB4W@au!pxB;-eN9@gEyik?d&wSI__mF zOM}Fsx$t<^$zY5|;$>XUmw)VmN;K_&KDRNRjAC1ofR<;Eb{0zx{JB|mzIYa0edKO; zo(AdaWN^5)TKL%HdMsv$)ixd4~jZU84)5F7f z`+*Q$jCmjX06;3!lHC5QK5%5`tjUC#L~|xm$N&^)eH1tfNMS+J`XAbytvQ&>pu2xG z_@J4?UYMA9xY5&JYU;GAfsJPL+^RFO-C3*#c46Z>1Z69WLv!1-SYy>HJ1!_Oc1QAa zsTJ6f(AiBbm0PIqQl+xxR_;xH6FzRF=`)rlD$0bZ%sz`g-GjVxxJ9e*xQk{9Vf)qf zDx4=6(A-q~Zv2pZD+WRj8GV((4v^D4EjhF3tbK{6l`g-?8Oy^>VyQ=quFAuhZtUa- zgU=Aad_|IRl~S?Yg(A>7^5VeflWMIGf934xXu)`OPk4)-XD&0<^n&K9!*!39n?rLNLshVU;u_m`Tgbkg;0)hMaa&17H>{cz|bFR*wi@S9nd! ze1ae^S3NCLRtqBFBSH1 zUb?&uGhx-t%uZ(->}mp62!0&tV$C%S!(Oq2Dq_XY-EO#jNdBbT>2CWN^uo0Yo#Xe# zo@HYSEv|kxwH5aztgMYz=RvZgGe(y?ZZrJPe(!=u*MJQ?_5@R@_x9)6Cep$<^5=bh z_P@|wiQylNL_z$)hckgq!zgk1U-7=szk3d^dsV*#e+$0@>`|$BKd?k$oV|J>b70yZ z4Ml3LnLL9jZZ2)DnP?tHb$L(JLzlN)Kfqn?(4#!kl^Aqv=I$tJfWQCv0?nQ_FH=|u zjwo4YpHH8YE6lW*_5*#}57&I!pcRFghqL~WXQLZJ`!m9KM<;@@Pano!f@dxA-6@3k z=&kylKT`E?-5KXc=exGE63+Rq3*l}!-vvts0Q|n3sbv+NUye>}Pzd$y@(g8?7aLq@ zMq)8Wd!z_*w4jb>tJ_!VeNj#I)d%fa8|H5QJft<)?;(SZGdJqo~^5iO*wT?^Tv&MSF#$X`Te<>HyV zn@ltGV4u}nzgrz!it4~Xf)CsW5M2$Z(rg z8|AD_X@9*O6m(9&cavhg)#9SbW&l~-CuA7=vpKl{ir6f`+#|r;V_)~Ofc@Kux4Es% z{4#FW3wBi`^QT8I?5e;Sx)AI*(S*DcV?CStgVoP8oh)bBod*Bd^S+v%F8UzedbW#7 z2zRD2AfhFFZIn+tB6h2r>*|klE_7 zAHvb;5RM{#XHv}=elM#E*X)|E@s>iuJB2;PA9R+c9;)<^xDsSox!1m#?y`8ekOSZ5 z`BjW&cAUq=IkG>*yrmC=gpKff>^(**oc%NjG~luGNibBvk+0a>al7RY6pf>i>%~0I zlkR_g$U#0Ovg9m(XESvO`Jnd!%-vu2n32V4%U$OCt>zS_jy&z*JzO(d0O4D4m-YsS zN4Asb%J-;_eh>N3`RnlO$G0A2x#sasOt=Z)2VYxAFDwEGjo4sBF|ylNGDM6G(8*h! z=3>P`7ET5P*?-#KEaXU$P-WEZ-two^YXX+I`7t|HuP2Nes{+a)c$Kigbd}KEs=gKH zn#Z#X=foEbO`L9OGC3b{My1@}VNdy1E*llzeZ0T5XQXe%e<4?krp@)OT6SuB|IOLg z?P>L`n8`=qs_7Hv;AZDrv4>fptn}~ZV&x%^TXZk!eO#-|M)lp)ZRTn6aiWy-t?F)H z+pqY9XYBdx&0WV6mHB95jf1~FAR7)l>yTkwh7s>mapC5ymM&SczZw(CE(BmWz z+R#t#9i*WX)sX!t4V_Cv>>qo{;MHEOa2nuD9}{o6{h0=$~Ncdt(k}|d+6U>j{Dj7t4PfIgn|LoQo{bB5~8gr z0x7+P-PR0;10HJc;OnA%9@gu@&x4TFqTvpHtZo;WEE-4hE|biIt%p&m??SMP{)6QG zJS@C-0AQoeI|S~Z$XC0->D3+v{J7Q-{`L+IZ=G&2t_t4M@@2fjxCnuP!$;Gd;8185!oKJiQZCSCr$Uwkn_ z*>N5nIV;Ld^3m^=5`nHF5cTH;qL<{^ze5&lb0uQe+cM@2eU$3Wc=g6Uf`IPH2SmXP ze?AWWyijadp4c#Y0;3qM%`^1xo(+O=rG}p>TxW0k4@z$ArGk!po6yws)kH+$F6u}X zEm*D3(ZwZ1-EKbJiu#BoNyqc>J(|$E*zY0u9B7;r=4HQq%Qj7j-cjY#usaASTvc>& zg;jlM;pb%$uiUxX<7dV0xf1;1=r^X6c2B8LB3fYV!-EpISL^BLwI-3cK* z2@_7Lx}l$OR)yOq2?@Oo<7y$NF2fqU_rug$+E+0VX5A78K1)Mm=GW>g|8#qw`+5;J z0NMZTv%ba&XxX$*g%7e%{xZEcI&OVNfZq?(qt3XJ)w>Tc{lDv-epf&HkTUm?@u(0A z;~e&~7wtU+zj$B0_@{g-J?E1V9>VCvYEI|DK7gNx0pitM;ASTwVdm|ZywSg%yrYgA zMouhoA+KiJd+1}m8TdGhlyFU*sk;El=~X`IA2*c7YF<>n4*N&6fP8eVYawyRQpQ-~ z|BipG@1~zSA;)2HJp`H(YmlTvz{~X_!I(w*~LmJp?RiD~Ct1fEN&Hkyy z;rNDHEBu&no~PxEczw+3sf*mAf`-45L-L5$CvZ|hfJe7?Ug0a)d&Ll10((E`W_+?b z?o>%xr|4ly0ci8t=Zn|%ct>GmC8|qnP3?Sfrfv67f4HW(*08DHH!stim*u>OIl{}S z_@@D;zPflBKfb%L0=<&_7D8WE3+($0(mdDW%JB-S_%D<9l7;f$A~@brq{;uYdhB^& z^ey+UO`h)LIz{#)0$G$qCtb+y;QpL(AHe^FpWi@TX5o;^pK^&PP&aBzwfTD!RLybVSR|15;7R760zsQ64ov#F>y0eA59n&lAv7kL9a-QKnS5FYkM; zh3=ru{{8rBU56a=zM4+9ZIW7RD!&Fl5O1!Ii#KRcRjgTvL{-$V8fRnIRECRfL)!WB zoqW(@kM{)Sixw=)(ogXX{9ukePVIb=-fGV6wO@A>I}X6%ac@;`z8+_M#Jy;fKe|%h zV9}Zft}OCYA8Ou}kn@8*9o#}4$7iEpiR6}xzq#jUgX4jy_m5|f@A7`AR4iWF&K&*Y)tAp2XMP-{XdS!37pg!WY z`Dv{=@KyP6Rc1_^=1=H+HSu9+C+(QrJ8LWRn6;Sq*Y3FNuAd&JQHW8NGj{uzhsk3H zMteLx-p{K~#K8nH+h<&$#q;jrnQnefUqk@4{^GNSfufs<*kBUlMvsE-^E)-8JU0)G z7R=#Sho4;8=ZNqDfUdK>;G%P+pF&&bei(vt%ekbr7gX^#-tB$&{81h@T2Ht4BlpQ3 zejJPVjSy2|$Xl!+OO0SQcjocebWn!Ycu%W?7|)xaDQ-kQ;M6?q>TrsQf#TVJYFLXETjjH* z{lgQyk@M87TdKSd_rUtyd5>Hk@bP7&2D<;w9ujeIpj*x%(H#51N@Fvsuz#fo@A|Le zJa!L{6#N~G_~X(O+PB=2;xUB36#%Qm-pkO`X__WUJYwR0!ydZy-?h(|ioQ7hJBEj& zEN;5qxnDU7`{Gk#uSq~v#Fm^)N6}APS>6-%6di$PFwZ>YbDH8fJ+0Vq{n4p)I+=5} z@?_0Q{75hyK2W&y>z3~?TT;;Mt3wvO^i!}f(rGTXyv=Oa1;d^gPwvNj{7KeuEa($? z16Z8l-}jQ0&(Y8IV)VD|H;&T#Ic#K4M*CA}b@t?1ox5|baRI>vNB` zYE*I4@xa2d%jjb)x6{C@`o`pF^kH0t)+m?5U+*MhTHG#XeG;1oVbmP@yq)aO=LXH6 zCHl-C?{c8gr4BECHQSR!T=lkmDtQT6viv892evzwIKXD`>&`2)p(Ukf!u$AEe3^El z#de)^?`_Nq{;|ay^|s;yX8?Y+O+MQE|&M?O)qxVzpX1v&A-mTwrMgaden*JLm zEp9hpzZh(TIjGRPMSYKWU*|`g*y?T-&w_S}@t2=P-7STnm3MDYN8*y@Fd@fQ>w)AK zNw$B0`%7!h>PveO=mfq>(dWcK=#M~qPjewLB~C9=xkK@12602y`M+*rUop zFg$ZGLWsq$CvZRLWXfTxz{T_wPxCn$LsTEbHMK0U2fm=YRYTH0t$(81=o`&2L9;PD zK@yKhOW6Sk=Tr&%*{hM5HS2|taDzO4Jv-aMkmA43$wn78wuoJ?P;J1<1z)n zBU|9ytKwUxxW(sETzkR!WUpZ$i6Yv}5F65u4*dU;-U9y&d>(!lz(3rvj0M=t0Ls+| zMlelsv5$^@#5{w9fJ7v=W{HekCIMn0r^zBIwtD;ZaGwTW4TB2=U&$i9`4|TUm2lWD zdfVM_+VFSqf2*x9@YXWiibn1eBaUg)(|o`1T}7AUQ#FA>R;{xy_z@#fK;Lxtjs0gf zDUJ&Eg*=Kcf2Y)tiQku(=r`v4u4aSrQt+eGHRn<95BP_EQ^Ef4MWbX=rH5QP?1U3oS0Ua zkMMiy-72XafnvCj-iK@6J|ner{4NpWb`jw^CU~^Y4MSk+JVpypA>YO%F3HC_eOBpo%uZJ1FyTB9dTR$tuRr0=w zj_rUy(&WP2?6bzbVr5PGl~N)#Khn=PHh4Dv)>Sq0P9?$j;6W>=<`*Qos(~(7 zHSoNn8W`a%R(HF-ul&HC%D`vjbj*6)+Y^>4py&Y1WiS#_Q?SAH+4ayVBiXVVJ)fu7NjtJ`lI95n5N)Moz^ z0|B|epUQpBVRDn_;Z&a5!{m`8e4VGc%5>~818%WNxlX^1?%4?UQV=cPb0LoKTYYz~ z#c5z`+g9TQ-=mGUj2)OgNe|~)-HuvayVr_2#tP6-mHqYGgr2OL;fXfv_6WX7t*unx{RQ_#-L-c39DXT=^VzmH#L zmP>XgeO{lT7y8WW8242}Y8%aFKCd(RC>_-bzM$6smIP z`V?54-~Jpe_|qqVgy07nErNjR0bXQ(&eDg}u@u6#Vs{u54;|yGojZ)_&^(hJPUH@g zkpW!`1=OonjMoKv%_+XhP2J_BUhTfx=2eG>DY1taMgd3TbTrj*dk%{GbcYZ8j1CvM z9iDAEjML8bXpN0c`p?ETO82vyS7{KosKk+d}>WUYmOfuYd)htx0fshKNy}Q z&wl^=ISxI_OXOl!6BlIk%VqFxh2q^{#*F@cN}io#$Xi-(UqsR5)?U6T^<>IlPI)*q zX_+Zsn4DPI0q(sPTMhj`5~$+3BJn(q>cX}WSy69zuO?0Zdc3EfEcMC+{#F;9$=@5E z5dT>S*M>JxwVM7>s=&f?TSB|iCq515c)s*d_kfi3p1$f#uW60YvQIdbk;Yju>MJB{g__h6>?Mw z5HKNbMXW;gB;K=JAQ(5jk_98?odeX_FP}sUG4Gl0(<8+531)4L&kylI?R&5&8E|ow zy_81V8>QYrqyYvRP{))rAq4A7-Qk+|Phy0=wktpwwQa;DThk6lOu}Rm&~{Pt*y~`6AQ>ZjHgb-F=js=IZ5xGO7+nP$PMaDDtC4oJ(kBX6 z@yRlsGs-@ZRd%v*x*Jn&qskbR*R@ai7d@*`U{lk>=xrJo_!q32#rd#U@$IKMJWaM? zaM;ZKa+2Sk@QC2QA*_J6=z{yr84;NH{9=nPx zlpFpC31gJ-MG^#EZfkct1)h19?_bdOA$*V9%ZY3sPh57Gz-{h6cJ?ngO8Xa?Z=OVG z{fRCBBT0aWI>9_9WQZT#zZQMJu)IQNKOWX95MC&&85I$ia+UHo$G4(bRmT1|Yi|M{ zRdxRVCxn53#2JKOK+vF36PFs?no*+@O!N*;FfOfe`L-z5($=;Vl7N7iI0Ej9E~wuMNK5|j&pCG{6PC8W*XvJf=G=47JjjE=+x zSJHHqTlgV)(KpaP)PY0*n+39uHUxa`Cuqm^l$kgqGH9a5s4&;ydy88_PumjO&_B4* zA5l_oP_Eszge-Zi7Pl!gHsMx&Xn%BmQ7b94-bzgMV|m1X_Be|?RR%up2-96~$#|$( zkH5vZ28f=9prd{h*l?#KRj;`_Q$1Wz56Z_ zmj(V$GWhTB_!RiZi;pEYSbPkB{kOeIPPF<=5vYYew_rFU=l(RxbC`NcvlTDCGi4@V}5G7;^`=NQH^paqUokCR}{Y@I3dkZLL~Nhk-S8(R{zV>rC>4ER-{cSW@5eH|;NMiC4z-n=MRCW4MCiF~B06Q?FPzbN zgL-@q@uPn*9M5Hv*y&y*ce3I-^E2TB{ltndHa`;@_=#3OcAV;$zPsoYGK{|aI1=u# zUlwQ?R{xUPOq(TY^R#1F=TPND@v-0oCso!g_SNv`gPJQ$v5zjG*n3cB9RmF$eOG3_ z-=r6x91V0YHwAm&fo`m%U~BdBB=ee%TJ2k@1ZSEj`1Nd6Eq!|6$3Ro(zq|F-Z>UA{ zZpGMrzV9h>@pXKPHnaId_hii1;IWTGzlmGlKUn_{V0+&(zSE+ZHKf#aJOev=lZ`^c!9yc=~8@KG8S^nH$)Q7vN_+ByJ4_2IVae zsn;FizNi6Y5uM0Xg;nCs7~h?aOmQbcZ%1o>_J(FXm_7#V_$G{}{sHAN5Gh1+ACe=m zltVZbb!>ZmrhTJUuc-=|dRERoswoGz1Myo$NMg?R^ z@xOepf5wvHULGh_Pbt&T0-nwOH6J_^`phT8ol46dDFb1AHxq-W=0sY;DxLZBAld zISlg#)$x*h(XH%6G8nhu1Zp`a3!y=&)7IB|-{QPk$4Kwff2il0fSvE?T<;|2BZ1nL zsuIxGe`rdb^V-FU`@eNqR9A+YQs$=Sp-Z*Tr!SV1V>r00e|ouan!$X zZ~C{IKb0irC?|aiR_xXxpAhHWyE*6YM!PjBTtP%pW&mkm|7ghScDG|Vrr#|xAd8u- z7frGUmu%Bh(PwO97hI(KCb9!n+#xHj@cLU{vEB*pY57_>+D(5)c>V2a{)77G1Xs3P z*x%;|RT683gZ1}Nr(#cTXOnb&m*9Q6>Dp%ZB->kMO(dDL>+6?xeHA*flggaLNo69> zYb&&PeLs0wtW_7R6_#2UxupkB!jl6l58YbA`VX#K2-7eg`21e{wsYd|b;4ss{HRZ1 zkGnY?1Sc${uA5(k8EYny#skn7p;|M(166H84pA{S^rm9hR{Z)t6&D&pP26z zo_c%_@K^t+`U$-*@cqI5JZXQP(hnDW#C$iA>hV3oU${DzZzq{>2E~egtTOSU1$rKx zpSW~TtT;(Jp95LZw{tRY$z)!q%)$AI5Y>K*v=e7;qN@s5x-%BC#Lu@&T=UoR&4GId z@qgegt$Zt3^fu`^L7gxI8iQqkp-Yq1LG}*GZqd?QpX$c8@qbFLfEu(LKbN?WKFvLxsVOvqlFeEK=1YDmJ=b^Kqhj!MvSi z-uiD{&r@*144(Xp{;Xlei{h_nTRCF^KQi6g>|gX#^J2uS$@pD@A~&iu4N2-`4l}dt z7vvZfU-5SMK8{JsFu2et)R>{y@LqorAz=KC!iQsuq)%}*a%Ui&6K8{_!Q9T%s=gyL_*41;bvwlU)xF$G_d3~;_}wl)^%ZLg zaaq4LOM^AZL47E8i)jGHy{x2c-rlxb~I@ zQpn%fA^Ter#iJ$BKiiUPTlzW7#{MlCVtb&L%5z$BOiS=be`cL)9tvfQ;(in0nk67R z6yaZL&wnEy7^7(&;QwoH_nZfZhd8d$D#R{MYO=Wr-(8|CV(i=pZxAt?KNn)Es{^tmWkABvw`&K|S92ZT+lP7d z?UOm2RWj5vlE7S1*9LHh&?j6fQL|K!5&z_sPClx@?IX}D!cX8M^^(Bpv*c7NZ)co{>Ed`K+o;_a}S4~!D4 zS#&RHp>zPox1F^98GdxO3f)&sAp%BlmY-;d2FG1*)96n@7RgJqX=gdm_+KEdgQAant za_Ht`;Qx_%|4CjKq1(?3wf8l>X$Xq~KAt#fEBwhw4Pyp4Jrg7KD~T%3mwO6l|533j zW1DLXU#(l!+FxvXZE9jfcbND#jK&{5i9St@-@!&QD6j7JOQzSfeuf2XW^f~$RNE#~vx*wml2?uM}cTS!p?MaR?`qx#;DBmR>Jj`W#=Bh~vOy`o%bPW%yW zmfx`Ol5lXt&1KTMQ<=7m1k^Aq4VmR%}B(HyiBS5=l%brz1P+(SUFt zDk$J@A4vyWs~b+2Xzo;kEq=~SesZbi!WTB8kLlyt)3CRZeTXNK%-GwE{d=w~(o};&|G;J6hZD}h5uvLaoaJF^ z>f8HE2+jT`|DzJ&W*xIK*fX%CIRRGk1#E8^8vq%-!V!I%BFuAnc?Q#nk2cPv~mo*onM2QpgBF`5AKcyj~)z^T0QX)Kxj2UVD_<|V@LsAep1jm zcZ|Sbek9*$+uaERzmQA3i=D$61FAvfTdgXke?lE^G84XWF$gX_BL3%n@9mGdmf9Npy<#B#YVj=qRN{}_<-@f~i<)?bW>nuO5VHTF zsi$)3_nxO=eKCbM?r%n@bOzf+fA)L}g#Z45NW00i{6mrEbb$O;HSPi-+_PyvUiAGU zp}D`khrvs=UJB7p@fxDNg`Z@&XVDT~>0cyX^debOe2l1%eO&Kpv<^wu>w4ItM^s!P z6-s&dnW>_vr`VKV$dzQiI9Z6|@8BnUK9#c5uvuoH*Ye6;bx0<w&ngesEg&ePuuR zq1x&Ko${LMgcLB5MMpD8&0MJDCC=67qMW{hkty>7z@^!tt3&8|27d6!aN#`yR4+bltVAhKqCXVZ}6U$;Q?7tW(?(rn1dB?3mQc)WSNK@w%( zXmwcG@uXSg`SKs{*l_b=?5&lNq^TvQgvu19#xRrGN=8V;8Z-LL^r0*Qe5-t`cnOcp zQ*k#*W{~D9z?xAE!%&%=QTA#}m+ItMb}zF64UFdUp}SSgPj=GG3UiOY(OX=cALjr2 z`B8kA#T3E57drocgXwwOdph1K#KPCWF5$oJQoh9WR`SCY{`N~%ZFKI;yk^8iPY6Oy@+0%#o?J#6kFk4=8JnUv=nOBR zj@WR`KQ3p(R=571V)^M}cj`B_{n@t)GGIz47Ko=G5a(pxy#l~D`L6*_URKh>Wiw30 z_m<7nZ**=$UQ?x$XlMX&f)^<$%xf~jonaYJn9DauP;8%;pfAsq_3C@9tTyqhf6U4* zc6ymZnOCqRGmLSSX^%Jvru^VCmDM^$#({xnjdn9`7qcG`ZrL{$%$b&=*O=g)?~y2QPSXNQcEyEr61LV%RX^LeD);i7YEr1b!1=36wLf)iRm=_KSg;)5t=1xB z+>05vOqhScFJ86x*Jy&UTc+zPf(C!0UZ zFT5V|@Jy1sq9d^>h4pbKPzQ?Db!=FG*gSm((vB;{nG&R@y=*C8*6iF8p1y*c<=jv1 z=fWZESG3bMO6GBeCPQVkW~Xs@DzF`B-`X^(4naJTeQqwS*}18HI=XZIAVop4z?Dz~ zC+BLUsOeMwA3hi^!vdYXyzz6PoeKdFwf}a7clnU(YxUrhdY*T(yHTVE1J<69&RBWw z_AjX(57sa(Tb$@KWg>%l&BrU5R5ICogwmZRdq32r$@^~uXE_35e{wl=S*M3PX|Xmw zs0MA$5Nz24=~Qie%HX>E-r8W7|5k#T)1OOA(l|un^H@A!5w z)T=CieKw6~mVs4Pf1G85;7_)GCAYow@AhfI?w{qB|Aw&Kh}0JTdzuqRJZSKjlYQ&F z@`4(LV#IrHhz@oT*kNS)vV>LkWwbg|W1QQ%JfIGl@2xbTPHs+;rOA8uxBRl0j{XK@ z2v#N}QFmoW*TPz{>kaJCCppszth}9@0;!R}2vu@)Ln6kxy-{57Tq0GvKf$PoZQJ?= z>s5n_SF+2IWdgWN4ms0N#Sv^Jw!8mZ_v?IUcxhAKmW|G<%Ja8t7hwJQ@B9@BPVke~ zu)qC|H1~{_o!EJK*$FJLDlt}PN8%0T^%d)HNb=M|{3`l~dg@gcA|op|v|Z4kgRDh9 z)Pk5xcpK`W4o7vMP!5H1Kl=z0v~S@gkZT^yac$V@sDPTE9%>V2x~Fl6oMjKn7wx{wV=}zA4LMt;%kD|7{e;G-Hv^6!lh@b$XT}N>J4s%%wH5(lcx|8a| zM=;XnW8AYLFY=-n7~{TiL(K$X{xA?UlKrUVs0usvL0i^`q-6$aNC}L zF>rqrL3Q3m@yPms3Fyb^H{|~HGOC717NcC<>VEYNuOXdJ_2yvhiC3iEMwml?`Eq7sg1>sT}XJIu03oN?DM%Ov9OMaUfg({Ja`GUED5UBz}j8<2!; z6}|4Y|0hanDxut@E+;-8X8HUQGkY2>x^dP|*DV*Re<6sA8852|Vj0f5PFmF3o@H97DRPDs^fmWx8lUt8rGQ#_9!5u6i(iOLLju4wI7^EffU( ze(@uP9xJQ?&PH1RAS&Rjd)?S4nQ?i85#@DQiVf_Zo0e&gTp#v)7P54FS{AVYSfGEl z4~|zqd+q>u)y$%@xJUH($Z)z>$5|PLR4wT`G6Q|`acjDXrNBt3e{|jI&>z`S@ zky&MbDP{fV+4a9f?^vv6omN^(AQHeNS%RQLRvNJBti`gV+$JZs#{-_f18FUwCOAz# z*K_Xi-#N+DCqQE_!zAW4k9F_6RAtPZn_ASGoeMm|` zcK<^hZWrBqKx9fh(vw|uK?|R&8>pI3N12uP{%c-C?)l2Mea^OK(YBJ+)?5=WiqW}b zuxJrKEw>oKB!sR>Xy@xo*1Q(ZrkVd=k_qv(6k;~SwV%s=$_8gUCI#Mcv^s+~Pt%YFt& zw?ZyQxBN$NW6Ojv`ztqDa;5J`h{UjPq9H_9dMgyyhOus>%hOgOMqdAJINHTExw{K* z{-gOmg8j?yIaTJ(<_b~W-*p&twdt?M6yLiJ8xb%lb~>aF(>?g#{Ryfn(|`%- zpBj@={KFmA`S$bLq}$#zn=prSGw_7{-S={UzcC#r*!dwM09UbT_arvRQBqrtUWYMY z_Xk{%w!>+A+q)(}SBf+ptBbI^U7v%qj=3LgP<`w<-EwX2g-$$Vu1NETV=FnqGPiY; z-sFOdNbFVay(kKE;{br38vo%IX{6c*;fZnC49Q3Q?bm1xaJXNhxnk#?X7mt)@>(uU zhJ&+9{2lFlNu;}PTvzkypYxkJt`b-$61%=^MlCR{Qn*VtYcG6i;y%@%x`|Jm{L7#_ z9w^#Y2{NoXoRc7^c#?G?|C9V-k;HdYKaQ*1>SC|dY)o@g?Hhv)d{FqAPO-_>_BcxBrzV3kt1~etLJ<`drn(1We!@N-iMj5#uQ!O< zM2L29>j^Vn551;o)*Ib#4yM2s}+$xBzlQtR|_72IbW(*Wa-J!i|;=wXM)|ef%3U>I=Sse?=tt z?rgeyVtvQ^O-G00b@;1_9-BRF^z19cvCIEl67H)Dm?IGUP#662)0!j4Y!e&Z2QJju z^}H`2Fcs0fa~N->Msv-*Kr$mWhmjlFC;9E!t%m%~xdQTMWFNn}fODjGO$Gdw-Y5Hc zV)u|MbJt=r^}v7J9|QhH9|+k7@W&qes<^@8TspY72JA}^=&Z;!`M0b1F5)KW=)*dnB{90t=v_ZWjvBnrkiK(BSdwQrr;TRka+^*Pn8iv0REV0#+s-xIj^JOFBIqr= z7fLvw=a#_>3;!Xl{`N=dVG>yy_+og+_1^V5y&yMTEsX?2m2)mga-YaCPJ!caj^dhX z^w`^m))@Uq&BpB`T`-f9^}n*M2bQ4jh<_G>Ue|?k~``O zCnCg-Up(Me&wQ>Y7b|f>j(@NAuc1`H)k0q_G5gngaBfW4UM@5>K6phhCC&t$Tf9aAAF-RY@u>a=0U$le9s}joWM6*ESE{QBz0+pDV6Yyx0pJqHj9| z7qX)H?FV;%N?R9Unj^6nYh!QM$JQD8v$(Ghns$lsEo6we6Cb0^6rI|<0QaNxdGv5i zdi3lwpc9{!IDL}?W>xBZ$N`BX4%^laH#vF0H0QLt%d&bG&jQBB+%E*cy)ghONQ$Iy6h_gL*icFO0Dq zjR1bOn3^1p#_~VBI8w0@x>H5E_tg-OJJxCwGbTzOrH4=zKJ=;~9J+nh^pO9_Pf^>Q zSStfi?8kR3WbMtGar>pyTk(<{hA~Ssp_1mn>B+GZegLW@&Ql#W0t@QP;nTGjIKjWQ zd`F~}v-)S)i{;H48%bQ)D*74;u4wstByn3S5GOr*9rw@eHN>mL^xwVOJgOClG-rU* zIVlct>%2mhc6!Y#sAZK95Zt9_=|%l#1@(>o4&Y4PLBxa>(z1c*1!w|!hbc{c4bqsM zB4(vTl#4?Ne_E?=*}*#Zcf3k>ll*f|Y%EE}8?M2oXN%kzy3?g>1MeQg?U^jK7i7U? zcK(`;uP2>?hK3!rg@d&0odL@}F?hICWSPr+=b@xrFj{6=gI7`+bGqH*QsG=NJb+>M zR=WSm9}YLGJ29Hj7kAr*?y}Hdr}b{r^2XQOH#HaRC>&%03T1WP`H%jBfjId~AJq>_ z4a$N2!?F+q!#~q3t$9CUDX?$mxnDe&rI3Y5Zo=a4!xREi({j#F@#1Zd$%xG`WM{l$ z((GVxrgDUHxKE8;_?#7-Y(t!Eo6^!HNVc?HlLa<0g=UFy&a<1qVOLrH4#}Y1AeeNf ze{uk3GrLn1A+6S=f(RZb7)k?f9q4odbBh`|bXO!~%Pba7eE5 zzV=d?7mW;IQ4)M zqo+E>dWk8@s8s!d^#m5_<&z07nPS&Gr*sKpA@1nrIfv@$Zr!O{Nc#eU{%oaL>g@+9t<3(~D+P-m5RC1Zv}7 z{Z5A8#gFhaX{)ghJbiP!!UsKTEHnC6!cs1HS73!g!2i++_g|WNF+wL7!wz#cWY!Cr z^?;oM_pqrR_*0!Z3tUbgTxlC`1Y>48$Z2rVtywB@T@6NJ;!n0N7_JTysC8xfC^_sz z-^dq#u-*+1+oU&Gj4{H-E`;lvgolo_24~Uk>&?J4HDBs=f-f%^Zq?Yq7Zx7j)!3sC zuJk_8+uf`V%nK_%A;g`_d3TxqIQ|IcwhGZ>c1_1Wb$8}_Z$_WldO0if#e)PMV3xou{zl3I z>Y@`L40ofWz=;@;q8gfn^Ic1C^bG&e)aecZ_Pvzz* zP}E?4uhFs%Q-9!^GG1S^nbfgG=GB*8(i+1maRtAd$oKv02!mvTb9c0Q2xK5{As$RM zA$qgGke^aeznu30NE0i;J{n@wDPlDEB5yTF6&pzX<6ta`#g7yB!w(0WKvrJf!rEx{ z&r@Ua@)u6h_cU{@KP;__uSnJi5EQ2v3k5$Q;LQWGa6*9S-H(%k+qz%-s$sgRFpB^!wiTGo!%#E%8(}hPm#JHhG zEPEbXrWaJ#BU|y8MSnl_e|Ix^U~-!_6iXhun@3pxFMnK!A~v*C3|>eKN5CC|dgEYr zlv=o@TDTs4>RMPYW+BAMGyZrhF!yL!CI%PVqzTU*Q|nNs?v|rDCbYi;gtd{oTej`R zCpHIuUS&PEc2XIWM>+bGE|c3Nis4`FQ=S0fJy8{9jZswm42WhOKa}O}zFraQ2I=|) zOg)5!sL)oef`PZYU3TK|$`{9WrapT3^Z|z#cl3oGGMY}OIx_3s;-A9745a_@LdY(f zYAF8nk61k)JL^BtF>UD~FaKm__3)Q}qRWeRz72cobMimKgcuHXrPH&5rO~(GJdr}f z2n34nIb4*=lD{vT^p)#@;)*#1{s43_;5*A^cALzR{=ka#2s_7i3xG7AABdifdQX~e zln5bj|1o5LjfnaScK`Xn8TOG!gK52y{{qGT7-I-74P6PL5BQFyF*VdOOuH@iYiW3$ zYu1?u$NzNdJYqu^#;flxB)V8%)1mR|J4{Ll$swr^q-@3|Yd*YKkLAVoI{wM%bzX4% z7rsEp{CDJwR0h|Qy`Cr?J>3F`Fq2aRyN44)33A(IsFzM1!hGJ4Z1TIy{;a9gOYn)n z1(&}GGU(2NP2z8^-YH^}c^mib97@-^nu_ASk4y@)2P;Oq zo&WgLvDMf@!xhB~0qW>ji8Gz+fVYov*25R(;;8XMCU*N}+HcPX`kUNCz&^-QzwyJO6&|KU) zchC*Z{-tK#X~UkY+$XMLlBdH4_BJ1ig%gL^%&Vo>8@$dux?iUg>CVhHfs$|u%tW5Q z{Rji$qPSR#0UQ`BV69yN?>fWQdea7{(AdQ$cYS~H{sl9jxXFe)(Si|cQ&eG0J`Ioe zUwne61ncTAqs+SMZW*ejw8pF|@91GyRq^ueW59y=gynrAoM)`kPu6GL5EBL6D^Og@ z#0Wwmhl%3+nltf5@xsB^W{;5LcW^>8wX}@D7B%D>ohJ}8d(~B>p*_BnGI<%`dGqIA z)FBWLm_wO+z5XzsRP$fiOB{_iN#-?$O?-|NX~pO8ZPNSYu|eD|u}bgdjUoFE`d{>G zGIC<{fZq|F+$i7<%S7C0)%Rz=CUHh~cJHX+0E+%Da{#sU7kP~OhdAX%wlHv3>v&!!S=gWS#~4PVKL~R_&66k*{@s3x1r$t!x@{r|X+gOUg);0< zN&j$jX2vG%_#e0XPou`)pz$|wpTjoLUiWv#J|e`*IrI(YB2j%B39{UuO!p#Hj3dMS z17_H(eMgcchL7)^4MX$XTe&wST78IWA!>5WH=LJPyB_nPzsrZA344{6_XXb96oSPR%Ir-vId=~|@<3Q(1 zg)Zd)(jJRBi&S!mUBLA8JN5Wp(V_-iRdP}<*X%Lm$?crsm$%B4Z+FZ&__!D{Tt}9!HkcZ0ObfA>KMQ51O+CZ)}Uyy=M zbRj>Lf3GR0j*@u-^aQDe<++Ofaj2=Ww?zcp_YP0|7WbK7orX9oQU8@392-}rI$*OA zt|fd!A7ok|+ANefgk-+*PSd<6CcL*~|EX(4V@6d)onG}z>@QP@eO)D$x@QhIvf;-Q zQ2oy_qi!81qNMm&cX>4n`pgVFbrAfP2%PneSW8L_@SCj}8%ZV^uKrR)lbP@~@9!m) zzRQK9keItZ6QwNvf%%zmS)O)qB56D~Yn&P63W@^1ty?U8vAU6@dkDb`4!l$+RK21K zIl6*yC03M>@I}>Pi~48yVgeWB`@Y;qkew9^4pxyp{GueyB8oWCa^~E6nv|=`^9S_H z{lBvTlgvW)fe`B-`x~>j4e;L<%haHbI-QZS6WhVrNuN&YL+_rhmeTnoSeDoeXavIu zU1NJ9v6tP)B`JZ^u5|K^#us9W{Pi`dluwc$;fZ3es8S`Ql)RlWhh=|{uO52)#AyH2 z#P~z&vF8|;497lpD)y#*{Njj-#5?X99i~jiO>yMVD5}mGhkkvhDZhz0E-J4p5;?3L zZF^!{?5U5fKp!n2;WSE5Qb8zU1nWJi^~luA7;#NL;w0;uSgz!PA~!-8qH^|T#2^W$ z4S-SNI=6b1)$sDFu_X1x{-8CGw(#wy*Wh0c52Y&0<-~?;NVvUtseaUiOvqOM-r@t; z`Tbpb5x*-B#@2bZfBfg1=H&m4+p=JMw`dRn_mao59}#_l(rugu&f{l$US1cs3cfo8 zmu8n2eQmGnbx+$4e)JD4fA0u6A=p;p#n0L&+w=fF&Ao_CQ0)~On-lS8;ExovjIUDb z%buS#zA7_5J20L3;)~U~#&;YaIN7{QEJ@sy#4ycom>}lULIrg zSwO9KhhazAUlP*!wds&O6WDR;aT!+LLlsaDNqwpNhg)({QX?;sE(Q8|_JKy#KTO&8 z?6S@`?`Z+Iy=P>%*!Q$*%nAG3o)=!qqgi_Oi4i53N)^@z*P4}QhRe!hxMqjz0;jUW zOJb6%@%cNTW{j%n^i9w}>B0!*RAYQ`!~V(7g;{;w9~MOtU(FBm!BJ2Kf89TELu;H7 ziBFpr{v(6HUj_5){J+-6J`8uikL^OMI#eG_`xg~c_r>w??}ag|IS&Ke<#~CfNWL)( zDwbIg^~s)Vnp`lFd_$CGFQ~Hg`@k<`*tRg9oVRkU%nNsacuYqA8gA>OE{tj)hDC~i z-VIaYm+zX}J}8XUZMf|%)7S2|hDP$=b<`B=4PzwP3E&#Q{viB4Lq=a}*kGj45TkFe z3(QieAGR{)!WxuT(lwf478IhM*ZRMQg1W;v_gM1Qy}iiPW=gGd;@+gStOd57) zhS;6CJfpxaR-8y#56#f>oT*XI4R^maChVbdU*E-vYl`#IS5NAKwC`7+tY4gP_nQOC zkLM(pGaxg9{{9+nc)$=ZPLvhY2cHLZ>SKQoS8PoW;TH!a44wS#rQl9df~=!t-qe7i zqY$zOP3U!JZ`3|ZOX>x0jOELwNbC(cVb9>oKStyv(Y%|fMXYura@OPJgkvG!W@>Ur ztXDN=Bd{eUe?1;4d;1Ro5iLm#Sd@dm)pq(H;H^xmR2f?3)pJq$OD_nja`GLjNcqdH zayK(%w+&N1&A)%q3N{B#XZilq>9}W!_h#QLr=EW|oo4Xi*xxlb+xDHCW$LB-;?)Wn zw#z=OFb}TorhbYfbmYz`bmU|P;0`%@e>$RtP^$1N;>2C$)S_> z{BREQwhw>Bbd;jE4j7emhRG^-{*+nCPX22w`7voO8Mvvhe+6LM!TL+FyxZw0unxZH zzg4sch7DRUWtu}qbOjmp@e#XO@Y}TD*-Gq!PqE-Jg_Yj?quCIp-RUL#5pBT`LNJ?53nH#=ol0pi#$;y;i8?J^98d(o-6u*W{^AdH1a z!Y%wO_k%y!Y1HA2dymHLkM0!^X$NAbK``6UzKE7m)26u!B$7pD_Tw>5;!+B7;lggw zvX`JM0`HUzKJKR>Dt=_Rt4otyQpP=B}( zG~wHUWwRSK+>oi-n+t%y$u5nbHx7WgS}8H;?|ySqF7(v`U1MFO?mfsfSonMKPpL$L z2F@2qo%Rf#GYk4pEUu<${2fFH*QdYW{c|R+aGuRR0LEeKoMEe-oqtPxtXbk)f5%~( z(`V;+|D1`dou{)8aDEgYMy$lYrMmP5_(qc$5b$ka&X@RG*j(W}dyDtae4TyB`8t_u zvkeCP9S zgaM??edLtf86r4A)|Y>l%C_Ls$j28YxnWWvpNhF08XoT>o4Sq9JIrzhWO5Pl-oFn=!b#<$kr(WWg( z(uuiBFc1FQ{)dzue_t~K+_mXq4)LRr3tq}j_JU$qPGrkvl4Q~eL4jCkQ` z97hM$CoavOni$M)C_j?83eI#ZU1L9WHoopm+(mZ?66XJ7uj8*p1JX@Rn^X7D6){+t zkn03VsJAdT5T;LLa&+2@I=$ z^gP_S-5Alo2CMJmc{a27VNnt`zpCC!fx{Db!|cyGB8gdcWMU7d6tjjaZfSlu`kSIi ztViw`J?R4em}sDcXUYx~k_#Wq{Tr8oqnU@HdXPIn2E|*(8WdlxgN{M*uaJ?0;(`R= zfDpUSotTU4ITZS^1ImCb{(nLj2A;pO_-7q9{I_ZA@|-pNi`YBpV6p^cf|DFdvRrt@ zqy#Km9zRt7341OG=%rER zE@WJ%rpLMWP)epoX2NMD-;xnZ%PO>5t;`-pT% zMj3t20bnQabCW0Jg3ib-@Gt&v=pzJ2@N+~zLZTlm(pp#tSZ@hc&tmmiXbD81eHL7h zNiYwEw-=IZkUt?CP*C;xN+*7<&PNJK7QKc0;VzEE4cugoR_V>SBAGDl0d%+SN2U5u z&Dw2Q%LSA#)nWo*OAY+vw*b#`RqLH{+9EyxOaHAKs8m*79`Ces zx2B1Yd)-dckXWOhw#-Ck*tn39up6LT`^dAgXtRKJD=R$s=EO&~_}5_J$5=FNz>jt^ zdx%C_<;0U!27NX(pXzo_V4yvr5&*@3ja<6TaCoscQ^?Xkb2>DVHoyR%-SO$dc}`qH z1i}L%4%;KGKJ>HiJj*Y0<)#mhhOj#WuujoE=gnr9n2m`Med>OL*x8SoE>-M6ZaA(q{++?G zrg3FJEHbX#>1z#X)LCQ}g*cDSxNpf=EaAIyCiq;TjLVB9Iof64_VCuiT&t1Z3A-OZ zJ{P+Uj=$u$i?pre9X4^uwK*1G;y2VD5+7Bt%osY`erJ?8-rHyz~q}@2%e-WJZ2I|G53Y zmcqC)(?SFD>_ISPQp2C2zpyyy@{K%Yma zr|9Wlw<*5+uw;C~C!}JVqr3ZNkA*i$6urT-VPtps9~%ihL7}`kmwijdtGg%yHpg}c z*Uv_|vr^xk@d%lGGKTw=*;Y2o)=-C%e*DL_9=G6_3>e;2R@=s(h2T~|VP+#?Ljr^^T8#fQH$N^>bQv9GF;5>13~ z8T>6e>|H|pCr%#=8+fK*SCcX_pi@Nne{43 zFx&UqJfoU?6nTofwZ*C?FI!~vTfe5rvJng^M>RPYWmUSxRF+U>om3Vt`t4hzkPjjr zJ~LkYGt!ugowV9FUrngl0$blT2dJ-H^&MyGt5$uDU3>e|WBPoxJm}NB4*K;*X#q^O zwa*n3-TYd*NH5=L=jCc%E(In)PJ(6R8*iqr0ebE?j|PstIrwDZ_fHGID#5Q(@WT&# zYNfp|D_->GoAiE7^B4slD~}hg=MkD0;Qm1DSdK6yW1DC!6JsbljdW+h8|bR;7eA|o z_!OmXcc!=Q&Tl$A9+Hz{AlTisDcW5S>}^_~x`b}Toko$B=!(6;^-V*FsMVF8tQ!kQ z=QS5E(~uAsTtN>MqE9^#x&;!K?3MNO%Gf%V-$jjf{dxDk4ptpP@)9||e+?*Lu2+^9G@ zb8Xidk5iUTW^Yvd5zqVHsQ8?HeI+;d%oU^^J>!l0tl1ZaR3h6 z;>Z75{K#2fn)T>1%{ucEUDjn1*b;o~1V{QiuGT~r{bG9#qU@e<8=4#8b z6=ott6f0A$48}tZ)(;N@slBIS2*kuQOnhNtrnl0HJ&-4UVAHtTD`TckuAiwg6LyD>aIZH?h}Za}#{bm$xX{Y~ z8nMVZ^cb_9NgKl0ZE$w>|E@a{zqTZtzbc8U`meH^3P<0H1dLo_`%d^)G;+NxG=RzDhK}~FN8WzHB^A}`49*sZqJfOGyt6Osn;k& zj01oB9gNe7J}s!ApOcJ>EhRp=B%=-D9FdPR@WwFykYVG-|2001B#xc-+9=d*qhG2) z3)Y>+6B50bUpZUIk@`f!mSc@Jq}zox-WBpk%hak7s@&ZwcS!l>8c})8#y4tqZro8< zIxbrM!Luxf=3&w5Unm;FnymaK0pCrxu#r&A}OGxP7 zq%O^0YRzEb<`irWrc|}Gs7BmLVd4ueP`C)<+c_l4Cf4kHsczy+VdFN|i;Smc!+Yj@ zSJ(b#)2Uka(>DESs~YO#;|n7GCy)L9GA#D$JKk&>`boWi>DKfHbt42;xW`{0C6>-3 z2U-|8-4Kp6s;+wKB5s2E9!kgjPffu=|GC=K2z33|F95F&j8OStUmvGnWDXk zo0EG#$brZaLyZZJ|JgMh)@uDxgP(~J@Z~XyJ^fEzUUsDasSVoHb-~&r@~0C2^nI

263a97jl|nY z{vRSr6ZX*e$IUd*NCTvAdJj;abU#j0bk(S9Iu$ibs8A)ScFxdK!gqYTye|H?sth5gn1yR_7ueQF`Ry1>r+2Qc09p4{)|q@$!k&SkX}b6fO)FLN=Q zCK!+Wfiol-hhIa+@yd9~W-PBKqf{9yl|fwc_@!0h=!&5b$%065y+0a2*eojJk(aAP zUdE4w#MQNLX~G~XBB$MTZmkCymdpY6wwxuL{(;liUbciLjoaqrD*vLBVV6yW4vPJ- ztd&=IoF7L0%{7Wvv4o6B@Y2dT+f z`%a}&T#MOP(=&MZhtK}zRY>FDNN~-p57Vv7LcDZ`VAMx!5&N+FoC1`+N0`0&wB3Du zb^fQOvp2U>kUb^13fTd<+F1V-n+-w$<&6GrDMmWaFXC2yLZN_VZA_(lH19xP$ zS80NCwq;BIXEIK=Wt+kLf1U;Q81Zb!AcJ4eol6D>uspYk3_8KVz7vTS_e*%3nspER z;-~wcZ0!lx^56fW3eNXXTcg_1AF65;{n|5%mKX%5afkOv$~YC3vQr|T5dg`iFw~mt zDw7>jHn?zzW<4au0%H$4Af7<3vH>UFFaxI)!gUjq18hF?mv%$qh1tobRL&VHUZxVg zGCw8lLz0+gK;XGTyOmJwRBXGEOb=cEwu}ytYSST8sLB*FIA=SRnhgwXu_|M`&C2vu zXCQZ$wGfd=j~Y?0Ds888E;HndxrhZ^HuyCrnKzzBg%}sAx66EoC-`VFXvV&JYP&dNQ(@sGqm!9 zzp9lNkZj+4qFcWM?3c=nTNHhrdJ`W}24~TzulifC^Y^L{Zy))ik+6a@96aRYc7xM4FQ9eM`~|G- z=}n~*!x|v|#Q-r6O#bHuMf$VD9cs=ih-FvTl;*o*y*`y2rHi_3W4f7r9>ukBJ~{#) zJS4TFU1E_N-ivneI;9hYk~A6`wJ{r&?=`E@>|GF$|6FmjdMN(=`MSH>cj{8My^~k# zYsvqkc)r-E8oLRsl{6qQV0Tl20TBNzgUbCt$w^uG{L12YL+<(~!jAY41Wf0ta@N1# zq`NR6Yg)xK)Z8@pEb7-DO@WbYh)T}Tz@~|*nK|jxG)7b+C{e{Ptavd}u_nxwe>-2p zNT$H)?mI7nk4Qciz&#R`-^sQPiI9~&m4^&rNxey)AM+2L06GhRpW?dg+ziE!_#2A^dDIFU>y2QPp4-f;_fK&Kwy{yi{uu+SKIN?PsJ2qeDoU@pq9RX z-`A^utf-q9l!oW_47PJde6Y017-M>^y^jU&^k}je1rr&a%Qqw3`!XM-4|U(oq;1)n zLKT*%zMC&tLelytir)lx#MBPrrq_U1T}kHUcc18gSz=$R%h7Bsgdv%c5+4&Z$yv|) zChhnipc3ZyAmeYb26JUbtQY&T%+R538c~`c|NWg==VtKRfW}p%I*WUt zd9*tGNM@}x{hqb*ZM-RSzRsyfyYHkCnd!T*e@yCs%Ov`qv-cXP=epoQ9UmOZel9?| zU*D~>1~Y2pFYeYuyjs&w>J|2i8CTKiBVH^bbp48-;%j z!oLRm0%tJG?4POIc*zL_*Ntb9Y1{*F3H$2CV=GRo86Wzhfn=TOf~>eQVAT+znIfht4+FB`)2?8a$+TR~D=TVldeUa@8$ z8%0=hLS`%Ml1$c{VEQGpfpGj*##uD1htvrW-lTgqfJ=RP0Liz-MuUIie{yNB=TgMj zd_P=!m~~WL#y*ng7J-5qI;#P9_Y5_3zgURR>A~^)jD6M*;3{M8V{rxfK zaz6v08{1T zea=+sdYPW4gp@JIX{_p z44-iciwZyIchUcEan^q(uWiC^!)CIv@oU3xWBtIVOg%A*6XQ2KiL23~ZfE=0A;-^p zcs=#H(v2FnOC_^tAiaf{2lt(mGkYTbWkWJl^^yaP#O@ENu*df+Jt-M4Dxi=Snbjx0!V9<1EWa!oC5m4p*NHLw_%IcHpU<8l zOY%9bAHozAuQElTxkV2t6)#qUe8cnWx)I)0<07aMo^u5_=9pqUGOl2W?P6> z?}Y{AE*L}a(xlxnKgq<9fUb&-$&haj#U&C1HLC&UHK3D!C6zO|hR8x%cNZL(v{HTC zcQ4iJL%0@StD1VmtRZC>Wl;a@Q)!|5{@?;5TqsN(V~1(S_hUQ0kmk2a^IIkTniG#1 z#AQiT`k%bCu=Db=qmcGT)E?xBrAwou%=k*_e!}NpeHc?iz9B|t{kabyeh|qkmug-j z(xXJ5Akyn~*T7Md-rqb{7Ywv6(;fl0#MbrfZx|JxE#Fi3k!<55=iUt%QuPBS$J?L% zi;RqPfPbN^Vjp!lx;w!~L;U#fK%QnG<*4VFUP0s3p4r~$9Fo%k#y2*E!qPknIsS{0 zQD{y$NoH9yLi4;W+U-)ttykx%g|A3>p+C{;bK3|ENkYJNgzL zg`WYT8D7+4Ep>vMu4RmjXQ;d|l?7SBC3D>L@`1AK zpH7g8Fd-1vq%Q#4m;TvE8J-g*I34QPA1-eM_g^S?oaa^J>4f5UbldQU>rhUu>8I?$ znvywVlH4TPx0b6!32+#!nd!g33wtL0f1iG39{+Ry9$)qUOaBg`W4ht=dn?jDqv9uk z?xBoNy&j^j&MBam>`ViDYS(Y44v_=o7wvgT%tS+9&(G^*ilWtTJSdW+TkcM{Ui#mp z!z(A&+Q1KCyAn&ybE0?zZ`})J`jc3yckU5bzOY7?HuBKZI)lIZN8K~MWVHG=Q#boU z@uzFq6;|tsrAmEOqfoTkF`o}tBT0Rz-Y79i@rB&w zd`8A%Wqj(s@AYO0k3FrA^4IIlQZE^;-mQp9TqBhzo@;y4#VgYrCCI*3y}91>rk5Pk zn{^~AsVZ9iwE5ihW|KZ7jKESQxH_}acI9 z@+kOK^31IB*XxVpC8O2be=M*JV|E(IlX7LL67JQe^+uAW^=Tw*>yPP!WV3<941J>J zm7w_>Z1XdDQuA}X=I8Rv%<|W3KItW+)zh=hFD4HUMy8Ym{KrI%ehF#Q{-Y#p`;&6o zU#f336H3tj+kC`RmwnpAlSbdmV^8ZQ{(8;7?j@tuZ~iDVdY3%nmnN1ff&BGq)BX+~ z@-22sG<_J_vM_Abkj^^-A*+bdMUhmy;4LS?IT%%EqNoZLmZa0W(BOzpTA`cSjotQt zS+QMHo$3^m#R*RJ2e($+-Zo1y)8n)csm+P{*WkaN$49c^hOxOVn8Rr^etOCI_YQO&yB)Hh;fWb3LY+V?U()W23!F~%20@@9aT+Q~*1A^0MnN!E90 zG70{i{eAVxOu%{1Xaa`2Sx-X zGhjBjV>i+B_jm|oH_?|4azd1Sjce^|)@u`Jdv7rf$-c(0ZVB%f&*UZKNBHeE@2zvH z!=(kk;2A^P;(32G#+lNajHloVq|t|7lsJ8b6_^04R#?|fxyqKv19%M=E;KGvfk^2z$(pXU_R$J~gO zI>YA}3z!JExwX<$VGdUraJ(0SPpg~se##gMW2ZGf&)8{=&-3iGCbT_c45|*v*lB%} z=Y8$87W@!8vJmCQWlw9ajSjC8%sj(jrUzUQs!{=SFfl@ZJZq4#d$AMXzK5fq5Elk` zmlOA9r)`xcjr&9XtgHFV1jX&dFh19RXETU*QDQVa+Py{@di!Bn3unDw^h+RlKAOB^ z^LB2WxCLhV5Aq}rdH1h#>$=>O9~C%gd8QnhX5XXG#ed?vyqb;g)U?0cwCUo+Iq7iz zi*iV39{kY@c{w%y%wF+Qb@3}2YguF^HPKaj>w?>xhSw=r#|Gq|*UC6;JOKu5D16L! zg2da_)j*@mgi86fERK@8#C3aX`qtLQUgynYS8x}_y(`T5ppM=`XDoDV6^brxpKT+W z+EU8-+aIL6B3g}NsvE-bi%Sik4gCM`J;2I|sT5<7*yg@I4m*eIeB?o0@qGjXQSjSG zYDF35yaC06g!+dg+E*A5$6vR{kV-MkAvD#4kF43bt`=uXuOiV38n^euTVr}^ZKYP3 zci}$_)I~U^$%&i*gxCk&ETSQ=T#=!JG8q#4pkqN^Nud+Q)=pZeiR7fUqCvF;{1rO%Kh zNG+*&EB+^WVdn3@@Ly_a26mzTv$K>G{wL>|+K<9_#!Ofxwo8Ta;*zBhl?_cJ;>CxN z!am!CZ_k{k-SyZ>5!>_i{Qu*!n3jEy#o6g*eoI;; z-=h;ZG6~Erma0u7C-u1xnp%|^Rg}DhueyN~-8oE$d%^YrCpv-3ef(_Dav+q_4?a)L z%xp#~q*KR$uqC>Kr~3mAbbGPU`=#(Cp4|~}Cegh*{dXO(IjmL$pkiVlToij|ohVNv z@kI<3SJ!hnXt2BGGW;eBw3R@cbU)phykdVUs?YBY=dY`et)w<=33r8NpEfn#-leUF zx&{~#4&Ee}eJm}ga})II9$|_VXiAF~((vCIm$MwV@NnSR=mN4`KXO4C2nnq34i8uS z{i4M95#jFlis~!g0Bf=PtBnzfe~o|9&9ozEJIe}PxeZPDe-f9+J{EsxAkgU1d28;NI1Bu#()0`V|}=dP$y+$Yldw|hTHy`mlw)w zIl2ZNUMMfkS-Cqk9dyCwB0F%p#=R7ny0mQLHDG`#d+g_`-bk`Bz~uuce!p@e!R>Qi zbb?!2)`Bt195CiII_i#oT{K{qh2PJ|?oYYgSs&-FGDE1~A5+W!opc}*A7_nVF+l#t ztilB6L?8x>pDsU)a)eTV=CHp)kYME(I=&ERGxwg0ETdHlwo8xr0~I!^#OhYQnvLM_ zjx8oHcB}pA6@YBl7M?6*usJpNaKj2nc_eWQA>W2(`Y@uu> z4Iz#8Uw_9tlrRriLCcANM$%4t71|-1 zx>7dD{4{QpBvoLp&a!4x#qd&LgIcLj$D2u*>1v0jmC04+H$H{!m!KI1Q^4~nGmR^m zcnxQfKlM5#WbY|t40X=CF0}4Lvp*@KE~T#`OweSRnCA6NzJ|Zht@Y_J#6b6ShtS2iRx!$?CY?Pm%T2^3%)U-4a2b-Sc;-;hXwNDBbL>~!qD^tQ(35} zGNLiAY4!o1be)+>clqg}D|&(KlCTAdGuHgdYUdA?S#K+2ZO4qt0Gg0T2I@I=61p-` z{awBQ-KFn8N>$6-wdpW!!*&P>fZmqZ?#6EjLcS)+o{zuLj!bRpqe5rr7X3C9W}3tZ zdJaCg@J|LU@sT#~18HoEG7lx`vKx}Ey9WtxGkN9dK7~_w#IcCo1EZ&Gv1p9`569Qfs+T zWWhx7Gpr^2`TSEoIOY1V1Hvs^No z#AqhzjJh}?sKhyh)47Fsy01DDiB-L{lJ~Rx-ul62c+ogjLB~RF(cRD?DJ=HTZ4oKv zc?OhPpKxbOb1{k#mh0_$mV-lH>enh5f7-NJu@@rUJakf*jp_n{V|M_V&4C2^<9qh! zl8Alc9``kUWRyO|Pm`xqv3+V`ZQEb^FZ>Z9~K*G%czQcX6?O z!y-1lRg2&s*pI#Q?G_p%Fd{O&ChA1x?erpUU+5s`A-f*bXUG}urpnTed=Es?u`TbK>Wb}LVw@!>pDh z-Mi6v3lPAK?g5Pl>9pN{OWp4gJ61D}>C&pomF@*}IsLH5zn8RpVc_^V?i}UeHJh~@ zJ;WxR>eX*{Z}tQViT^k|+e)Q-iq}f1|dlLjxAaFPtZ8X`#a864e`rLy`3N_ny0~E1_ACrV-Pzjwo?bP z?DzI$_6Y=nTOHo{bzz2>pFWURO^1oW1QsF|&^8ax&=ecIfYD^hkGG`uhQq z7T+GK%jZAJI;J5r*-=|MD9r(y{txnZM5*5E|5r&;S{|^l5;q{GePR|qyIf+ZAPujX@+&;YVu}<8a2Y`=bP9Haqnth=YyJLktI+%Cqlc++nlX!Bb z&Kf5s?UBPi#gmQZ0D|>lr%7dT+a6VXBg}Tya5CE!y}|x}g8|c+Y{qnDWJFG%%190U zy<$QgqvCbE-Dg8{AA2*Gd>Ao_;(s1QFs;SKKSN)>&H4g987YAiJU`GJc7i1ePyt6! z$mJ68i%8?7IMN9=7K;DiIp!25(&B(3+nvEyJrD|a6!TCb4O5!RMCCyI#|hC?kI{7=pvE-Pr(_2jv#qB7}DUMP}@ z;iLT(alF0A_U@TO6u=3Lsm)$sphw5(6p zS~^_m7PTsx0kxLL@7hGA1UZd;Uy0~v2ULyNeVVyYlw|evhS+Qn7T_H6Nq}_{*U`6@NMUZ}K9|;V?&UIfz^7?CYR)#DUJbl$s;L#y55p znx+ky&c4Nr=yFE%12dx8eX+;Qi1r+CMA`k>3@Yi}$k!|@w~Ry53_T!R8Nq6tK+oN$ zUKof&$8Q^e)0_Uy614KEp9(Vu$|!|DokE{+uX*V6Ef0MH2SlIQT{-9z=trM^gc-@T zw3=GTvq2cm7b46ig3Wpeqp(Ti|3B8=1U|~@`u|TL17V316fg+ZL}CqY4T?&H)IR&l95t7 zR<@S>-k*D)naqTQ+W)`2H1jO?x%b?2&pG#;bI(23BbGgNanVoN=%sz@-f$ww_tP-^ z+of#fIUys(GU}FhKf;Op9wCkIPwe=f{lkBAe81ZD__AL(KQY4Ym+|0tNwS8%yP;c& zZnQfwsz}#b6-~WT205e~((nyrkn=UjyIx2PGQ*PVUirE=#&(C+sBYY3c6?v8bC6Zx@Wfn+Z7$tInd;XH%~fXC$3(XL)tIv6?v-CD%xupE@JuX< z=aY;v-;oZ0{muHnK8`LgG6mdU=?>gYcYETqV1Cq2+@FD-Q0eI_Y2DjZt`bVSu$S*i zCZy@L(|S1d{q|wLYwQ&aA8aJU+V{-aS_sTycU^->nYndiHYM;RocgR39kgvi3!cA& zs9eET6fta!=PKN6`1#n0`PpHltF{;f{-!So>~X81o17zkNbG-Z&KCWIbKciaB)e_z@70%mM0l_UY_4^Ojw^N3o%m<3Kd~D$Ra^S5x9}B-zM&ue0Ue_S68de__eIrv z_fkX9|3hQ$k1w_aZ2>+*ufNH7NF?P#(5#|Jg@c9-qq_I9XA=h*^sK6lgE;E@+3B$6 zS+wk4x;?>~W)$3??n}kFIWNvAJ6-&-@b|U+SuFTH8wSuZBC7hL;MXofORhb+{zy;% zY9xKe*0S8p*hY0($GfnWMU2T4xMd9rr>c8DF-d_UIq&FnrgL+CV~%Xf*`uFG&Ia>? zN5>-n7u*U*r|H8eqZXfS>NN{$%ktUG23q$hBWBZCkiLq3$S3X*WpblRS5eXhfK_#uoLx{l|oQ_J7;bFlp%7o&IVnIt>ZO zbX2;~Y4LaLc>O0b=ZnIFPiCh`%#${2}9ln>BXAu6zwbhT5^pEWUP#z;c@KrV}s4Z4%BtCiQ1^d9FuH0Shu-(opOBU-Y1P#e*jK)e;Vt=KbfK5l0gBggBHACY$lly}>j?!-*s>d-whj%USAhaiYVG59opM+(dGg z+$!r(zNMU-b-6av4A5k*-8;*Zlb=Se}W4J0Hyoxa{~3i1`Qp;9_mN+GdByku~)N`SJ!dXWaa?( z0y0HOVr9qP_M*xxf0(|f?cWkT&JtkDs|`KYa;@0s^~2*O8n`{e*KS z*}F^a-DrN;!4e&Gw(i&VHNEY}wL8Ana(FhfQs?jDfw~UEXkXpmypVjKt>K-egycW$ zE`6Cb>M5NpFDoo9{6Ey#rLFG~+WvDsCcbx5ZGoA3hyY*`%=s2ik&SqCf6&wF3c2yI z2C}d5#{Ff@vG(-{Qg1)9m~;(oPn_i=%?GzossT47Qa?4Pco=e?dmd6wsE< z6mSMl-BDW*T<)*`L`MRt9kK8~uMg90$jG4b7yQ5Kz z^tXCC$A{{>^Ly$tiwMDJR&SF;*(Ha688rQAt&hA5OL_;xtMq|(^pe!a^ROc3`k%qV z!CitmjneTp4h0 zI&hzgXmw3@j1kd5KoYOuP>)R<>ftoJV^4H=2aR+fv(*%Wv`lD_=J>@$YKnGkC_kqI+@nw`JJLS*abv#8q)|IBJ_{LTn-`MD* z!G`yNosRy}#Ire3@0Ykn+9aYvUPVY`2#K>c@W7BvAak$c0q^5Zk%v%&ZkxCbY@~A} zmghw#$*^py5gSG_*v?;-C9VF(OPJR5ww_PqusjW=30h~m*6A_9@Q+LoWvnhs7$I{- zWcn=fwQ$BuSw?{UiTN6zJYMQx7?zCy-)LtK6+X<(gh;S$Sz~6((GbDR?JRe>1u&%5 zQ@u1R5So9@mY#b0g!$A7lOZ!=6BCh*cyTZ?naHzy3hSvhd45fse^sNtfu;f_oBgX6 zaT6HP7HDq`9NeQFErFIpY_i`J%xopfCNN@`PM%Sc7D3v?E(F%!W9O;{ouG2RI2}#O z9juv$Rcq&6jvEAu^B=5N;Z&9!L`SIaj465xT|4fOAwI zt|R4}z#sQS;U+3@B9n-_8&ALOkeZfWX22$fvpC;fLChYFG(0EL*%Bm{Po$s^*73WZ zu6dzkeH@Si4w%n4J#UuAk65Yc63SJaZu96?Kko7Vn-$YhIb5;ZM+dU zNT9aJMj^WUCz4Zv-nkc|*cyZhJ8Nru(S5Y;_&;+h)bf81Lal{5lM+hLmMt z2&|qf{Oe-Bnkooqo8hwk_5hasI)Eh;|E$t4CAmzWNSqHz=ddRXrNuTQpd_bT3Ar0XmgR#?{YT(=nMY!1lHQZ+9uj2QVib!C( z3w0B*;v^8xdLbAMWQtzvGX$iSaTo^TaZAFM9vCG5+Ao=gB;IlYcJrFn6j(5Yp<3yB z>H#d|mkzhu_BVds_8&Ht)q#jHiE(+)bPRs>eIoc;EqpI>V^z@(S+3QYd^wK`+;6;a zoK#l`qj3Tj#73G0Z>#nt|62X&Vu_c~bM?|6mPvnDCjG&XJQ3=W)Q%^dt%SGfuE!Dv za0eDEvVJ{9JXycT(+&d7AjHV_VCKs7KK}$lcWVIF&Sk!Qn{@ z&_gBp)sRnOs#$iY1nga<8Ngv?Zv|QipKOHsw6Injt&z9&2c-XBd+ zftxj4eZqsBGS72P3wi?sVaj;)ag^m7m6;{7LgpFzMlv{Nc5aGs__75#3F!~$#EGHO z*@jEXoDr`((aD(}NC(`no%t_8au*nA1U9heOCFiQL6mB+jA{@*mS984Pj?Ki6|2G# zrzw458H#c}8%jKqTK#a0lB#}ap4%3(pg1A$pAO_U{+C3kCq1$A^f_TbH+ zhc0rzgD#X9;|vQ%vo1|Xp1?QyW66=4A&_*N2_-SY!oNz3M6s}FL6A?EIPv7j0vZ&Q zX1GN?7zZT2$ESd-21??h%Z$vf3Xq}Epq7aAQ$29g2U}sucBI|Gp5{jZE&OxTkvW&i zGTn6tJaOYr<|>J}E4b;*i*C;L<2W#O|A{srrP*J3;=f$+AE(MR)vwP(Rpi`+RF(Ht zyAVu_>XEXV8?dj3-l;vmckNV|stn8mmY3nPckJSEf6k%ZUQ5LG9u2)`Z}_BVyEl$j z{=D?Fva$Mp_;Xn|$+C$xk!c^M_0}zHP3>q5cVE{b?$RIES^aTsHe=QB{vpOy`r`rp zM!jF83o!Bgp~7r_8x>ObjJFfx;$ndmej;(3>D{(bfho4%)O7LHs-I%^)+^4v%WJX( z@A3{~VPDM|65yM79N+*Kaf@j?!Q5=32_5$NqXPhhMfv96Nyq5l8ZcVNF5-Kc8OxvH zWkz84+m!`>3`Wm?nKF|jEB=zd+q>D2H?YM2-aQiEw`Q*gwtM0US`(hHD4DNwMhGIJ;U#bo0!AEO6!gcbxc zKMw4Eud-mX0HQ|{3*s+=itG9Wqc^tmJl=EM$hU)_SX~zYlG@TOu-EP?++%L$ApdxR zlzoH!C3qjad4T)aR5L<~L&!e2En$BX)xe~v)M?gM=Eth5&HZHouSsC$ zZ~UGLA_kV(s4AO*Qz1nyZ(uFn<=Gcw`z7X<_I5M|!mjV~2ADGlTHYcEhq$17%%gG+ z2}B^a8UXB=GJig3(p&`9455>Z@uPZAM3NVkfpp}Cs5nKgdeqqPoQM?H_&pwFOkh$V zZ)!pVK$psQ(50F<^NRE7GMZ|jWZ&0+pYXD-{VlpgkM|{5J;h=WH-Yx&l+X4)s@8Ov zj0y>q{Lvp>*+WRI@S!(HM!lghul^%HP3ReMKKxN(Js%3gKjT-Epc63X8tt1HsTJ8A zvu7Mx^h}Np%u-|POxeRWGz671Sl|VleiYdKW}x6m0tz8lQEV2IOppedwk?IMNS<)$ zo(M+&>VvDd*+cm_$MYlYxN$0@!!8v1#lFE3_9>Q&ApFhmUS89i&+;?k1MMlGgUqB) zQ`h_=)VVu>Ja4Q2wMc(!W4Pfv7qvpC(e zzh!iutD!`%u&DL&M?(dH)gNnHL%uo9mEm|tXEoZf_{qd0NjMe-NH^v_d5!fJPIn*iuFBjWcvpGucf6}2H)^h|qHe~= zUG6;*UAhasg7e%t=ISnwzZ)b{-72rBWT$(jS6~x2xL`-E*R+_m!#y|s`9n{8&rjhw zftjzWc;xiC|KsTwBqszV3DAsT`b>y{lq(oOdNS?gZw_yA0Xj0q{pn&@gng$Mk3zp&u;$5Ht+)K?CMry|emY`Ff8+_9Q3-#}ETO z%1&81c0OuG3VmSz#c(fc8GS%=LiqOm6+|4~ zkM(5q-{tQZG3;JM$YC(N%Z+oNqPDp+exIhu1Q~>+ag_A0ngx_j{^bd<%z%XaWK6Lh zqGQPv@k;dtK~m2Jqy2k!m_SV2fy@JV2dYUl$#Q;HPZU**+4Ai8nH{B2lY3TXw&7^3 zCJRe|L$g0}N)F>L?a;@fzVr5ZZaz!jLkSR0?N9u7sr?~7tUJxj_7eS*{VjinIWP-A zc4B>0p`D%mt7!cj32Q|{xv#2t1^=H5y!pmmk2Qwqw}3zj(goNisI9y^APXDz0>Uc zA-`!)+PXcjIn}kxP@rm*4-saJu0c>5u*m+A+rH&ZW;$#zOQrQa+z9vROa(7Fs#WO~O?$F+JzWb^#lom`dDl zDRZm&IPzQL$M#wm860{Hb!1zCAV{XENMNRp!$Ko5c<8tXMd^~ zx9|bBxuXAYok|}!d#g53FKh8lv7=pieLFb7(#IocC(y@q(MOf+lPb}NQA88!ndaF3 z^kFk;5_BA_@x&{F)Hs9(4hcqw4XKRIAhGqs8JH@Snfn9JK$@QO_sz2KVpF_W4jf`BHIWe5|xrF*D4UsO$$rT#!=>@Y%m9j(D-wcOwQ z=H)dfH*3Z+Q;;W{hD(Q1N(CgC*B#|umbjz18f9N7KW z%7VX6ijM6YEO{^BuXv^WcPeThPma#$$G0aMW}9x_mhYpnA-56L?^78kzP2 z;eDIih`EzILbnC^3(_txtJVxb&NUu|HS- zmHpPgva%?1l)xZn^+-Mq^A!R?sPCM%0(7sft&G77aCcc81=mj)wWm#ZxpxtDnj zV{dwUC8x2h`L4JD+B7*N@)KrVpyjQsiIHLbCPr5D%Qo)+!%oz$CAPopXg}-gs+kE3 zh1i{Ax@|CGd!y~TcFQTA>9l4`+E(7^59QOSoZ`i58I!=XC0q7qO^6K3o)oFbR->p4 zT{TL11#W(rFI=ZIN{ik$VJBgX&`Pxbso*Eq=%-A@OZqU^ZQ(%SIEiPru#s38YaC)$ zn=n>QVi--u(*;?TKIqkil`d};9@;fpFAs+Ixl=B*jnC4gFi)#QxeSt7Q`ZjR5iK0I z1AY(~gzULLI${k*W;4NyJmg=!YOv^v-EXXGk3AZmdzjZa#do?B;Zqj!xU~B981A+A zxy2o+Fgd2;@DcYXx{Ue;XA!n>0bjb`=KIdmj{W}VZ#`xf3UdWbUhJw4kFfl|OU9?` z-eLpf7U!!PT{1F-dF!(FSJZE)h1h#wFuEc6b0H1nNkRcli&M4j?|baH_TzVU=y$Y? zaFe?isSJ2ivYCV<7cZD1(toQbeL86NHGYC|^OD)+h+GXF^3_~`3SCBbJ_a~q(pGO@ z!rsNK)0)^YcPite$_Q?0BK?PZXb)30o~;b`1Fq6@IavR9l$V_$VKXiMO9d9rX77Av z-6Y5V44zrJxgZP9QBLf5!mSl3*b_L|79>#&X95HZ%5t6EA36m`ozPo23AJN7+vxXl z@p*u4aj#ID$=jrEZNNrPN}$rcEDeD%(hZ~>HE@_DD^qnbfZ_!VdOdrrYC3K4m|xeRdPL+F$=3qAjs{_c8Kj~)4UnBe@OZ|IIQ z>djQQ*Qj`AsypViqipSzXGoYSILMh$zLLr2e5p;GFXi~xx5qC~r;4mP0%5`KhqV4m zfU>9(eD2T$$K!2Q&K!K%DOjA%|G7yVzKg!u%Bi)&o0;o1zMc_e=l&GLWj>lpd9htE zdDdAQ51+5O-l|BfU{|1&CH&h` z2=VFfMn&&Y8Ga$fUXW9sn9IuWpRh=JagrJb-XGRLNi~nzBu|0e?*sQ=QG||3gjlBa6Z=<_m5WKB*^Ru(fKE~efWR6<;@a)f7qL1mK4-#iM|DJ!MKQnv6?_it`6U|g# zQ8-VY2Te(;A9fp8s@i1s;Y9R&L&K_4HAgs}_fF#@k( z$uwaansqpa4VAffFq(B?fZ3H8@5{kKi+hTpFJvj?@-sdLj7H#m`r9RCIjeuI`lnj3)QB0NX82yXs8T`4lNTqRHd)U@QzTo ztP7eZa4Vl z)ZAHMi^$R?xDK_CxEKDn*I4om9ixyvnq{Z6Z8OrOos~$Z&%ixSbZTat{o7_Wq+`N3 z=tP%NhnX?@jM^i#*ohC=cN%9x;``(qXIoaAsaWAPA6H|Iy~|c);ulQayA07dyWhgP zqRn>NKG0FC%ySt@Zq81jZI34&kgx2|?5q-`VCRJw5a2mrWm{IOZM%i$vRC}ymPDb? zhQHkj{N2z|$--(C$rd9^M{iMgl_0H`x{J1^x~Vm^9~W1mOoEc#OI~C! z+P5%`N^a#jC7;xc!(Jr6nVK@^dv1@vrv9O_w7OTRJz)9HINQJ6j{X@>u;vMMGX6+9 zW$f!<;G<6a^UiQ6Bc&_P6Ku)pp|PF+#LFr$!YwEZY4Cb%xaJQj#B(b*R%96ft;?+9 zCzPO)Y%?uev!$&IF^08e`Gr%mNt~m+TQKNK2lPe868|aX78GtNi<5QsnQcM;?_LUI z?m?Sv5BMv{DYq5x7CTOU*Y0fFCJqn!D_&{}M6YYXQ4@cR?&9V~Set5j>l~*KV{u@Mqg=IR3LD&F0zm}$l@@TpT5jeS{BSLS z@D3TqyFUy@ugVOpK2+Og6fZn~O)-V65fmQ(o&K!XpU0Cvj8LBPb~uBKff7)=svK z%&}|`)e`H)>0#I-Oa1P*#D{Q(H3Qs634r9SM;0~2bq;KG5QtE1T=or?MK2aFG2OS} zhXOd67iLYRvpHeO@>f4Ro-D8PKuw6ev|quPpwLg_S&4D>hrSEEcC5{DXT}QSgy$Vl zvAl`xbpxP*mv|r$CqxJKQC6rOmHua1%Qr$Z8PLV^fy|GBCC@Lps>9IxiZR&Y1C1Sb z%vhlZ>E}VlL)2SVeQm)1y8|ArJN^o6>8+6ZYbGTifj+$gBUmGEV>cjYRIuY)7~#@b zk3shAGHQ=%$i5%YP=6RGILraob+506kc$eG>AxlxEv|C6ClUb~(AYY6kV3^I_= zL^&O5uj@hni8Da_opn7}mN`bTAFX@-WEBEAk=rsj8>VOUQTnt_vry*jK2G#;`CgU1eep4H|OXGN8u`zakUXrCP;P<|1Zk+P-=E3;RtF{tMrk%Quy2W z{Z#zKI87tXi(v3m2JAo}9TwP8WS8Y;)(vLw1LKv|im_a*_IPf0TmAlLw5PMeRR2CU z?${>Xszg)qpC=Jz>UTQTkKGPk_NdL){6wyr?wcx0H09QGwBvry>k|1}E&l%@TQn{I zSj9T)QWqW;i`JG2E%O{ANQ@s{u2N3A>HjH)c-`FfhYk%w8$11^nP5NsmQKT|2Jggo zYM-0$-M{CWeQu?%ap7*?MDwB2om`W`vGHcL%}hT}ll(Ff?_xPgO)Ij`NW*MF8M$j5 zQ!lZT19zgjR%Y%nev&u)vJ`TP^}+P29J!MKh&%oqj0~!wdL1C2x!2?vf1_`ucNL@5 zUcO-k>v>i%`*A0ua{V_?8#48oGyc0dz=`w+-@v#Y5S;(!8ANBGF$G8LcS?2b5B-*j z#j^{sS}QS+<2@@QCz})R%PcKl2MijAI`tRhZf_CwFbmO5G$r839wPyL~Pa|zo}`Q z5-7X|TzE+2sJRQ*ZxcImijwOa0?OET=(ts!^6L15FT-GvEcx@W4?d~ID=2}}amv)Y zUYtJ$G$63i76sWX$~gHfg&h7QH-qg407e)36H1fK!?*3ja27F=INc%JOi~|4a>kB@ zJ+)Ie>>J4?O1KDGZ+3OO*`_xq^K8wSWa;I)Om-A6VDfrnKHYVPKi9)ctTBYE4H`W6 z!_81$)OX}X_z$;;;lCNko~90#H`BZWbt8cY{;D96c(MC5o2WY}qcR5QtcsW;n_`c5 z_|%ik%Y|373YWZAC*84^j&VUvEqVU-T%(ReMv+hV<=QyU&7PRF`M~i1e0VdrL;g0= zhdFfL_(vYRun$G87BRayTU?bnwsR?T(&-SfffR^N@> z*&WxvwMjPN<3LG*tFOqW_pCWe%L>hD|m$7=4!8HRS+T7Lb zCE1|PLS;m4{svVbRuJtE?~dT|O&=s4%*}T)A-!O35v#XcAT)ahb49M;J(xS1r)>VM z$jzr>Ec}YxqQpgU;$pP9fMEIJ>TK*W?Pg!92_1}in&ty+i91pJ`Hu?o_`oia-X^WI z;eE*fEs@UBZ`Au`?Q^kt{!rmE^PD{%$agSuKo~jT{#eu-S&*?IAE*!*>$CJ5omuF( zFJH(jF{v3`rv#*j$QUD58x2Fj;eV&Bp)Rdln)<^pJ*$drXs#0tQq6~lrSD<*MFu@I z8thLi9OVw>8OK9#SrMJkqr6#2ujFWMe9Z+{Mf*>w7_lR?nS4rb`kZ!fsc27CAIt>R z2AXDSatA>rX1Uf;*I2Hd&aeKlW_rJVSdulbi089dxTjE2S&|}Uda3eG)GHJoSm?fW zZ+BS-J$yDiCp2$q&Zm0!V%Q&CCMI_Guir`K=oqn+X|sAK`X2#prq1u=cUKNVL;o|_ zLMm#ov%C8~V8wT&fA3$jT3t+|Z_TTaA}je~$9pdYM>{VRClBY+l0EMfKaTze{$Yep z{9OQli@C86g!=3vtL0=)%eGW-1r_OgLk9_JO+mq%K-wYHO!P$u*vTu)pZ{y&Pu0&N zgEB8c0(4p2))$vdFa6t0awg?uc$#0oC7@Cf=j)#Uhvv5{IEV$b*pauF_W!P`b#gNvL zVk-<#*(3~PZYh#M@F|T_XGt*2{i`AnsbjhVwM{odM|#xFRs5|H9v+(_pGtP#KFPgC z#l3er1K#nUg9pj7GN;Jve#giDue5OXdFfzf+ ze-k_L{|1duMmX8Tb)xiyupQ_W)m{2qD}4jI{RS z-$-(vy|DcE13vErL&suJbX4CUn{ZiFsy>rtj?-8SJe4ShnqE9 z#GL`j{owB7fQjAKHRF5ZVBlNPS$3OsYzgpfWm;B%SIcs-W?;L$Ca2hXR>x3}q+gAh zB*N69Xt+nHbmoOdPme`_G^9$M8?8; zBdanpYygp>eX|3KgELG}nfX>_^t@q}C4Z^zSDE=nWl3!5$+~$s5FJ&_T2UrZOYv_7 zqFLOO8E>$q#6Wa$Ci3Ih%8Q(mtuJj?@h-4i5=tz8EZdc}bfW<7YpX z>m-E^@SPuUbDsu(+6Le1`nWU;5|)3ozTSz(5N`RJgp1t0q9CHJzo21aC=^(Ka&rAa zhjpm`PNaujV(Mr$r8ovtJASbx?DA3<*vb^Cy)Zjv^*eK$%(Wu+MG@_Fr233t=2kO) z>eBCQom~jt(J(cKV@1^NF z7C%p-N`jwRny02q+nk=V*c=^oibF^;5}*&&LN9w2L-5i_w&$0j0Fa-5jy}g+a-^S^ z$$A={)Nkgwx8k-}INBvLm*$bL0sMY3$o2zEUoHMM!}y*+P9nip^v>4OL20XT)LR#wx?F2M+EFv>YWn!tRNrB5~Tc1xo(uUzJO# zVD#$tV9CyafAWsX=(TK0z*2iRD`0k49^tSU(%)_&M_0=mS?(&cks{G|(+kt@$auVP z4#@N1V`nE3Lf~I`)yfof=760THbDlRju+G6TDCD=0fo|;J5*T63eQnzQoqQsU(^ma zSee9~K}Q%>EUnxgq?^L#aBtnp{CC8Em%Q)(RRdLZ_;zX?9E?oLrAgi%@~>5FLU6>+ zO8$#pN2m9xePJk2uw?>4TX2Mbt=5)oeTO-4_ocu=lD3%P2(%mql{*6#JN`zKWDE>h z`8wknQMVy1mgg+-XvAYVst+LZjp&!lrpmyEcYEiXP8bSm*-xULN%=-%yWeuGoSuiA zHnDGFSLrt&5tXT`Xd~a;aatmGGs&7O`se6g4g_YrcA;ko_eByT^GpHzP2@IcwntEz z$~gkrDcR;Sf`C7GBrsxopnW@iw-`DMhFYMZY{}*kADQGo zNCXfPENF2upBH>vbl~s1QEei2F~M{7=Hnc>C22uLIm;3`%t6jl{8hB{MEneImUwnr_QJ>dEdWAz8tMWmzj+&W*#sb zUBrR#B1;G0YLDB~Te2utuZo-zAL|!~eagmUG(Q&SUPDDNDBt6Z*dmng!DJ!ToS7Iv z2VReOnJvSKDS;82;-q|4m~U`|$pF!TF-qzXv9aQcd{WT#o)Dhd+fu)l^$`rrD{OvS z%7i?gVHm%hgxz?nC`AhJVTX{AszbAWRxKeQyggMzp~^* z!%?q_qjm+O(;=c=oN;=`voHhv6Z;0!u{)TWnOl?YiScVw$vE~(7YpAh`l)}-Ba$cS z{)Nb5N;!eFJa5_ize?*V=kKmb z>*{%()LE;aa5`_d{J|n>6u&b{U$N8>D3cMtI+tK~`a6t0p&Tk}x*jK`vwPQYbuR7z!M$3 zwU*;80FgdXI_kUsEZMhaYV{^-*2LcEY0LIRTV0D%EfDbqt(|~B2`T&IGw~&v&Jles z9V)<%f@ptY_4+6i&^zq{I-13~C}ny2c$Tx4HWLD%gA$3)CGky%M2+2&radOs@62Y% zPW0#G3zu@t=3`fK5{3j}d$cM31?#%EU4$t=`j#BO)P=^9;Ldp1dm*@pjZdC0?GY-cCb84kAe{gmZjcuIyW@?Y$h-+?~= z+EtXGJ5Gs{OXeO8e@~fmLy&~E#jq#y*VTlA0&DGP4PQQs?rR4K)`^1kOT(d|TmvZY zcoy@#4=QN@vi2-ek_nXh03jP-dK-!R)xS#xxEd{M*U2^{bI8~5)G2>@?S7cjy<2u<@pnBW?kZ$Z&6&t&FJ zbvZDY2Ts%-3uMVr>$r;gVrzlz6pc=3A#f%5)8xlb>tm-ANlr^p{%`+CJ}}PQWZz*% zbw2jjOhZi)vg_O&)74h@>|s_s=0}?L^DMmkS#RCx6JkOOqQjPqPzX!Unt{&z9S=(= zXEN9ccnMm?5F-E2PZ<)hxjF&y&IL(Kj<5HI>$B`1&s}muIu^~D7m@J8v?Bb~<{5W1 zY<;)s+ypxJMn+9;oEQejXFBE98P-UE2w1l^CcwI^1FYX*I~iFRUzZp|LqD_9+h;yP z7G&3#*5pGbP>-3PaBcQ;8d@?$s#@^We0nY?x3&0zvy;#8?MG={E0oCJTas8QPBtG- zG~da;qn?L0{Fx6k?pRb``pFq;f3&FTBKN{=|74-=bv>#(D-ao9>_qAxrl1+xHlC7@ zmUG_BWbOG_qP{2JB$7GIAy2g{yIXEaA}!Kz;_8wxr(S?R_WwVm*)8pS3PJU#fhuC5 z!b{Z>>*U(pxH9u#FQL2s)U==xV*`phtOF`Mi``=H+du|%jon&TsPwb_2Q zy5r84BUzIst122&M|Vu{J67y=e5%W31~qbIG&(Vdk0|PRhd+9|CeFwcrXr(%GeIz- z)vwzoP&x9EU2>}L_3WRu@Cx1~W}IXzM&rPO6o35$5lYS>y2d$5W>V}pNU6!`IhC_n zE-Y_6P&>5i?@i!V(}9ZY9?Z6piDbiPo3PLzjXdil#YK5X;`&3U13RfBGs{jPSyUDW zyT=A=8wsa8O^)<$W$Sl&Bc2pF0U7@{E+0n{&_3p@^=SV-oWib4D$5CQ;2!F5^0=pQ zjcs*V2gYS*vJ!sfjpd(i%B&>=1)Z&otos?54ECHjuQF^e6+J6FCovHFA!s%Vxp|>9 zkzbRi%$XQ&Y|&^1P?=>+>5JGBjR|{H82qJUooJI8&gi4}Q4WOvUeB44<7w(YY#({z*iil=|KOV}3W3fjsveZoKzHdGF0~kD3Ko=DXPVq(W}^ ze+IM*$7>OtxjQ?ObNgw7IXb@1F2vnBlv(L-gB27rm**LEr?{U-D6VHTG-*xYSt38V zO1_t8=dWz&F1Klmd)abU6z@yrnbd33zT(4D+81A-Ng7qho9}#ZU^-I>HBHowb^d{-dj`hmJA?RX@%lCtqx?jr)$Cz9Ns)%=|5< zgj>7U0yKX9H5W*#q{aA2{#D_B3LRaFr5kNhhovgshDY=Dy^aueXPjc$quA{C zt2=%DJmzB)N_Yb+r|9oy{T$0MuIOJLx znpuU)6p+og3b4QmS+7e~pRf7Jl{Vkqxu@X6H+(v^By?Pmz}5rzD%@~geiQZOe>X8M zXU<_5h%Z<|_>0nFbnry#m4)9j^80D<=lopoM+Qx~M%@^Qg=IufurSy3BhSt34)PF= z-i*3)?fm*6e!;F_jer=)%=XCImG;_eM}#8$?5j%^b6v)F`q%vMIQ&y%H0S#R2WNP? z@-SRx6 zagpk~=SEFtC()Vo^9dBckc|V;#vgGmyW$tv*a~F7EL^PLXyTX5s~e0nL+7D>;yePZ zWrCI8p!Zv$Uv;8N7lFuE0I_ucm;4#5s2Cs3>Rl_DTXve%yYWCB3Jpg#~p9{4xKbRCMRtJl8Z+%+j5Ih zJ!1&!ulqvxLpeI5maRK@xLp8ewR-vx^FiJA?YUgC=RK;# zThSGT!4%ZhCQ!#m`Q{@WDMjv&&+i^*#Tm7@tK$Whzc=DA>;^aZT*{=J%)(zld`y)) z*#Ol6b9*jvgP$5bp4Xl6WmUa>_p#(~$rlq-iu?T667sl35uK7>ODdT=@+Et{*u<$t zp(E9`eI!3ZN0!zN3r{>Ryd04{BcB8g?-|E-hyQ`oHSSD|$_HObv?F@T)l339hPl@y z8a28W>Te!>8x~)cn7>x2W1Z$Nr8r_W5pTefYnk$fv@^?>G8~($QpApF#(nynZm@0D z!sNUa^?h&+p!#Udy%JF6N!<9Ig#K&lGRrI`KGyxg;#A2g^_^)^kuy%pY+&X8U!gkS zcZ5SoM1LT{D%Ch039^-O%BZV>8~-|4Y?w11&B;t{V8|RqoXdIC#P723(-kdP^;SEj zITV$Y?<$OmsO#wIM@}X5HLK^$Ai)P5RW*aQR337m@%qwloJ8BTQ%%yPGxbFzXZ=

69^zvfDqB^MRkn8V>smJc?>z$0E_xwS|OVH>y(J z9@E>UcyoJlv$#3;171x4LsGq=L{d1e}I8$yx)bK!AR5_>mkK9S-6M} z`kUugFPwYJMdTl;D4gT0=jwtvx7tj0{0X?sVC8g%$p6O3gRH#>yQ(n(p91( zv)kc@=e*qx)46c>eS`k1+G|vgD!Ev_quM!FE?QV?8Y(qU%`!v`}?_YXPEYbi*A?`oPT4r>Nd*ov(-0L z-#TttIW;^{Xw=I@-Fi))R#Uge&(!{-oJ8*)RP6*Um41^8-XHzC`qxqaw8A^+oT>a; z1Na(MWhSb$r=@o+d$JA=%zf{vx5fQ_Ant}H>RGO(P|F<{G zBfM_V&c1M1^9^&B+^~4QNMl;zwN5iv9%)P~oT;hd+KoA;Lwns@Xx5DR)mebmJoVO^ z+PMqH*9kALt4OoGUpQM&-Y`#U=Pz1Ve99PyNg;3WIvIT1~uk8&68@cya2H~u%IWx#9K6Tnm14S-|7+du?&sPxT#3GiYq z3Hso|9b>?oQhUo)b8D|OczDrN>pd_O^OAW|J$GSk)!Z9RL$BxwgPO0_^udM!dIB;g zn$~KQtv#4%?VD=t4|fR}wzWyM>cr;^rPp3Fx4H&A>&aQ>$)vgkH}cH1cD_gZrZs)A zK{^htL4W&DZbPM6$@VT%d!o;CxZwQ^)8f+k3l}W#&_7z}FSF<$okags#lA}z3`V~c z`iq?A+W8CSUNQHphDX1v7MmAV&8?olXpVvE$9h8d^(H9{f(D#AsL~39CpLM=euNA6 z#fZAEYR4^{!}K?;@M})}^wvX;%BEUnXXC|whpQv({s$8xr zL!}eB&hR%HDWP6mZjiXN=ECd63u-CoG@EN9GN%Ap4!IL+5i zEr%W^FVT2NWptXC%&orVhQ*7GbUMjAnKNZ>P2DY)@CNG%xKP=|;8^`_jDdbmp9Df4 z{Jl3m-{gYv*{FyOn0%4b%plFZ{;P8hS^Um`;XSxsV92j&z!0670obZ12_n=7Ng~`T z9n2cFNKE%scud-#nMWF))AXW!eJTN|narVJ&-{!&TDly7F z_|rljnDv$6_Q8w=i3ca!2N}2WK&1 zcH(>Y)wzsE9Y#W`+ah^w^;c5BNq=1|{dJ!7*LecBnEH)cXyK0daG3+XQQz=ZJ7M$? ziW%RG)FB`z*vtL-8QnmR>7Sob%l;&QOvTeNW%2W{s!Owx>Pye<2^Tcgt-!%L7WM4$jZ&&TjHr3{2QXH5+Pu*} zy@m9MZ_#nz&i!oP%1HJsu`TT6%Xa^7HhKl8O=ZWfv_^`B-)uoj%Rd6dKfh8q&cc3% zNR1VeXK0Wi&F`6!I6rSjH@KHzQv4uNXw+8U=X$Us4ufE&snhcb8U6IZVclUN;k

V=my2~t15J; zuYc7ysIIAQAXFR7sLSy`9W0#IaQKzWSPWZ6D?emPH2zK0R2D#ciUDT%pBk`kTH(ad zj{0?|dcHpR6pR4gP(WR7Rd2zUvjJSCX^=V@1pBs8s#%3x--7X{DEO3 zuL@g46U54?RHtQ%rbCDFSHiLb%lY6peCL1aiM;oyt8CK;S!MpG&xf4Tpuv7=MqJEm`{zY%*u*o|IYCgtPwakR8G z>y&aW8#Wy2O9>Ku+Ul$K$L_HMF{@nSB4>ztBhJtO7-Gwn*vO}ll`itSo9D&uf^G)I zy@w^#u9zt_wvhedBKe8J(yVn*VFE{6eRs4E5?Ll5VDE2GZ``elKO<+7x!GWDyf?q( z#+rgX*5Mey|2qrfT+(6CB_*f5NRyu!t+$Bm%pc!%Exon)9Pw3g5h^XuOsEKtKJDpD zKjp%GfY=iE;xU|$(Do6bauYA&>K*+l$L_*7y$y{%>?@)t?uR^aC!j}%eTR-|LpoRl zaYlp|b74einYoDMR9~JdLI)1%nhl|L2FCXnst3{!zGy{4hgfHza-kOT=XO(puv>-v zoxa6geEsqAvy)ec>hjFEM|=~WvTT}{qz!iw@46af$(lUpT;KHu%A6|w_RYi1RL>WkXKz|mz2Jt0vr)Wj3&#i6U%9AmAsUX~Tj$m29ssix9eSm-o&v@or33A&|eZoFxKnbSP?YjtxM&bI!K zdi5vK=E4o9dEL9#v{|2Q^E))9bB#;Ct~U4HPMe|9Te-$UFDriY5npdpWsdU?Xd&zgSofS0R7k$g zX6ADam}b#|)LZyh$#b)M*NW4e*$3GAqRd|JkP>0VU!4)3_#eUkjPG-1Zz2ePy=lF& z)tOD~n(xJ)%%v9$;yAsj8mqHa4F`z z_Zaw3sFcRnYw?dg)D`|Ur4Y-y>Gwbc0IJPDj>N2{GOBg|=QO!16B5We4Hpt2m!2oi z&JSM{>!t5Miuf`wG4nkse^xHly49L1MDKu9 zEJn^3gk>84p_qMO{|PB&kwH(IpW4FWq<^^NWq;@&LNP~nX>VD0=E!UU<41-{a}C(N zpzM)xpIbwih_GL#IQsn9FU+X;{xI5`u%uhKU%+G4)mVb0KRQBEg_e3wAI(`dg0xEY zIo4XM9i!@Ve5O86e--!I$?uwODi(b*X^RZ-^OGUeAng-nbWTAUG1}yn>UUFUbVl84 zv4=4*L@gg#{Ev~uB8-ET6~(`qH}2=nLr#!nG~6NFG`XitXL9}ZaV!8;E91_aKt1OT5u9Yov5B zv)D(pU#0fJD}NY;dBW^0B{ZrXFaLb#P>(w4%b#45qFS)cx!rB(wpGv$e5@f-Q+x~` zKb871mU+8d@tHm*%kk`wOuD#?GXL85KqsrUJx#3J$1CqZ(LJTCzP+9Vk)l>cdn_eH z1`E|5*2CBofq`Z2PU@~zjD)<5x?Dq`9iWpM*$^z<&_h=ig=ocrR;sqp-e}w2purcb zJ!NbSCj$joKQqEsV#sh5<%?9_b?`-YHC!|{x}$n1teMhf?hry7(}hyXXj=JniIq=C zO{vO^`lH&1hM|((aIBt^D|-bAPmX_1dP0%A`(!aF zSK+P6l=wy}Hyn8f17bx5=7-CLe=W;M86d1sn{*KT8iDBPf5SlskNsXnTw`nT!ZC6k zc~Yndz2cF(lX8v}F95@+z$|5_sqNM0QhW6njT0mp^)3DzV-zxDguwSut^5?1AHC zRtouf@k=(zX!`moGy{GKp1U5(v5d)D-%KWv10yZBz@4ewLJ%dubY_;JxS6|R7BNa0 ze5iHI#1+=oFK4AvB`NJrl#e zYrwJ)q#{Q)AZNtRhMH|Ob56GU9jPA;nIz?s^fD6-mFqr+ue<9Cg_Y8J25spT^4E;C zH+9Ht-+51JE+hcDrmAajV*1YdnY<~^glyC<-=LP+pV?YlYK(Vk%lWn8`yh-(2dZSB zaz*8XyQv)gvJfDC^MnV)2L!)#)dky2#>s-v=@!jJGzYIw)AY038L?yJ_GhK%-qaM^ z$4}DNXd-$d4_XYO(s}n~2BV7Zh@Af57eI1&SgKE!=}6Mc8m>0dM-bfMmpV+$=XM(q zNis%}OTJrlf`K3`kl@DE3*ctUUqhR^?y?hs3?Q;%X9PYno z`%E%P`#!W@W6ME2=NU>gv#)QzK!OYnnOYB2o*U}Z4M!9N*eUQN~EGz*DW$-8GW`I-nyPWFtF<+3zUpCP8Pq>k3A5yZ8DMdmJ zJwfkBTmSJz)K)=lNulQ6)T=xA1w;s;9m#nyJ_!CM3jG{+DXzLMyBqcWa{`2{wOe<} zW#04{c%SL9!u@BvnJmZX?h@|e>(hH~@4DfSi%O_gE8FhT67feJqtqpTq?{l11M7cz zSa`?(a-V*q-Y?<>qgMms>w6xUz)xT#r{s=ZU*RGbp+O#JBoV&|ePoRxX%nkAn%Xnm z^H0ENWq2n(HnYj3Vx1RN&j*ZTw4um|Khh=fpvgUl=oQgF%F#Whj1#`ISS3Quj(Dr? z#`@APyoW_udmYfuIX9KJ3~&NO7iJN`9op?s8a}gNz-p@7IEfUbq`e*%9(N-{W4!ss zt%*)PiwlmSXT{E3LrR$3PWhU_z6H>6}%qsY&xUaP-2-tW#RL&+mx zq={!F^}_$aUe4-C$`6bZN4_d+OJpr2o6BG@_wZE8g~#Xef1W$?=5DAkl70%3G-ov+ z-20AQ1|jw5&i(DB{Q1@DZt95ouGfyOGgWe(N`|^Gx&1*(s{7~m@U|ryRHC~Lv9J+>ET6swW^58- ziBO%c`4q84s=|7Gsec-Nsx|U&<2$NZ0ECFAKaNE^%|8epg!ej2Oxq0z?-f}JHRR#; zKLH5vQN1B?K%f$dRI|TM9r;mOEnA_{E(MO6JW}QBIxE;MDA%V|((o@T(UZ;m+zy;f7XSYbBQFDzzS%><$P?7nT&y zK*DEyU!F4wlK6 zoJd&rY%pi>z_ck0sm=V(0@_oztR2-uYKd0IDSNq?|&KfpQ!)Dwf#Ho?_tDIk#kSAEv@r~ixgQ7!+S_GftQPw%#U7)b&S{#Lr$!fdtA zZ?1k(I8oaWIl;ngI)P~--$EFZa!YyF@<+|2NK2!?ElQ^{Qk&kq>C^hs`EN*zInT(G z&;}#N87a`tVz;1+fVltQ;nkarRm?#K z&g?d4{;mUiM2Cbvnf-N&x#gC8`V*Du-J!u5&*vs1>y3WPEaHhp_YZJWSACU- zL^|Bsb^C!wop$JS)fUsaJ!M|!zJS`CCjGTO`lG^P5NMZ3mnvws;r%LjTq?Sw->Cf! zl#DO-H&&d#InOPqI=VnWl6!lr` ztwznbt8g@6ZYwX&B$UWlS{q)+(t6=lt0*E42hIANXxUTT-ReVK53RI@+|XfmU=8tR zc)rcKOW%SmHR6Q(8;==+K~DOgcUMu=cZon4p$>p|^J!$A;Y|MGW7^x~wNeoo1x>?JE?X zyGYX^^J4%fJC{8_@Sf2a6q{-ncJ5fH<&ZYrM=##ThSSDg(yT9Trmf%&EVxdrmYQr$q=M9k?A$+sz zs%+^orgg70_S=kZ%m32yXM!K1zUhBqbSI_|*oUU&1c43crlx<3?Gim~=!z%Z57_M5 zW#=Hh5O$U{N_YDRMltGh&*y=${MPe;L69szf2`+Zj?IQAlk>+ajd7+zdozCJw^}wJ$Um!+c|RKq97-q;!H;^N0a5EPiVs?YV|U6 z*csDW1zJ^c3k4)I0_3XOK}iseuV1a_8UApWk2%gQ9=obT&YJnR9N1COlm11znh!j( z?@jx5r2R5g=GZL`bdwOO(^rq_ zo#Ebv?O?=Xo}%b!+KDJ!S6;2H+~fF~Ci#l`&+Q0};{(t1GBa47TgAa(ZoD8J+!>dp z;wN@X2WkwY{|0=2#Z}c#t|G+mygz4e$mFs{n zcw+cE;ZGirFDK#46?~86r{izve+<4$1>Y}GAU-?(1YdJ=0)LBN0=|Bo;9HL4O&G{F zD_;NZ_@?6TJJW%$|B2!2gg;gYeWxYiYkLv+ZYKIVm0k8-`k#XD;I+V~{Y9T0e}eC} z4GH`e3%=)Bmq~?h%zq5NYX#p6L`R+gzE1cfgPrfy^$GZz{s4UEc7pFg*2e!ckWKg zPQsTf_#Po9E){=6KLdOfopb}lQ9cve8CReNVB%)DPock|+4(W5S>nvq4-Q%qV@^S5 zZgVeHo9<&5VYL3HtNF96)BGLv^%#%xVs-%yrNbzBbB3F$=jsRTf~o^l-OB#8(^U7D zRQKbZ>eg*~%`(M<;g6Hy7xKT~ZS>;R4fI0+R5#zWtqdb9!8UE40Xhud$X;q zjB+eLl%Wrs-+b@4*!)H&6j6@jl;j8BMJfg&y=e!t(gipD}?g_*#8---`;NI23a7KO8y zW)Tg8gQKc9IV7`^@o}LeK7YvOpQKE06GIt?uBSWJJ|X0$9=joQx7unrdI&9iDfF;~ zTH-yyU&B#h&L6r^AVx2KpY>t?Q^PLmsQ+k%Ka_1=mipOs<9~YC^|6(vvMqPWch$n- zkqt)=n@V=;dGz9U*@AB?kz|_%;HEN+D}rl(cd_{I90!8wAs@Y^*#KWkE&VxfEJ8b z%ZYFkDJu?@j@k(cncdV|)_SqT&0M%q6J(O0Kds*krOEjH$@V&5(DE!%9jjORLrZyp zOEA_RFTMzy0Lt1&t`SQUSt!5rk_^_w_(5NP=Mx=b2_0mOtS_#RB>fBBOV2-1wG-TeZWog($De8Gt#`9f>*<}uRw&TNt|MW!I9jv*DE750$|p{-zC%OM1^)e}`# z2a_E$BHTP>@pX0|L2?2J`%bWZdGK!cNx+$&BRw$t)w)PAh3;Nj*aYuYs6$l60mW4`x_JZ2v zY~G5tc^2!lTp#g11ZD=pZ902#dcfx1kSSbA4Em(-G#ZYMeLhrrv-!Bsr0}rkV;_O) zN>ZOY3|Z`LZtymtD$rl|?*?bWtJ$eZxFLQ!yFLwLHo4zEhffxFF;tAoGL6b&jSAz_ zSXj@8)W1h(tAu2xEyzF%Cq`qK0KHYYk+6NEl2D;i!|J9=2<&Dg{NEXStK~p4l$|gsqwJx3<9oAYIoiR_CbtXsVv@WCl%920UeZ?qzM)=MH zIM~WJPVG^P8G%{iNythr^Dt5{dqmgbLcTk7!wim+M4E#yoozgl!jol`9@<*QX3cax zCsg{@4h`Zdyzsid+gDabtJ=BnulXl9rFU3_lhCzcyUD6!bikw}~g?T&{-$m+?>Cd_O^9Sw^jv zPS)gJ+}-!IT&9+pZTZ78Pmu`{8ZUxCvv!=4s%#tW7bNBzAeqO5;ZL3D?M#*{3XAKP z^&%SZe}S|jB4x7n;&OCtBK4z=BV;>HlN0V6KO-=^wMj~~%pvz05hxYeBO928P>h_s zQ0eX4L?C@(vOFrx;B306&Ive5-gi+-)dao^zpiN`zp)o*2O!WVnol78YlrmF~F+5eOm=0?Ok1DWqGlC zof>^Y*;imXPi0PAkv}|fshwL}s~MJaHLQiFFf8z)0unbU(Wp>^Mh%|9iV|@(QP58`Xi#fGZKc*)Y_(NP5Ct(|6Ue%*UC*l6Z}Doq z+ImtBYYA8aS}lhMN)NB2sz)VmOSvDgLbJgcQhJ_$pP~IzGD zz2roL6rs=iF=EagyDS3VAsg~`IMI(fU3<1+N0Y@(R~=M<0^gb4mxt628lODA48c2Jud>%Bw$?^ULnBO|+Myz$K% znH%%YI(ja=>1>~!Z ze^xeOk4*sgF|y*1C>}K%-kdP zN_dX!UY_7vE0*nJ&v@(`mX}#rQ^8G;aBBAiQ#-p)JT|Vo7CK5Yk9|quRh~3?{4Tv8 zedFJIeISt%8TMs_Nj2jAErt014Pt`!_wlzJz>HvfNa0 zqeu3fC7JWF)aT~+5lmX>bEf9VrC!rYo>4h^x%MC7h(Y3GnB(;PrlXst^CH9Y=yhKX zRAco6p}fzB&-ruaHGM1Lj|A+3kBEtv=%U@yLFX#b$ARD`dfmOsX!NmMaOT2u?E`PJg{cN z>k~$uB-TMIWp+RDbq_TeU1dk3jmh_r{6o4lw?oKu?JNy>Zj1nG0D zW54Kx|Wn2hcid zysYJo7usZI|KNB}#^UuyaDN+WR#)caBv|132AF20uGnB%7;Wto!ja~aql?Zg-#f!~ z$DLgq?ov}h$BR^7g`kX9#mu5}k0e{TKN-F5Hy|z?O=D_ZBU+c50^NQwe9lvundBMI zgDr5y=%TNQGOhiZrZ1>%Cu%dgn9xqLMF%&sm;%fF%$JuM|g}S{wfy7AhOVIw+!M z{zH2xvbP8cnp7MS>0C^GYNxReHw_Zm8**R9mB#5*C^^)RW= z{A4>JbC8ut$)8EXV^cZuO5Aztv-HU zm*bDW$zDF*c%N_|U39Fcj!r=Aq+=jp_KCDtp#h(;hq&Mto-)v&PZ;^9@pQXlLjGrU zsYy@?Z2QUV0PLUd(zR6NiBCy-?}#FnyL!Z}908 zmF}3x?z_Zy!l++{8ZJKs{iWK5{S~^3M+-;$S_nY`I=^(EkNiF#S3j4%+SZbr$0wep z{Y;A#S6=!{ybL2cE5GU3rs<2UreCUb>I$&^pW$=mp$a4mH#x+g9KCSffuJkw2(I0%r5OUAI3?Z{O)1lqfp&N;JDW5pc zC!VLo&!Gm_sKiTs;zd63coMNsZBp`CKBX*{TlM?_QDyMCaX#q?U#Lhm-mfD25-Ir{C<;FHw4-(&NPU)GjW^J4)@Gt*>Tb`-mf3z{)B#k&VDfK9sY+k zVZ9lz@n7EX4Xp=C-6RAe{C}xe=pfeOAd$~w1|tHN4H)RbwtP#llFr~NH0 zchID`9swol6mt)uz97k+Os{pWRT1>EXOK4evW24mahAH#J_ID#L%3X>5;vpv30+F=Dio)eEP=_=%rN!PC`WeIyaW&DAUv%%v{mWzos zCA1^dyV0r?^TUL%FK!Cei!}=5QW@eYY4v$M_jI9*#}<>PqshMk zvb^P|Ec;h?0ok&zTxj?`s4mg0drX4Fqow-cX3#5eRmk53$WoCJLl8(&UO#45 z`ie6^cpR`~Sko}F>B_@#&~3VssmqH7yi>ilv1k?E%R#cHFi1`**3xX#_7x%3z|qC% z$5_Qcktm7zS_rga#)vMCFkHch#=lVM(2Jx~m$~cn;=avYa%qn*enu5F4(@1Dfbrq| zB>rF}=-`K1u{o6?t#)_?+V&9lLQg24n^jeB8*j4Bk9*q291P+1TzExoP!$wTKLPd% zEn^+&sGe$IbW~3ka6x=I@!0TMqkVTu@D>AasjQ7V_hWF)19lP0s~=o*cO@dO`+h&hi3X)wrtl$?=%n?RJBB0Vc0IC-@D}b)YIYYBw zp9K_D)@A$D-h)-G=S~?{IJO*VWIK{6K;YYSE)$0=b+^H+7xRCfJ9V)pw(5}?)9gD7 z0P3sv_XD+Dt^QZzb1DxCR3k8fcg2}zTSel-HB8*6O3YLXCNGsblbJS# zLvb79fnIP`c4JkSi6H>?6njL$KxBj>V$6_Vn~31$Z}kWk8sfa%#(}2;+Ia0;=o3ut zP~gv81b6M41RlOWdH8@xQ;Ut%iQ)q^{l6)<{deBlnYmB}0a zOca2ftf#mRGfYaEmxMwf+0OjVFd$Y*)pZ4n6+pcbR1$_ViN+Z4Jf3i(-KsEMAI%vkJ28$GJT#dfy>TVOHzc~~M)?QmQQCeShMDjz4|{S?O?_oh zH8)K{b@Y~wL4OOX`ZeyvQ(0FJ5Jp?_n_{m&B(XK5x`k(MRz=qHm2VqZ2hmsQZ_6I! z7AyLIK2Wmz!@mEWYXEDwWt&ZuyW;-vF#nJAbrD}s!;tvvFz*~XL~Dg2FXn~jl>sJ5*Wdp08q`0dR&k&8*11 zG{#;w$6P(-_;8O-FuuG$IRgTurfI5as%n}VzK<%fG@qi$8x;h)Xv? zbToz>-m9@4>DttlU{#9>tV3h{d}A9<7M9(lWL8S$91EVA)Wo+Dt(6AmmNqp|6aTCr zI{%kYPiVg+g16peJtWjG+A2?srp1qum4`i>7TdWQp0;bAS^QTdJSS+X>MI+I$0zMf zR87^ZdIm1Lr}iXD^ru*VcH&RYzQFr%(bjjVbeX2tl77WZKX-tdZ&4d?m1xTw{92zb z>}XPh`T58-YtQJHeoRh2rt=njOq{S=E0;-rUJszWXvYu|$n| z{b#}c($wpq=Dfy9S^?}1BMZ`QUp5Q-JSvhbpbhDYRqfa8r*S}(u(Wcgukm^#9Q@HX zG%2oo@kgpr8f`qlvJ^?Upa4D>P!liMxMbeVbx^?jOqQUWAw$+0=Lr6tQ>6LYqI&r?G~e zQ;&W5q1m_M|H;2%yfT+1)oqrK3yq?z` zN~b+S(lyEJ(*h?Ixx0w2fY>~@TUS@wkRZS_)WrvcU5YLuN?0G7>EnE9Z>efpMa`;t zPf#fq$frG@W9u<;@kK1Deq4Yq$i1?W8PoXs4qt|}RZYroP26s-(Xi&WBHE5AC-CISUTFu)@xpTP63x{VX~qM&S|z_)Kf*B@i5hMBQ2d4HdQlU16N*<}%KJaZ z=I6z?c1By&$PGcN7N3r1d0gD@%C{GoA3S?_ zEe$H3DtY*&Li)Te+M+3#Nq zQw;a}S5WimrG9z$Em^G5LAiK3BzczFoT;vOmW1IG-Dh z?`7Z(Ym!*!B=xPBlE8w8ZS2_mJUNr75n@>`{EM$H01G3q*Btr&0Dtb#?e}$Y z5VHBJ*~aop>p+`-*#jssw5!CA^Esk0lwozB9KLOd#(e~zuYb92tsU{gd%61mKyKvd zHlrGZ%|K+TVHm*+OlZ@XfgKFDfA2e~)Gj)mm z){y0tQ~~e0eTGgl=hh$@TSS!KUk#c&^O$zg`C50@rRL{p8%mFIQ`yL^&_`AK^dHr3 z!8!0x!Kik;wdG%n0yOoB`D<&r0DaWjfZTN>HwLNU1M1}Ae*r8+yUS(f^Id2A z{qFS9LUFFkp(cYWPi4Pl)u2ttvdn>$boW<~GqH7v0CNlY*mlg^Dw2$~ibjit&C<;D zKD2+oe=+0C-dtR$?zA;v7ryg7zFXGw4mu*0hjZcL?&n~9(*j|fsLq5|jY7U>;;sfD z(*M)>Rjyy|xe8GGT`h+r-966J)oSa{{5bpdfP0xu@az-Y(w@FO{SD}Y{=ED(YyOJ@ zobjmkv>0IC<&=)+uQILPY#n=StNkq1$~Z_~t6d`Tr%xMZVu7x#i7(c2IPaPt1fxFl ze64DAZDLJrv~D%@QQQ6*B=DyoRdB4v1nqYveo<&1Wq!SO=3yE!GZQE-Iak#O$vdpE z{8zb#a{4$fD)VjU=sTS@vx~1#Q^rmFrSzvpA^g5_PjA>SlK*K9oW7lDs9~B_n=2oov0Y#kM);>v~IZ@$+G$x*&7Q zo18J?aN!X*2J7CD%i^d{g4E@e)ol$!hO>J;`0^FFJ6v$Z=pZ%aPT9}fzc?-!`6>n@ zlDE938n|z~-K_i}fX&YcZsh9fB^MBI<@@E3>85-cVlWf!r5YGKhQI1<@W+`SZv8de zU8IvY6FnwJtN)Bd8PDLlXBdL+xnw-qZT@%IQ1*c?1Y7;zrv5;fsurelU$qCx0v4T-&^zp*fy=iYyWR>qg_&yzIR&c_14Ce0sMD&e~F{S{&m zZ7T(3NtnxbrDyR(c`EYJng|b@y9YUf9*=DR27kcns?);*R+kZQ2ao8N*A$z6yFfWC zz<=;G))Uc|A!;Qad&z&j4}7lQQNl!IB~dy*bTkY#6?uO1&g`EH$Vj_dAj6)jcFZ@w z>=fL2E=#|gV#R8p@xZ3oAPbBn-)rYGHmQ;g{B*8OM$RAs{RUgk2*meAMgyUE>!(d? z5lWm_Rgxtm$%%<(Pw6g83IUCW<#>c1h~-~!4&%bk^*`^DNwI@C=KiOm$O?&|F|_7N zw|dHyoDtHle!ZU+9&q=a&$z$nf6;$tuomm#8^CsD6Yok74(%s#VfkRc zCGRewE7|9|W_Ku`x8c8-!crraoz0_1+W(!Q@?HG*kE-C=?h3s8dx~xX13GkWCnp}e zK_i!L9AZh4aKY8t4&k5@o9G z?}t&l4VU}1;g?;+zGu(y^2HieoZS9?=6}p;@G~lLx7{R)zKdX9!}T=q3QDsbWmNxW z$q&Q*YfFA!rgD4sx{dvi!ux_3H{erI1O`Pj9d=`5`;f;^#^VRJC`7`)ie*1ccg~ec zqu|8EW}TNwnyEKE!7rt?zLQn2p{S<$GnvJrt=E%39y=1s({1^QJ0^=UCgyUODGvi< z>RNr*_|4W8dm_$KOO@ni?7>@liC1dc+L(GgUA1(om3wR&Kk4MPf+97gGjWFk7!(_K zWo>Py!*oMoZO4h;mdCqVx&dPFzkJ_K3&a1N>!Dfdsrf$ivjV~@mdgV2awq>uZZId-!)}IH7 zKbiJg@?`FqEGC!aZ@uWpjFPpLw-*&j=?|LH{(7&;`drLI+aDW#51aa;`@FLG$w*e(RFWYO;2ntE*~OgVB^` z6w9x_e4E37vOc`Zw_Nh$u{{j(p>>I(3W%q*j{DufOSba#%RDV?e7dWTY zB@@;S9pXyfZa7LVQHxrCZMmE?Y+B2wBB%Yz9|JsKgN76fPrh%tIaU`dnIj;Ew|86kr|x02KD;0KaP$a1OBGxlEB3VJ83=@MU-l!Jh;C z$F~6f{jPD2FHvDwg1LpJB4^w=AkSU@aE=U;R(J2-$OT>fIa#wr{ki7hh(L4S-Ec>kd1+~dDy&hhW=<^RTMOmM6B8fTwDg;pyg_3c?ypR&GDJ2G z(q>LLnT%L;;;+^dORXmsp|%#Rj(RA<`M-7BqO|$OUMR&(xm2{`Uc(W?ujjf?0ct-2 z3aRxJ;tv7VSb5x73ZBD_k#p4m;6MIJl`zQtxup8NV=)Pu-BhZ8YE z5&QUvT@NFoToFTk#Mu3aC?mqR|HYrJT)$kb`-hJ>=j&u+>xTEye8lqdu$)^>MDCco z$w#EvHs=ekloOG)xt*f4x$kTOZm+)`Ys;ISFEx1$P5b-NmYtOfGns7E`SEqwkM>K5kcw9E z;E^2-PL6n7!DQ?y{lF-WqN%2z!zecKE+}+*FY)o%x2_L)M5Kjpdm?WZ0k;Sz7fc4? zy0C>HQF4i@v9rMkS`j;lg*Y1aoOm^o$=y>-k>rSDlrdQp(+|(ToEKD$m@>XNui?OS zQ|!YOtu?T}EX!0XQbWAE_+SBU5k-|m1oKhPivBZE&6PyyS}=dGb#o`eCZDfW0aoFN z@_Kg5+=DjFB2#yQ0&V%T$7|qG_$hSPzZY5Zw{gd%eMb z3iS&91vXN>G(q=nHUty>?;QBgwnW$C+veYo`hXp*y?(9U6|AGxw;28DVchu%dEyt6F!(b3!r`J*Td^<8we}W_|^T2H*L> z*MrKn5OymEeThSD(JEMGThXr*AY)O{@9g7l|M7r*+~hx={E4z%?mym7>*ITT2&T{) z`}jYY-#7HYj1T(pJ=a8Z&-o*B&Df5}4QCeTY44bUK7C(qwSgEJcenpg4M3fSvKczo z22c?)$g!=lEHoDJxT5*~0k*>PUA)ehFP`5!n&>T^Mq=jb|~bHapH>hMe3=HTSWT z(f1m(Ko*?q$(W4X+*V>Y5!*u-6rb@DD%wNeqWCXpBKYoV3`1;;APL5==4{Q#jqJ!2 zw63|PfSwN*^y2}2(^b~}Xls9U#oP0=ru`Bk&YyG0s>movEq_&HgnppB3s3eF zrJ9LyzJ)QzaVqFZ;VT~d>&7VBT@?ngb%X{I8IQdQKJyxP0n97c4FIW;$4KJ*B99!$ zeo2sosU*0Ac7m_OW61zR7E6(i$Q(lY7mxkis)!PIei%o2HfLksmK_#X9RIQtBd$XRJX=KVf$N}3~n_?|&zzHV%XrJ^w zV-oe3^^{^oPfns{ST*a1bsQ@;CXgukIk8UryP`X|LT*t=bNzRwPh2C0f9i|s&;@Gl z?%e*uue|&jt2QdNQiO$YW=tro4$ndaRfjk1#dFE2+hqD&Qbtwm8JRuAz0!mwNd!DV z03_y$@KL60|G0I{Y>v?4Q_osvF@>_joX%Hy)F+x1r3-MABc{*Oe78L655_Rr$lN)F z8dSz9VV=+Kp&htq1j!+|vy3=cwNM-*G@2w7;P$i%kT{9>KWQwP+|1uW?cAF*xWi&J z8#$a%FE?XA9oprtF$tbtbW==%vwVIiIFl7*7tt+K0Q=soLFji)vHr?{D?=)BJ_TIs ze!_tlbCZZb%o&3Ijpsb-P+O za;~XfATdV8?vB5Q!o*D4nS*+pIXr)SOI_^cBa7)|ZyVmGSm7_2U=2~X?tEWSwJaw& zhmIZ=1G&fPGyZu&}YLKiC7xDvJVfCZ+yxmG7IN0Y@1#Q5apU>$n&>ZZ}&ux z8HF}D6IyZ07)+BLZkf6%2SS7Y`@`{;;#h!zBG zUt_ZZv(ex9o}ce-OPIIS)4qlWsll}pH4)J$n2h7OAiw(v#<4m@2yzVo4%dVNw==pU){;7JHxl_jvOd*C}Soa@fXMd4CJ|@?ZLY0&27NSCVK!v z%W$TPwSA#KjH9^6nRKc?y7a9f>FI;zMmN2n>bb^RvkStPA}3)#P}T~vRg(P(<5fX| zjh#Qfz9VBGHG`BhK~6ny34e+zA_s&Z^-a^pGhvew+N~h5|;tW@s>a zQ#v!8cEsAVsp=&h{y7yWP@Su|g(_VoP&8wakM zFZ+Ie7}dGF&61jauUPheYG8k?@4ljT0W3q{{suL>&dVvtB>=&wjY0lg;V$Tyt2q7R zrakqIWKe!4uQ)dj2@;PjCnfU=e}FF9`T~JfbFF=9vkF=_U0s@+*B`R!wmFEl=cB*h zMpm3)if5k}M1S{5(9uB;JA>%>Ega(ek}E)h_IC?#!dMF$rx(>MKA7xJqaEdC#{{WU z|IIdTb+E^$!IqbUK_3MhxT%JhiN83GOC661@;@P15VXHl5RCe3b^t!Uq~i8bz{zlY zvs$Qxremu4a$bZkdR2;8s-WFim%zh>ZJoD#%ol&RjJ-DGTI3$5sf)8D_{F}!E^yxj zBvm3cIiHygRUp*FdAMlT2;^dBfO%=oa-61 z`Crz1{!@5)F@?E&lKmkSb|rsBUFqw6Ln}YEcX<)m(V=~<`7^P`hKSa1tFimqntiF_ z^f-ioj^4boWmCf&y%@?pTBMT)x?A?#c8sn9V0tmS%#0l}xxV;Y{EI=2qj0pw{}zB` z3s@={+6_?qHvDZ^4jgyL_R!q%mu;Zw#oyF^bl#&>zb&VO-x#~Y@TlSX`R{htKI+4F z$ykY4_YUazp)xtvQam0jn6^euHPRyo^p__)@Gr{^Dw;A z-JhUz!BXsX7Nxo`xKO!UQ+5vnR`$Ve3ibGVMm_0mKS)I$Juc*k8(-_YE8%9ov>bCB z03;6le8ja<9Zf>1{>5W!W(%!F#0ic1myHIg#roj>CN~a@GCX-t?d;tw*d+<>5le=N zmHzK46jO|qy}N|&Wu$-SdT97NVVl0e7fclL#I4cBtYtI9`nC2C?LB^OKKhwtPJe5c9-no$TFxzJ+%G|R_77H_AD>AK zC3Q>|4b+PU>g9tKo&<^h1kqtcU2Qt}cVvfpyAfaNqEoMA1zmK^1a^YO1kv{nCOm(z z`};L&&{l^$$B;}cB(5YOE7T~fUiHz!Q%Ma!G6{|TG&7$ZdQF3>it_gvn3pVBe1$nr7`c@Sn`3Q^Cd`!e zY`pk?LwI)RaH8BHe2KJJnUPicH}IQgTMvOxW~WsyPHw;|k>)Y&@oNhD|Nc<57oG4o z+yIUmH88I>I$^V}bY{i>XV8i1J<}+Wor+x83D>tZ@~S^TfMNR^nK8HavGVuS?CI|* zF_vER$4Tv}=JM$s5f!xFB}?9%k#iT3e(W}#Pun@xSm_QP!=Q-vm({Qhg?(upds@k& z`zVwwdE6H*>WJuD|I*ohiDxlulw1S=)Kc9Mxe!aB{>5WIR;XdOj>vbzD5|}HpnDhM zw?@vQ5%-zl6k7MkRRXPpzsZqqrtf8pi*zNN1P^DFYsRYLApZ3I`ZfGSTYpV39VD(- z9M{p7feJT|2C|PyVRoV+-#o{2DA4L3_kQ!wyby|9PW6HB8q(WYo?s?X1NBlE7FC#?tl7S*Pd_b`e4UM)g zRx$(0JE&&`LPi-6qE?$MCNS0=wV`hTCi>gdW^-eh7#wpB3wKRr<4`B=2049cQ(V!> zDe#?}+7!(e9JUL2Nu?rx?#?i&l0E%~GVB5(6?gZK$Z9qEw;L6yf3B7((9P_rX22DeF@~dS0SSyNn)H!L);H3 z+}l3_wxhKqQlnVo%b>|ho}5&vGw^ebo{wY_c15FAD^maD-vwQBlnM)$Dv5J)y4Nsy z{=i9*KE?-e^Sdh0s^bQ?QzKMZAtq7m_PUeD}wdn%TEBsE1LH zzK)uD!IC92W!Z{ked!8tI1(FakTq({k39G!Mphok#t-ir%$5C0r!nLpY-hKso^5nN z@&?6o|A(~@2@=Juml7TB34CjGXr}@f>Iuu#{rR`Q$6ritADM-$pA}$l^!AzRY@+Bj zqR|gg$(AU_-6-#zRBWXHI+3t3pqGx}Yv!dn@RB#=398hH-%aNvDNC4L-8q*~b~kK1 zmj6EGuTXb7BkhF2KV)P{*DC1{s|v)qctW>eU`NcEKEhKm9!JfB-T3daR-rnlT7aMj zUkRzr^Z#YPhk3nxF+gbZ*IFu5OZQx2Kpdm+E5K+e1N8O4kFmht>lZ<-f1)xdB+p$= zJ)X~G)`fh=>?1ro*QJd0qMR=I!uinQh;3+mswfo~9Q}b+P7}Gph&Wi#L&|t%B`wy& zb_I4gCccqXz3AZr=COPCV%Z!o1z3C<9$;{ik@1(76zM99>j`;}w^F_l4Edy(ew~e1a ze=S?i*}u3}JgV@y+!<)N7F}03;AnY_mO~<~(VJKc-L9-sjCfkD0ZARIIMeh7Tw-CsOrhcMyzD6B)>4+(Dl!rD}6v zAXe&_E~=f-sA&>eL@&KM)-c@;+`J=Q>`r3!FCI%N6m5Od`cm{rr481j{Ls}1N|5}I z)?N*>KBB#4fbU^m!@JoljF_w7O{{-^AX+JhJZzB?IV`N)HeUAU1NHn0o-OzEPZ9S3 z)CKu5^^!M8D0A8+al1)p&bsvBtEJf&p885fe)|y<#x5Q{{wWhYQ#6Bip&B>ZM~oYU z=-!72KR@>(Hm%uE=+bf@Vu%avP-oZtVf~vH0=7G&5$g3V-cP%m=)6VX8<56{V$UJH zSqJwUO9$`2NGjRkq{*pq#3%w%JajN{KOvw^2+(BPaui>8@W7k8=zTf6L+*{|!P@__ z{~MiGEtcBreNXimCLo3nkxdmRz&pK{&nIW_7Siv$#$oQr?~ABZ!q^`~HI+TKqv%Xt z!#)OTok0E5G=W-FM!c$KM=$NqCUgJX1MJQH#5M&>e-ttY^fa8)CGy1_7Mtv+{;BT! zo1tj{H1aKWx8VZI#TxL@4+2r;E0?GOW}~)ga#x6zxzYHLaE7Uc98X#fe361mT^lyD z(hXCU%!o>yANhZQdZuYJIjH(;W7LhY4yrz%=k&^?Ih&>~?@ZV>gY0~L(Vn-oc;^D6 zS+rk_tJEG}A{mj_FdCUC0Tz$#ZBXH~)~s)>^Sor6iR+253zvn}W*4jLrDg@esvKD= zNQoh=T`gle-a&pyIr_r_^u50IVbfWgyfn2iwPq%RM&$p+!XS`D8jcM8IDSaLeeixb z5w9L2_NVpJUJz?$915*qfIYDy7YwED{O3H>s1=H1FiJDmZzqgQztZ}=hn8eFNhi59 zl>abZPbqXqa_zb(+bcls`}8SXpHq@P%SeFKDr<_RFB0U3LS_HpQX{m7P5J@n^VpIP zJ!*o>!z)0ge=eIY$9eanB%tsb#1~geMnrFJ+R9I7(GRFGNVX{wg=+W@_?kaBNEGlq zjrzZUP2s-rONX`Fml#&=UdFkg&rA$dB`&Yh-qD@e^tmCgsk5^-v0KpGzVIf6PAzs@ zJNhnd@@K)-(l4wnyP$&C^sq^38SdfJ{fxQ$Gq!vkyK=PM*0W{kl6n-_Ers%TWIYY{ zPjr8FkMZGbY^vm&)3kAg|Imy=hI&J^QNLe+>iNMggXv&4fXj?qDkv&*msX*E{qQSQzs>sYtV&zbv78dr%S2Hg z7o%XeVuRq}F(s{<_ZWZu2?unz8&P)v>nPU_WqR1IAh|O#(!jBTiMckN*c(tu_gkC= z`kEeT-%M)EFDM$!w`&c&n(Yecf$6vZW&f`?<+1`Q*ybN={V$ z+}y)G=fI;KuUghz6W|XmYZ{Al2*2Qa{`#3TaDNJ)H2OVH8_iD&N*{^HfLjmiC>d1iZ2^p>~5c>MfZ754I9 zXo{WsUBF34TW(ca?yQDMU7(0PzDKb*EZc_<7%)ga@!(W2Spis2(dpdGt`{bXY6&P( zJG+OdHx9!n@t09WkQjndK_$sh=zhdra$m$m$xk34_W^?-JXC@Q{|rJkNgI`PlU0g^ z&egJ8MC=M;k^jqj7vYTHn<%_;Z1nPB+@m>!xkpxpXv)0PWuWr-(N1M=`q@So)RC(( zm0dIriECvAepp;Jj!q}-pb&oE2|KIv6>i>sgvEJ4X5^jy2eMep@%c)$2V)8U@B0!j zt$^X};CxgM{XuKpWTFkK&e_+ct=&lPr2v;InITOzH;H+B{C$BxTqu7rKyi%{NuF_H zrsAcy6Tbr)H8KTo^6(y#Xa(4^I^xQyfBGE#>HNpltnL!)*#i2>dA@!ODQlv)EbpEL zpuB5FfU5gfA-Y0Zlm$z^D~VKSH(OkJHf%tsJh#U0XT~{zc1oKyp;>mlV0G z`uz3u@eg&QmyV!DCLe^#xanL*EpnNH#oq#JN;pnmZ+`nr{7bS&tctvQK4vs6EZ-ua zf0k(lAEIBfQRI(&xhPDX!nd$K1V^=QB5nP3fQ8DE&fNWQu()dy|_F&NBT#WzN6tC9=`~GGQ9J z<&Q`uw?EW+uO%;8$PcS!CTd>OlDGB2`GJc>S;f}l3QTA2p>uNMovf*(|Kp~G_!z9z zU&;IO{_rZ>Vi^&0=FZ2bhuv57k%Xox-fDf4xxX_FyYas=Ch^0?M95vheceYi zt|G#0q5BY#X8nNF%Is!+?TY}k@wlolFP#fCOBoV;gCq zc_}TV8T-`u?m0^KJ-6U&j}JBp)?gQY?+4VR15^K^Nwmx~(tB$KjFj27JH8aAS0qOK zov6;DcYT5}-^Qz4@hcLO2rk3+QWB~E9Oy-|wm!OOITbIaT7*#1bzD5krcS#SFBM*| zdvvP^PrBa!x+|c5#={pXE3MH9H0oS9#FZfxL|adV)VK;x;uZoqj4x>@_0m7q%dx7V zydtxKG_>q1t)4Fr$gRH?P?_wI_1GbI%PIQ%(2P_=U6eQb$p4=}LoRPa47Ooa@=#}I zTeF5)LL82HgJ6Xd%2MsN00WI6_qMUf$bYQwbum=wag%&{bA+S!$$4Bb&N-s%w-)K^ zR()yyPN-VZ_~)9ct&KzU66L_e+T3Q^0{LW_fBuyZ8Y$l(+BQ<2<|96SjtI?n_e~<; z0nA`s-{e-aoo4gdu5QXqfkE{}+7{>O_hC=JJ?1y}BLZPEEjWYZBZ4})SRYldG`__X zldaPz!uaVfqgJ_($72ikm&(w3ntdE_4v;lm3d^|-+q1aT*Mj(!#peIewop;};{L$! z+8nMNE|PrJEcjZo=vM?y{!|tHg5ZoW7pJ_k5mQ&8hFwQ*g1%?{TgQM1raf zv-{hv8DF;^tlv zM(bWb(Y0qr?3vMh(Yfe*#%z!R=>iJ8G^xpl4F{rQU z+Nx74d2lzB4RX8%G;i$u4&6mQ0~hqETwNszFSZ!!{~pX& zHW6!f@dE{BNI=!tx48S!(~nl7+wn;c|MT0yACJ}SWAm#8rykssPR$9sh7qewj^yQJ z)r^rnWYq=kxk;b`F6C9C5)$2Qr-$<+^e;(9{z0@>6Gd+j&}u@q@mH1i;%|gpWmB2W zUpMPaG^Vpyu6Iut@*ev--5m~OZrr^#Ol#DC6Lkj?k#_ek3hfJf_0{WcH2D4>FEZ^# zzebx{B(?No4e(9yZKsh%Eo`KwmMUQOg9RJ&^N>oM;0bLi(^)i>SOM(Qm*(u#FTTn! zhoH26as`xx@CosTbGMNA;s~WX-F*8^Cm~D8z)Xy{>^q-W-haRIYt>Gk15M zz#QQ!%w1~@C%8G$8OtO-5Kb_AG3c6c&bC2No*5@@~6n{ zj`c4{`gnM4A@f^f!BQUuwkfvv8It9rnqs?Kpv?U;p9^W=JYBHYoh#T|?A;E_`8YY;c$xlx=SE3Qgk{c{EL$x;JW1mN^Z9vZFMcy9myc}M zeGp0MYe$-LZ6FQPK|I_Bq%-3fLg?a>T|sW*I(sArTwiFPHmKwX=KDo4#dnIlmtos4DdaY=Qg|D;6IqH%nkJ%>&rs|R-er;h+Vi_sizZax% z&_wBSEyJOuM)2hcCpQ&#vwTg;w=Z;s{LegqyybimQRuc?LAe`LCt$BLG_wE8-BA-o z3%JciAwH|&Sk>^xsUo`W2^n20=K8@?Zxd@96GgFh8N(`Cdbn4P1I|IRvDg}R~eP3D`L z18r^G(`akgOgq}1yM8At8g2b8O8i$fY4&>E8ew;4=pcT*dvtJjOX6$CiTqf2CQA-G z&F0ww$&yhPx*{U@hK*j2QLR4!$n-6{Y>yciZK=f~kIJ4kE8;3`vm~#?F8KR}^q!%3 zlH{h}8~V6nLV2O&shUlbnF@^)0$5_2oN0GE`=Wgs9h0(6mRw5%25yk_C3KZz4q>DI zL$$wGi$Sz*OLh?MydC&PGTq{_t*0`hSVM1-+rgPfd*(3JHjj=J(DS+BiT%T`ZoR-&f76~U%9zFfQfy46so4t)IUn0sY^~q+OIyFcHwc$)jgRK{-mVob)Ls5 zR{Wu5D-#&~FyNE%nF=S4wq8!0R@29^ej3%)OVq>OWHF|l8euuRr85tFM#n;QWbU+& zQ1&!G<7kRwWjT?eL4~QcEffSy{b@l;t}eHWsKSZn9mfHJ^%1W4O|j>GB&H7E?c(6q z9wgbA`wWu3Thk@Cy<@if4l$$0FW0J}D>0|%dLRX$H+L<0d3Wn7yz4r{XwcEz24{q# z3=CD#1L`3LbxAkWN=IhCc%X;ce{KttaO4?={NIb3vsD_JqGZW0PSHfvMDt<|lVHiUyP3SxDsIJ` zV)xvU-Q%tHzrYx0ubt7!4_R?&upgmKBfPUH>prXXgs0fPAc-8FLHFF3RQK!KsXP^_ zdnwdTW&iR~ZM;|Nml4IjZeOw>yk0=$m3=FWwf{Tkz@I zF-f|~53%Gq0~LHb?JZ|NT|+;5uR-In%Svb_-B@HsLGN^y?S3EGuPl={m=)%BZ-sf( ztT0Q=3iCItFdG`bC;8oYUb5)5afuZwk_evHC-nHsA;okk}raef1_k{`4U%x&$QT(^p`?^{hu%2D0 zjzi`=Y$^wKmIj^eb%{5*y*4~w!~w2?XsVrTy7GsM)ix8HfZa(yiL`xjS$_K)Lnn-W zbwXmpgwfB|v}XoR7`<*n;)KwY60%qVv9OB{25XB!|V(Uh8Rt zY@9J1FXfnCoeT8+F(b8|Sw4dItM$t0-)!R^)Ln{YbmmH)(N&e3$vl|{AN8hZ{rIZ! zV zL&^CED^RkCpPIzVb{DDDePK5%e`?6w3CTedqWAEI#EtFQ{@kaf$0Ax1^g^oBRB87C zSE81GjT?x0<=quy!ClXQWG9M)$!UemxnjA&R05rvt@GGmO*6ueveezr7<*ItRY5L6{Ec-b z&pErVzmN~w*SLf1x83b)zw6vy{JI%ra+mQ3IiU$T;Fsb0Fr8U|{@Dj#$wm43_oh(Z zYkjVIFk=HNCR0v426$yYH>Wm84&zed)$N%`ZvIuh5S=G&t}Zp?C!Su~FE3!-Q<|-i z{Fs1ObKyjuJiOUtM*QP^Rzr_u5A*!NuWNa&#M`)U6lu2|`ORU%DU`+fC57u(y#C>&% zXR{0Wlg{2z*YmKV@9jYK*2Cw=_ad9~J@?(^D5INl(A{)UZ1X z$SwV5+;&jAwtJ9oaZf73|BPdylENTyu$_+p>eDDIOtaHnbczp4eQKXG#9em?OeEr3 zGtyZo5YIid>JFz?0aTcMs0RsJ{g?Ho!XDPdbi)bTm=h16y{@gV;t;o$4*Ov+;rv&$FP_Ry_1{9YJ2R|b!p7E+gHWvN`zq5)Y@E916>^Swn z&d;88$@vR`PV8+gw`gKvMGdJY242`HZ zqy6ahapJ|`z%p{o&~qz#gWKbn5d8X3?)QbBr^vY-dVa3R#E6CZp{Hf}ML#3x$HD49 zl27+)4*f9e)!C!9z~%bmq9AoHy@j{$A->a1O8|%CGzh%wb&tRbA&@?ng;*@3(!9o3 zJOPb@fap^80g>EPcm@T75t?aQ@`mfI9Em|#8#CB-yaMd!$AX`S(=zi>Uy|1I-*sNU zt?u66*BtHge^^Me4B}<%V~mAWb6CONul7*u$}7K}0^h_+^nmmID$}-1(^4&>HKk6b z68F4WVolBHvf#Glt!gSffK2h&^E!ARZT&a1FK4pi(1V2EnOxkV=4dJ`-L%wJ93O0HP^&Bv;nT?Jahw0u3>DD-S4`Xi#IN-Lo3~ z=8I*%VLh??r@e$rxi+<~XDFh#w5M5xEEl_8-gsm@wo6Q6<&d_za-JaV>f{{@0gkye zdIIh(*Ksj4xhX2`tz^(TGViXYvFhW~n4Muiyh2Pz7pY)!M)5_Tmi%-`d-H$JIQQ^^ zE4~qr?Oq7fbLxx&pBM-Q9#!Rqf?+&l9=6W_{Cl0~XGMi&Z&mh+ao*(se+!xvRx1QS z0mo$aHV?t1F^-Ua5Gc}!!_0Iv>P}*WyW`r<<-scOhMUFo%AA3C57*E35Q*;2DKpe= zO|kO;BCoN4<U;2u1ywS6n3qEqqSVlyoK$8Wy$v-JCp3j{g&*91_4C8$y>6|E9t2CaMXUacMuru-} z{#vW25^x{ou$(!LDQ59UD*jcA-@cv`tT2f3#=Tkpc3#T<6aA0bUnybd88pe@X=#shehnw7 zHU^1Lm~mam3Q}zw$zpv+X3H69t2--iOTc6B{xQ4Ap;NYdwwH@U<0Lh#ylCfElqYdG? z&=v`PelEK`1p(M8Qu;ly}Zg#I<|ixLliX^+b|<}c#p zgeQkIm`k<>8)e;da*Rxdap7tBxN4U*6c{2_^((tHg{S+Y;HYIcJXB*qr>!5>I73`nn@LB zfTeQF_^k_x&F%z^@lo%?kY+yg{&!JH^uT;c7#u z)YZ3i84&((YYr=4^o5mf8a4VK(;GKUu`%D&P}$?jg>DayUWg$Ty5CTj#=yg3)4`pS zYw4@rU;2$O(d&GR3XjzzdEpy)jb-tr%gL3;?H=LVcTk`=AjYpM$j9uP(wp2o+hm0W{C zkI@fi-IBxPXm9cC#+^cjzbW($*e*u`(DP*k{6 zLMSSM!n?p@pQXn(0@*IV=NuHY&-vz^J%3>?YjA*}SWR|z6C=;C2Ch=TTOySJ5; z-Y@n>TOT5QRnsH<-J@yo6a47BZ8E5qyr^0MY_Rn!ql@ZCeY&DwBMX(TnIeVM{q}#E zDZY^MFJXf+&z=8>_P5*uJ*(M8Q?9Oq#<<<{I*8hw9cML@o{CJrn+Vtv_j3}_$23T^ z>V%AEe^mW2o}gT!p~>w|NbR{!e50(ZBr|R@j|}F(e4!=zLYGatl=vjd*?9vj(_ZgAik`LguFT9kR`W_#jqDd ze}wA)xMHKW>w_T(Ym96z)DhB_l~k)N)tp|VEsD>ZGpE; z6nt8-!dvob9ol2_e2SDs)PZ>mNpZIWh*k>4T7Ms=@dL{|o|VLhD2OkI@!|c{aDCrQ z*)7}bNw>_)?Np@kNhYd1(Zco9)w$W~ijCA@yP03W1U&&mRXwy8UnO znIo=1f3Ze|{%^U55_6C6@b>L*sWsn?7fFM(YT*lR99$~$q-_06KOtCX`}y^-&j`9F zT}sEU7!XuVD!lwyv!dvXkhX@@E@;q_nGHKaVEpb>-x#-{;t8 zGC$g38TE^4SM8D};~DK_I9}QV~3U)sqUel~ibP+|P$i|AeO4 zAL<}hbHsPaoy6OvZNAZ8A&Pd^3`-WhLfz(Q{{n%W&-*GhIE5~m*1Y;(eEo2g@1URR zoUcle@HwG4CzP}hz6{q@BpR@yR<$q;xuCg z2uG_~e25CqET=Xt%Ha|9K}rVa1X^-DvEz9aUhJq5apUe6|M5#j_|M^jW_sb}bs_%& z9xo|VksAb-F(P=-G=<94Ix@{R<7hLwqc&5K7qj8q%C_wot`K8|p=At=RabV;EoQ+p zQ@1^YwS)OpZ1bzXmPS(g-IyyhzXV@j^K1M0S!U%|&dZhm*9?{a6R`JH{tT!Htas~I z|Ed)|SELt9#PnQoxIcc}YYT(hz;b@@|8kVt_b)9o{4#z( zzhj$Y4}TKPgV?W$wmeJIM$gjStKu^Y`f=`qlO|$(qu1wVBJ+zVGknVC*ATQC}BX*piV7>!iS%;DesKW!4AWeAw60 zt!Xy(Hgd^=`fm-d>moa zZOc!if0i`GCIlKUbI8RnW=+G8Y)s90odu_v-LQXW-xuF4&(ZO|JLrmWtZ+h|U75UW zSk>cV6Ade}zvccHc+ttdcu{Yt?V3~XK$mP%v2<0+XKR-!O9%D1J7+9u; zm@lr=`y|o}n2Ge7nb_LeH=>QRdhN|bVP`e0D%a7Tc+G`vetjJ%saH}%@&}aizYd9* z<=AcH`ZJL9QGxii(j{8l-GBi7KAo$n?_WQDt$zG^$VlOO>xc03StHq+etEQ~F>_iP znJjvFa}RO1h7S{Ws|mPMxIWpW!BR>i-_F_B8w;)IFn2L~pk1WpWrQa!A9mLP_4fD2 zpCgLtO<&-<(q9@uTAuso-T%YF&fwZdy}GYV7Wx?kLyK6YH+7}W<+6sHU3%I9-GWRXTv)q|B8wJA8NE%^0ri6QIo!59i>b^c$yaFU81gh?v5uIa;s4H+w7|10c}*5GUvepN3=yOd6}tvQlIQg zd&TqZewfTIz4$_Iw%GjJ#y-dVV>Y4~@rI?_>r$bfk08OrQ@Z3(YG#~!6ivTydjaTI z*r%cD>TdZVm7<fnnuL@d7(rAk~4;WaF)Lsx0J26&iKw zmH-e-`k1w7U%X!cdzPQ;bI)JvKYn&S<*VNB6jx7PRmQTFc3|wuer^(gg|?N22IESz zCbJRg79FZ>&GX7w$+8-B+%d0Ky`j&224LBr_H49AnD()+HKQs413K2lB0K(c`RC(Q zJxQtZxE@8oOhx|TSXQbS$=e6U-`Lvx*~Wp)qtvJHbRlXi!^h4o4r$sAx>Q)I@3FOL z#1@WUp;g{^;Nm<&?mcaG3Cp>gduIKgpI>F}qZ`8zPcZTtW6PDa<)1-|e>Nc6I>nln z(#A8KM%F>9e(W+Wm4u>Qe+?Z9sPD3bn8fohuLbcp2L}1;yjf+`vq9?Q*A*@c5+^ee zuWeGnRM9LPN$d`vlNoDF+LHp-U5w|7t?Yrph&TpPmmG+rZY^tO?v=W1Y+a(Jn!VtW z32FTi2<0C9I3aF=nJ z7#1bYcZ8)uC!1mZfTgXx{g!cBP-BeW4{OLY^2cKdtCAhNNA+#j7%AY6m%mP8HKwYq z_!G!ZrIk2c9+S?PooY7?b@H*zL?)NA^_7=cs&GwWbNf3(YesKQ{Ac{=j+%Biux9ku z#Fq9CipP&$m3T}UQ^Sr@r^?#WzvJuE6?(&==_!Kw{&p+1B>ynQHRql`iFS}Uf8xMuD)73!R;DC~d7QHPET-6lhs z+p<;JjWp_*i#jCtKi@o94X@#e_*7)v{W+7$>K_7mDsp01#BY7XH0{tHrM~@w2rZa8 znxEm*m?KX!N?RYM+tTz2uqle@kD+{Rwl-#`qohMeDDX50?9 zc5Rl|rS2_%ge?Au-EEp9&F`(%gibtMzFNO2|C=oN9)!}me$HUFO@&Mz`Mx^*w{RCycu#-~oqA78a%e6(&w?RQse zR!#+T1J_4r|2bRV&pJo7DV{}dbZ(Yf)yQoI+9WPeTdS$s{`qlCSLD-hgpaRU+sCYG zBTLumQQUU-n4XnN&1U76y5{vR{||Ar&EjaA-EsG6-d&QH4#In@f{x`jG>Mhk27byq zHu}>#t^R73TmS|pj9x#1`7!oO!6XhQYs;&&Ibcd8&$a8A3XsEh2bQu zi-W3-TnRu=(&`Cre{RylYTrkgPgBs*QZCmT{R>hzm)|dhnKZh&T$jIFm>RtM4QKv{ ztK<6-euE?@(d_pzqkK*SsR$cF6^6l^%a`-XJ88qkP!0)_*I6|xW~faJju!hGqeG7` zR9M9cmu834!SAhQgpzlL!{E!h^fkh8WX%b5{$4ik{IDg&ZG&Rof3T*|OE{_~P!fgN zVmzU9-|n*iQ~!I@lc}oix9~Ji{_ef2l!=Lu!4nfD$?Hd)sFZw~s?qe84F5n8_fv@V z-=*Z_DM-m(101hMtqYnz%PWHeU^um<{JCPbYjGTK4}9hrM>wRd zI~cY}Rgmizvcn zDngUu(bQa-E3#VY-iuJ#NGy7iD1yWCiCCLIq3EGCb_Y#=J&L&rok%ffY>I9D48asG)+BUOV2v7?!ag*3?7QIUEA)3i{zv)o zpR6|O)keL?zx~w-fPO52x@X(P8pWR7w|Sf!LnhsRAcD<+ZDtdq9*0uUq}dc?AGS=4 zW)9^xGg*5u_4699SEkZ*b{-uaVg&!d>rm6fLp?PGnmaUL`lRMaINfe0Q;)e*#@uOE z6!<}^Ypp>MXqcI3^EX%S%--e5QB*?|#fIb;okYk$*q?x_HG&qR;`ZW&2K1K399w;; z_jvXmIWxq_NE2VItupZ+e8MB&e|Z2vL)1Grd?iuKnyGTCAstrHxOaSUwd!izjVElR zj_F@*$2?nk6BMoc1zk5)b%%_;m=?Y0D;3GCg_9ghX*ceCSuURhupPet6rFdcr=K1) znkWq~qW~y-$X<|iG?g)(niNd6RcL0#PAQT6M0;-2W9ibK7u&1p_u`hL^Jlsd{M39j zfXLM+1*u`RtgqKzN(EYIubo+DRUNYym1LSEQ~MjNDu?iY;&oDZ3uTyU#}m75?X>J7 zcN&#ueO~gy0pscW((4bFrBSEdA*p`Y_+G>lCK$KhJCcwI`Mr&KC_FH=Wx7N1aigGC> zfCSJg7vML$UOX!q^@D-&daIZkMzJ=KhEUmr8?fyF3%53f7O zVu5)R&s$7RZ&m_}d_jMq6zszMWYxYzV&0E;uP?oovhMC##l? zqgdWod2IJhRC;T@aaJ~?B;CaGQ4Bn?j-*bTEMfs=veGwL??%L3vwMB69ZYoGO!A0k z_wr0~eBpa?D~vy8ybI$?cAGb2r`Y5MU)3j$A;30`gJU#&&&eV{w*4DaPX7p2pID+7 zIk=UvfB6Ih(%K*|O#S0b`+O59NquJr)7{nA*duu^ao^-wsgtAOK#+=S1|k1B2WT1v zWJP3f&!40Ob=}UfWm!3Zg^9kjF5S7-hK?!O&@m++vs3bwe%_RPEIlQcm?>Ebq&Rls zc+btfu|3}YIrnb{5)D9Zrj^t39%9H?x`u(<#qaUKctGgv%yTo+Q$-V*<;7$s@z(Tg z-fCwvD=#MIs4JbspH(=L$k|$zD5J+i3|LqIW^J8puEb`!AK_+<2kvP{ZF?XHpc-~4wf9l~Fvs)Pz;eTvA2SKR&=ynaTP}^Ex2d?!G zHV1yqgtQu}nQLw%dm+l|PcHq!1*Dx{i&aC{^LH4fN>{@FN?9hXD#76khH~apCv%_i zaQ8?2#D@3NTYUIl^L8nQSCihpl50~!4;E2kP9N5f;d<(xx-@m21Ru6U^MxcU(7saA zFUuW&k{uVci*oQcxLS!HuJA6!zCv$b?xQUCAVZ^T3RW*so$gP+&#J;beD4?Tk1GDm zcDp#v$Nt3P*pAM#g^Q@eN!Z_bUPZ1sS^n_*n7J^8J+gye04~#VjEwc+4=!RUQF8%{ z%ZfrvGLtr{OH+*D+ri{Gg%gzA(D;gm!~MlJdT9Iues`il_xX3gFXDX)WrIE))?F5v zw5l?;-YIU01pd$x$@cw=d$ChJ^@Zd}EO#646|67?(U^pDW_e2+|C0l+N%YAclc?0Y zPX~M}IFI_;8(JZ7esN>qk+q0Nqd%4UY3>Aaa(5+c6Hquz|r?cAD?%)zqn4>SjX#gJp5&{LknNk4~uA+kTRc1X7>;` zQ%Lif2%o&ne9ya_pJ;d^C^s=oUb3~sh6hMbaRXVnhw>55Lbbd1<5uGV3fL3Or*MV& z89s&|oq(;t2r=v8%1PUu(9XbveM}z)7nwYH-_(zilZXSzbR6%=C#YH3>6VNPU*?7; zo#nZ=Qr%HnY;f`~>dfFz`H6__OQ^~W(`mgKraOAEE5OjF2fPBLR>U@@ zE{w3ouLu0d{9pwcs>>5MWT!KM3JQ=hZQm`|_`gVQXVPBa`{U~ZGyE%l(*8$#0`t~E zvXFAMOgk{5J_od_!V%i{)l1o)Sjdi)+R;ubQ6SVb>^!!`>K`+S8$iXkn~L+Q%nuwY z-9Cy#VBRE2fJDx!`tV=r8K&J3?9$jyR9F0IQ>Q!bna`;S`w5B3)5xKyPz!kJY!ugV z_eDyJS^w;cP`6prIj|aNe2CQg@W`P-rs*}!RVQ$nb$h?1CZ8}BN8+P#Bdb?^?xi1K z2{72R^UGi{ow4(!6RlqwLH?}NIjy7FFzhPRN`A_`*`wTC_cG9d?&HIs*P>uZd^eD`SJ7 zB!v$<^r3@3_}PUQ9+3Z_*i&pv?2YE6oO2YU^&?2< zOchFu%O=u7A3esydHM-$n|337>?S5`0^1#-1lYQ8Ke$?hlDiLFM8kK2QOk0+@NVwz z*}#MBH@IoQX(a~W>y@#U(i-X*MyeZ!o|X3u`O0I179_t0`Rq>xnO&$~fjXh-lx7v4; z^{iaMc!W3zYZEZl*beaPjud}I;9P2c*`V3!7MVwQ_a5MXimYtjKf#ats42GFou4jV zM*J81?Cvwad)$Zr#e3!lx@N<+k{at z^WD+vJygK5o>~9WPqZQar*rKzo%c6=Q&zbWSdDD&HzX*izRUUPt}9=&KJWr&)?Q~E zs#yPBjPpxYZDF%xZle&^jh{tq^azgybu6)EPUxn4>wG`EpAJe#blYw)YqEwZB=lE; zOG4UZ)arjvlMEz99ric7QfXME52z>KW;K9!7n7zMV6tnkHJ&;3;nx+U)gH9ScX$6) zy_O#bXbBn*i%whko>!yC+yrugv4#Qb4*9+h5NK5v)+eWtAQs2@eF5wK@lLe7YRKs5 z1)>?BYrBpQgPGq=@C=j5i)aFk-IXaCe%JKp zOe=pTtR;=0DwOfH@&UAsr`^T8IASm4(>f!j7GxuwVy)(=gllsQri84v4Y%j^{3v&cS+} z6ReME(+Zw7kEHh81>T1#jdTE;@HIE23Gnr?jD~1qB!$I)c0oV9 zPLRX(Wdi6Ka*#0TF%obaK|fLv_mn%J&^OGUMrRr|^f?3CDbU;k`}zZs6{U@+K{lXn z$ueimhS3{Li8f|!VCkMd$i3*HZqv^t#!!tf+SaQU9LWCM4%StV)vR`o`&TH%|sPXXFeaT03k>piukM?sm9ag0!LS=!r!a}dHCu!DaMNY%v ztoh&TKC8dsEO!3xIwW(9u{QedR)4PT_Ft^Hg#+E6!gvh9X*W&9dLl=kCA+16KoI>e zJLC=X$t28wC`iv(1N-u+O8<0vbs#69d)Xse+})Gup_oiH9UP<{eYTFKABC2V|2bEX zRnt_n`wZKN$M>_zz3OW58@8kSb5$@4D?>l)Ylb>87SXUgzaVng&pJ^BT8qVV#{o)w z@Pz;NSO4H_Ul#MIb`lHgfAA#A)Xq5-+O0|C7L!k*TNFtf%v_QLk#wg_@^Hv2$Rfqp zbZ06u8=SPvy^lx&mZjfKnmhU_ba3D2E1{c}Xzp7ETC>=Aw^B4FYQycMY2{MEOccfq z_2C~5g=}kXh=$+z964QENlZoaP!|oIUr5;mwT($g;AvAr%j;KcCgHz0qrd@N2v?%!IuCmb@ zK{$kyz0c666M8rB@H)Ae$Brad8dr0^CKvN$>37-f@YS1nJ&JL8ua zQ^d9HFtt9>BiV3a?r)zIpUKMmOZk%Tm7#+*y<;=UcwGVae^xv3nFUTmt4PV~U)wBB z%*&kv4t9~?Wa!K6>@xS>VU5DSv6ZU7yolpeX{a(O`cr6|K#S&n$|B zT5EDEVqZdEyRIa85noe-%}Bm;h|U(bS&mEhgor4|FyqT?fUBqta21#CT@nAD)xB5M zzNZTuhUfx^{CIfYt1_whX6h%qwW+-<@WWOj3Af|T*{)knx#eqSiPuG~@7e+nKdXI7 zA^WRp|2I&QH$BSO|I<>mqR{vz7iIjmS3`!E)rS)VjP=e<+_+PyK`^?%*=&(iq;m+Y zzy|z}>V)w!-N%6b}^UO}UqPke(VHM3C1jAaQbI^tVsmg;y$-sGhw~Jj2rpQY# zM6-l7!(E`^&QHBcY=ex};eK$d{EL$_8NK6^wn;Vc%>_QXoLPV9AO<|^cIKanKYt^d zPqSzj?SG^WmtAHfjAwI>Ecgzm5u)L58%`3ikyu#Pt#f~dQ>Ve8V6w`u^&~#_*C?=c(0qIe+!98O8EEo|&V#f|{KcBa!1{q2o#k<`fA+3{+mC?IY zwFtsp`lPY7^w(W3HSZEvpORU%@1@=X1%B+)w{T7rcVd6?gy(msUk2{{PV9noe6H3O z^}t+q1h@6Q!fU&4DSzF2%|Ti+Ml*4_enbOiSW+(@hmP#{oNULZ6Mw`$Lw&}6Vj?QW zhmYP5qb3x~d!QFnA8Yt+&=+CEYJ3Y197*LI*j~ChQJo#y7Km(vq4x-FncXe6v*A!Z z`B&&qVC>f7ZL#oe)XU)cMw|L2EQvJu+#)hCC>N55OIdAiRETqU)<01foQ!GGz9Dt4 zr9sQKAX84u>atAc&!F}V>L!XaIq_pFg@dD7#0T#{#EN6XOkZ4N>Kne+B<-(VK{G3O z*1y#A8b({O`|4R@8e$4C_@I09%^nU>l!D21FpM-RE&kBtj-u~Ib{@57hWT!OLSIcM zIzp8MsePT1kA!6s$VKtTO#aPU*XRA^WnhjEUcpbiSL_Y!_?Yn%qx!bA`^sYnTR!m> zA8Fb@t1^0|U_g6pPulPMNaduJM7f<_%qDa6z}DSEN}*LT8F%=;<5Q`FG39>rA-85o zy2I`_zwC8Z^qm~oF_+VQ?)+=}zt{F3DW|=BbT-_$(Tat0Yn8^7i%jwx^nrJ z_sfUushqT1^@nzA&pPJ?_N-YQ`IbvriG7KMVQlboJX;Qz$bFV)!p?EdQay;`UT)0U zyWI&h!OqPEfW?6gt?AANSohWP47#qkDb4nFccP0lj+nWfumS)h1%RBXtum4K;UCRN zzr|17f1;5NJp2-^9y{6xk*|jW^A-qyiT=xW_qqhEjk7h5{=yn(-Ef@RsBHSh(9SYL zJM1{ZbaEd;^+}&#pU1O;^JTE4^HT>!M8h5cO&6ajNow8;c{luVAZcl1QW`0pel7hh zQ3tx%msl@-TXUvF8diRa7WK^Z%eMi(>}5@{BgNYq+F2cEO+78PDR#gWRpH9aRKEwQ z8pWBaEU@?uLS>u1emphioBjXHXTiS?zd)Rar1P*nXNG;F^!kNLNk?4XE-}*EWZsgT z#GJ@fVa;~}Gq@mv!Q}iKJbDnc+}c6f7u>%l|6GT4v)zLHrTB2eXCt)Sjy+pgqTht~ zi^eU(R95Veyj)At@lBa=yEWr>yZu19{9B7RZ2B}~Kezlh&=jI(0&e9uX2C_k3GgpJ zDE|j^&wm%SuMKUT`cYySyVtETju}1wvh+b+0jUc|ke;`{Ma;U?nbslLfYq=@P=ddB z%^J9~;jE#J(^x0pzNV((Mjb5U34>j8*kHAp1utqA7~@UNYcx~3i({JnNspa=yN()N97S+5%S*r) zvBTIC-DsgP;mtLt;AUKXw%^PT&95+6>8!SL7*cNa#8U$1j(AF2otW$z2M}Ge@U0Zd z;(yVDdD)E)*+}Zoi(ZPiQu<;$|14F^crP*PR3b=kWNI(*rgp2>etQkp3+!@mD~7p$ zp@Fz#WK0N8fBVYz)uG+fu1bswdd#EEI8PlFrjtm@D{K08gy{snKbt_EqY4$L^F>1q zPCTa&FZ$S)jz&6TwCl5-A77!fT`?`$P+;g5dMPPeFspEwNMU#9c~iUo2mqi zY-Hatr7L$w0?*I$L`aK?O#T(bMk-w1aIl{CrXx(&k}Y`+sc`0RmM4Y<*>Gfx$^*|o zZz*pT@dIjaj>O(j#xuy+*j=t`vHq`RR%UkoSgqJTH+HW`^f?uVvHtqF^>M36^zY02 z=Idj9wzRLU2(6vEE7e>PTiG!HLZ_X7ntnp(AouI^+$VTc+9NXhI+Xra&AuGX0N2 z*_aD3%L@fFWSP1N@G)CaQ&-SU(DLSM<2kL@Ci=Iw!=%yRB8f6oY_Ab|Ql{BM{b~v0 z)q{F%6bi z(`T|G2P6KX2Tz)MnFQY}>EJ5jt_MDFT0ZUWB!)fiZ2H(K-Urd;PhFGzoSHN0VY3ng z(OslDiRzLCH&JI|oGU|$j$94d#91bi4!onzEmAI=pniR``e%&g*kYaHy{{N(@p(#v zl_+P=@X$$9izWa5cc9kd{TDr$KW!w(DuE#f7#v_w#B^Z5)_yxloB{)edIQ5Ix6r^~ z2`TwDykv=)*uT4%NgP{eUW|NmpX!w2KGON6K`$79pMon~LbdMhOVeDz{l?WEGe{0Z zIqxcxy1a@1O$Y7{`%KLD*+>0xsp$6!q|5#<%IJ(Adv09c;lcgQH&wT_(KN5lFkW}h z7`v-%*lp@pwi(M`-(yM~CI4D|;g9=goiB8>`p)N3|6q9ROYpLk0(Nu4Q{n?n51Bf` z-IO)Z^liPh`u6p-i=S=tpXA*L3Li^?E9Qz1= zNREGI5=F*uK(QsX%p^D=dkp(%%+|`oNOjaht}t;pJokQk+tDRBb_ZDgV$M~FrNdzU6*>-Tfa3N(#KhW zbc3?o&rSJZri8aD%L<1|L{38iuwhnVVd-0X8_XN|4NdA7nn)X3u!=6#Aft$~ZzlaF z(D*kJ@G$7lPR4Q`Rf45u)+@;NEVk7%naSJqke4?n(DWTIF96y7gr(rF-ByfmQ6mL0 z25^7GFt5y!KvTXgV~|2S`PuwiLIgL4{-(kKyZt8-sU;tReix8=9Iz+Q^p<@*oz(UA zaUhQ(TUDSo^eZ5Y@o9H~siWOaIMqS!xn3Ql%F%+uGz7ZY{)!&t{0H1SZCcdwvLGvK)`zuMxJ7_`Je8t;RH5hQ zG6K^}nGQ{_xB;R+m3H0lu?B3rRSM1UtVb*wnvf zvR!KvR%Q}HHsKeUgd&?TDP56!noT%0lhDH^Tr!lVda3RIaIFQiuTg}BEupRq?AX-oBx{)_An9iB5;%fx(lCbW0F!7^)Vq<`=gIRZ)863^Nx z#)dwO73?f@%+R*!cUf&bk;6iEpF3ru1eXqwqN<^zQ$0HC;11<`LC%%ZOxs(X7T53b zk7%1ekl?guyDXKDXbFV2YHWlSKZoV^rn9+i?rt7g+@@C|#u8w*M%}Gfdg9o~Mhm(W zEcVBC9mO!aNaxpIA2o0)dWr9uF<_f`C0VNji`Q`si&I;9Kb<1;L=Gb3_LKZw7WJL# zF!EjZmlVjhZT)lPo7CLiu$}56u|191cHReCoFX>t*Ut_a3zHv7{56Bwh*nnG=|gwq ziGv=kqfRs?Y9cDH9bv)PPj`jAt|#vUcby=!kCr}SYN!j04zW{AC5>5b{tlU1s4(sX zo7PW1g;P)tHxpU>58TC`)@b9-hteO!jgNB1Pl};%FbKJAJ5^lYJohN)ubyd$;~K_c ziq^qo8g_R9-7_{)K(z3^VBtgAmca*WrHzS-DH)uxFE;!7Xj^;DY~5nl{^y!nV{X>R z3-l3D4>k&#-RkYO9|c&Z3uO4~mxkyvI-wq7Lv*hNT=_r7P0&Jx)N9sAvG%Gxxx9Xb zma5$Tnhtr_MPK;c9Z<HE+vDU11Ub&{cY})L(1Gx2Qt8?Ie zCwqgliD(a>_H@3v>ag+^V?Q%XV4RKvOW(_yHVy~Gb9bUzOuxp=k7X0S7_|0%rt2C;0irP=b+0(9~;;)#Bhhr3~y}%-ZY;E5!!M>&P>TX=4I0z;j_PNF0}!ka*H!hqdj z)-r4LmpW)v^%j1-^ z9ZBRpESr162sP~yVV^*qQBmkq{gr*z?&e95YcJ1^Q;~bJAw*>)&mCg1-uj@1^TiTh z#jq!HZtK?W?m4|I77Ij2fu`R8fh=a@Ap;g>5PIs4biGU862$jFuu%olIqs9K*604- zM8-rVjox39UHdmlCGQfV+KtVO?_~=)Z`5lzr=(#E5QY2`Y6cvSB;NBVxE9W`J@sQE zY%_!)VteW_>IvTpot#br{uf;IX_bx)p}2Qnb_|Uq_oY38x=H{`A2(|Db=kj>OETLg ziTenQ(sLW^s3vT?`VZnES@!*41}Ev;rUTttRw_+^vcGZL#TYc}ANxqnp2 z#QhE+!Nz}(E?DkxS6!Q&H*g~!5Dm{ZA9_>LNpX911&m^*sq#+q;hf6W@)1x4;R(v6 z73h$C5b#Zba_94%{IHQ)0{}<7i!iBI`I~}KVM*GJ{J?>eYUHnFn(jnUCp6! zCDTrKLe~Xra{248&3B(+uB0})AHtVXoWf5-&aB*>>!VwPi+lOA+&fQCPfN?UXv%C$ z6u28$5Q`!CJ!Odx5`hKD`;N!J?feYd`8h)R56sm3siOipI2@8_E;Wau-o(0zgd&K7 z_|$Mns_pSwAzS;F1d0eysHLUz;AC8wH_4~%dxu_c+dx0r9Z%H8ZY z^J|XZeOpd0wq)p-k_YuMI;Sj4o?Oz;PEBXI*+~thWyk$KSyBbj@aLP?`MAF^9G@Bc5l>o5&yNSs;@R;MLZ=)l@Y6>;h&pA zr!i5?1m-ti6UK7dB2h1O1Z*AoTtZM`AN}rO#);2CcP|gE}-nNrDhohFiU1R;{QW`S4gQ9uzh&_EJ-&6p-+yE$r;RN4$*#QI z^Re+*cxCdCHsc{WM+QuSur9$Btj$w@y?aaTg!)AiB%eaG-My zG~z*2bb=ZXZ3*A%G!zeP4;va(jr7}Ics-GY@f1~(i*)YsS4 zr0xGUz2?p&b`vtQHe6YAOT&?be#gQ;ZTXstazu0_NQcYn}3%G_O z-_y%!4M(2PZ@_&2K97N>zk1k%_uY6`X>I+>uX zD}|j9ou`2lkDHo8xvTEbF#U|8nc)LJPAK=}&?nh@Nrqx1DE zRx_1rrJU%B5z1SW7hNI86T<8`p}w^}o%kb4Z=JV>G+WsXH2lz$yvB2v_v~xpXap8N z-bO-8vKxk-aiD&{%##=c4m}W$?!~P^1)70Af zC4Zz?R?P${=0OyIXRNg(-*FG0U_u>8?6OS^+y+nPxVAs-epbohtS`_zHfke`*d#-9h3y z_fhIdJcJ~<3jd!O!&Ula?OH(%S?=SubSlr3{*0fr{UuX=Eae*vLTa?RR@XZX%VogQ zaLCa8GYyBH&`i0?qyIyO?l-Bessi#$y>!pDZT-ZywMajh(=+XS(#Lk~uM**A_wGMB z+!)Wj(iXVt=mLu=Km!#DAs|lz_m?MAgRx%>JO_5a|MjVH|IHYBhWP7)+uEFPrVawF+kUz~nTnTf>oh3eU!>R+pVJX6Sr#4%>QOHgo^3 z20L%htR7jI=!n3CLcnA`c<0nbTD7Ldl8N{0eg~JgW_NNSAj`))1E0(#z{gTgbPxRo zqX#EWyV{sdiB!FX>4_=r)Yz&P*GJvm1JScpB9Z$TUvQ{zi1!NoeACpk)5cMjFCDs4 z=VyH561mkBijQgt{CwM8%~O#ceHyS71%A6Nwpu3F!1E#NlDZ|8pQ-N^nuF-PS-Co% zJBm7lf3`hll(UC2m{t z(YEfjSGwQ+dV9M`rQf?=?VpwU9s~aa9^B_!F!UvcujTnfaFKOmB{VV+Xx)Y&)?&Cn z@wqEOyHqmwA7^7XO|2hZEW{t;~rtTeT+B$Zp5sDNz5O@UWCW{L}e4 zhxkVGU*iRnMBw37dNAwmz#lf~3I)Ft_yexJ6kn%h`$WqRqI3LNwPCSmZvEzj(E+Yt z7H=q!gw9vfx9VewQ~VmoE|}UI-Iut#NTh{$CZCJ|`<7@-++~@vY`vXTA3n57ynlc# zPjwUBC6_ANK)Pth2dkeB)WXMp74M9)udca#=f&bqgL4n|lJr#rVRUNijivs3H)p zv>z|Nq%Q|jUhZF=`nr?&!CaQkVJMMdaBLU>#9r@WnTGz(FH317nR%cLnxnB zAo&^EIvwNE-c$hW|DgR$0r^4JdxWolMa^q~z(zUYMu=ZZP_1NtIsj1qK$Fo^xva3| z!3)*)jyTr1yJ-akSRYXl9*@u2kt$;G2RqC4JwiBV< zY59bG96I!AcY4ZGB(}B#4aw6{ekiSO4BMO%J{p#4&!urX3$Y&)QtQ!kH@4 z_-V3V{zc`sJoxz^4?pi5iyzsn_=kOaOR6fg6BH45aG$f~pOM&3LhX0pq%!tzIj0K& zA0!V^MC_Pgge&ESg8wP3R-p-DvbdN0;gA!~su!U~$(in7*vyD4xM&kvVIM7Q(IHo> zNFwjQ7n;80VBJ0l9&}GVspr{#9iO3)a}0sR7}wRMn=23O6}u^;HKT94kS@JnW7e3yZGZb*LzlQwe>$$ByQPxD?(HJ_H-FDgU%!``d;_J;RjO1A{Aag&*10#yVLl23IlEPQ9{cIXAwma{TpzM{4(-c+x|uP zcZ_U1uH7lU#zIfVv%Q75w%S*I<4?$>){1V%=&J{5`{)S-#El;8Hft-n&$hYc05y4? za_7Js$df5$GoL+cn_1d<@-v$pUG4x6EZ%7FhbZV4h(`3iRAOg0M>#XxtANcSY+avY-66Ac|Mhe@X|Mw6fFo za@o?X0zPc{fa@hE<9aq7FDE8fi#FM~(2f~3wJ7lN)QRnD?}|;GsJoLWzrQxmn}i23 zfVjPfX(eNbew_rj-9P}WCreRG<;d>3J_KvLI$z!>xTVDFXyXbeHl>Kf$+|I!^C$JJ zInyCP%UsK5F)wJFuwszI>{c1BUyUs!jM@tswi7;L)E=9j>*UaaI175@H*d zXjq{CU00$TD^!5H>9lmDfVd=u@4Bk2#IQ>o6Fey!UdQbK1#9G{d#>$8PM_*rWWR>PhtscGGqM zlYc^fB_pKK7!AMrM|fGSbC-e~BKA#7)4t?Y{uyt zahK~r5&Zx5F8KNExcJEyNp|5cjZAnjM5_49mNb40YB)nCsEj;~KOHnsnFT@orJ#Yz z_|3=@D-m8!+$kr!&Eo*;+&)}}Bq_=!0=6FXhl{oJi*rhYR}G=#{sxR5g+t{p-e`&l zh4~h1GuD_=Y1D0EbUcCS#p{9PJ<;1DP4b+V6CiE>6`hghesWtEoNYe}XKCKAUrS#b zgr6?>Gt^YNzByIGEkkDD$O4ydG~=e{G}xyDwz_+o&XmEX>)X0b8?%6SoryI#wv2u1 z%Z3zBHKf?=uKxXT2*n!`(;hp&9qcvEW~itR1fS+Q_?Zh)Z~*T}7P#Sn{jS<=$?Iix z2E~38|3(1$lX9-_+~>~Ew*P;GS&1cGT}jsPS(+ybrk2avu5^EM>Z_Q&=DyHBE4GTIJ`Sfhv^xiOI72qr z$;4uE@MG*Hy2EZkp+XFuqK=U|2;nDKqHCteRJT!^iKl~gH{K2p+LUzK*Lw031I@pr zDvlSjtECl`Ff<9@D%O|q{|Udd1dE(Hcy=KABaLFqdx-Dc-)I3EACxV`Yq|gdT7C<99h4piZ2pP5_EC*>IN1 ze8#Dc6_LWrX|{Cg*zBCN+bv*;zKi7BEPUmkh5*c9Xv}n z@|;z3V@7VQrpMKLGCcG{&`)f3Z+%t-T2XkW`(5I$DzSjQ3O-r>2OR=!o%E%G z)ICo8>N3MS#5ktiW!cwD9*-by^?vJ3JVMAWgTJ^F(DO3Hh{F5QNtT~%6dA-0n5tt( zocL9EyP9fZZ#u=xJwCIiIr%=5GcB&&i!M(KlR}HGJVz8Q{tbO=*_phtpLutZ4AWXui+n(CA%G3pew)WH1P z44K~r-J(tXlI9fpubwlr{bhKE)V9mLtOAn;=2@`ox^dE7%|>JR3B~dK_?;Fd%nKr+ ztxR1CGUjefOXj@uj03%{uXg%DNhCzf98hMTeaN_U1vikbV#VMw`* zC+6QwKEfF{rG&u(Xc-OZCN0y1#`tvXeJd7`Q;r`{_KFN;w_pSSzg915AqOlqP2cA+ zE*^d30en9K$IMo7$1~mY35aHSbG7Jm=5If5Pwo?u#b=Z?_6RH{W<#i9Ku|vu&Np zxrVS0THWZ&!_tI(9ZwA1mEF?FTB-n&3ExNBTrhhDzfp)tLE_g)1>FI1wGn+A)gj4k z_MNyn^c@V$yF;XNlz**m@}nnH^oM!bFM?wrw`>L@lTOi6x`Y+FAp$2J(@xNs(vMO( zRf%u-t3q#0J1r8sv#_8l_V>z`&$>stPx5p6y|7RY&i8d6% z9~!}si*8YuK8?VbPA2@-;q$S8K*}=mHz4dBk@~gC~BV_nvq3s|R?spYy-LOrfgM$o){l|bHNP1?R6WZl zPvy~~HO`x`>{iVDyGMx2kB7#NMMAX*uf&XkV(1rDBIp>BGA`mw-M~c-L;~XK)eS+G zpj#|&+EHM&9r)XEs)o5FDRp_;8zp0A-wX!AE>u1O#;>uD zEC$`p7B8wfO%C={F_PZ%UkavqPfnKMIs##G15QNT`}}s^2noq<=3L1MliEGBYr~J$^M{=5g5Z=neNwv@!)0R+u zLz!wgi=?S6ktM%Fr88V7bf14ZOKJQ&vyWh8%1^zG7mlQk;6wRdpJIyR5=wksWlC@k zve@VeOuc;&iTmZtEG?MUNi+=Bw8|7`)NkX%XgaV{&2xA2ZFFF}?Et~FoWz&LyHkIz z4w!;$d8XKSS|@Slp#Ti|jkq;+yT9~xraewn~p_$=Y{Z8-VmD9KD+8qH?mCc^O*!)y0+7|*xj^$|S(7-q}CntgWBCz`@(iQ8Z{~i{> z#622B`T?RA)YsgEYI89SxK|K%u_|6xhQO>jhg)2#tB@>X0x#c?UzNSHITG45 zhkBfb2Z9#?W}xv&GY=aKrrB_6x{r4)?MmujF zZsSw%j#zt;7#7o+RV9J>%SmPb)x!66l`JuLj)Vxp^r%XtFH*_%&X@%n72d!86lgnw+*56PU{D){UP{ASnyi4ED#X?O_ zH%z@BC(A*+PMxBP^Opf{))Ebw+8;SM10Pmgw~sM*0QoXyunJVZ$-;3!oJ1Le{)O(m z|DI?JJi2UHBQj-yp8NCnasgr!I8XTgK{zhEg8n6TUS|^m7;#D1`K?aqjj8_4nOm9wbFov!R8_((WK3Ev>0IljP|OXT*tFiYo+g^NhnU?4{vSd5+cJlCOQmANGs@RfsNLo&3IUSx4y4mX`G zE1IIr(%p;-3jQ>XBt&oMo-1u??8vF5#yH=pd zZ|X#7*PdSg%1h+Vs*$1+cxZtH9lO;}v~c!$y#l1XPJ)@~A;VB=PiA_fS1j2mN(wYR z&0o%VERr$lQRCr(055Rj3r463^!Wq${E4uG^>sx(y2RjtsL41Ub%BYoQ~pwf%F5VM zrk0vni>lPHsz3}4w^L||lQSqbpkPgY^J@1t8U51l#w29Ebbcbvh^!CBzB*K{jS1h2 zdFcT--6lLZkOYy8+sh_gdM*irlyDH|#%80qyZ3$$6aei{a!YB4|KCi5%g@j;()Ksh zwmfU48Sid~!;56td9xd>v#(cevO@LHLp6J?!@wT)Q`YOKJv6r6eej32l)j#7zH(|e zQ3jr@E7(aKP$Y#%p}Qr~VL82mWeKfX$NWi|t&g zs$YeqBk^Danl${iGIVlnPvfqbx?EVC7-4`|siI!=E>u$y#9fq*)wuj0-s%(xMAp+_#FjA!}}TA2-%gf zx5@)cKk7Ek*9_m)+QV-kych^8;%9mOF=LuO3Oq8%Bz-GqOw&K+lyW}t;eSGpcKpjj zuLmA^m)GVoiEs2QZ~44?Mc@zbS55keX3nA+f2z-z(tprC>u`P|@re%C*9GSN7T_ZB zy6P%4+tbFx&y=BTOz6Wgfw6zBir?)|;&p9+&zeEOk5YwIi93M)fr7D#!sS)yEZJ4D zPXPZDfnOP2lT#HhEL6pf*uA;7Z4|+w>Zt4L2JNH%|^Ga@Nn+X$ZQh7mPtw;sJVb1HI_~!z#w0Dz>eo6RYUN4MCY0POFMv zL9bR}AxPJ#YK?8EOjZdd752c27{tA$BDNzE`$Qb78jdv{zQiXTPt;D*yJ)&Nhjn~~ zphQSxhC;9jUwkhDQ%aXx!x;P@{{cQb~4LmCYk2f^s=L5Q#?0uJ?`m?D^F|Q-%{3v z;U|1s6!IxdpUnJnpW;Li@{bn3;QoOs2%I*iX#U#$J1r;csYC%I*x1@xy1%p?Txtck z32Gv~B?*#$n$*jcQT_opN(vD-ckc@FWTh(MPa*CvozI(b?E4s7R*oWST*}a*|B5Y5 z)PRkzieK%o3|%&(7Y>7EfydV(8uv%{XE$@7NNjKEe!}$1A=s|GGO)!CbAOfb9raeF z*c~gyMIb;}oJ^1PzyZ*yh;*cL>~>TRn}oNYf=o>BqoohCdfSCKbp0KxXvg=;=*l4M zRjy~Twn*$h-}eXHWu*1 zKH(u-j$BnaWbd_!VHmOw1s=T?fnfF5%Xl(`y~Ew8PI2VJuixluqTS+Q`3BRYib)Z_ zk>J7HwM8fcs>HR5#8hBxBBx(fsAcY8f=ZEG+1?Tft)II}%eL4d&Y?Fa56hTJWQen% zy1^jZJ^zC)1aDMgW9oLB{|y;PxEr!pPY`^wI62O}-^ZhUO#(yzIQM=AJJH?&vc(K8 zq@xXr1ZE`87+(<~wo}O%#S7KItIZ-~@)YVxvzAJNJ-FOcjr>dRLWoxUW?puHX-3Qa zXy5T+6|oj2wNGHDsDV%S(*RIL_5s6WHD4FOp1uI2bb?bm9tL2b5^)G>4CzHRr zr*1xJexE3mzSOC^cbe{w;;P#_O@HlEH9a4N-`ufd)zNiL7&Cvs?3N`tsump+640hib=-QZs8I1c@pG3`KwaVM36;lSULY(<`kHaqYmX%2os$UT@&piwxf zHRTIMLWxkMC0hh@&N|ZQ;?9)Zv{LTIxh zS!jb@pA;!Q4`mVoKQwZW^g8}9Y4N_5{>u8N(R^;pu0d~?V;Vw)SPyLla|RlA z3fD9~y1Rd3HFl)GaxwOFLM!tPmHOmu_1&;pc{L?5hdVmRof_TcFa?z}9ipJab=TFa9VZGM8a@nKd0RhCkd(-vKqVwxoXpo#^3$xp~bqzJ&Y8 z^wJdt0!jDNx1{j#*zV>)@W#hr9j42U2fAigU)bNh`*-F47Td8@6}aEwrMUxQ*&haW zf!C}QI-pDYFHVtwK8nX`-Na~&7urfB?+I?$zBa;kP-xQ}huzbhQ>ee(MpK{N1JC^I z6t{P8t55`X#OHcBgCofjb5!9>|mBxq;iP$yh81C@z0fui$dn{yL= z=rgjsp{<_kX8VwEsVg+cGVr$v{->DRUZtuEnn$l7Q@K$uMF}HJbCsdpQ-7wh(|$un z!ZfeOWgXSQeWJgHX^$PIR$e*{lOarZ>OU-^I!Q;`PfqBVOP$9p{cPu#jV;`j|8#6A zibabkCPVu&k{InRb(NI#>iDSdDK286$6#M`<7T{Mg>5%h*b*mut$H~*V-=4-ZDkr* zEkVEAGU^M)=Xn+^niL-`G@w7iFvL`JG`Ry|7=b2P=VXHrHwi78#rFAY(#M0oOH zOs|WFT`v8`ot zJS+F-vI^vXr2DH_f~+;?v!3g8h)IZqQ|vY+Fg8Q_>XWf~mPg~;fdYKFx-wow%n8?nbW?D}qkmr_9&+>5-I z2ECN)g`1K8n%+2R-kR3TU0)J}(S|=c@(an2FiX;q2`6=4V6nfx?ZVnqopy|fJDmf& zoR-7HZ2U0W$=Emk?qsAJQD0E=jQd3pOA6l=;bCxm}^=~fL))^Nz3#9%Yb+LC~ zj?-BX4Ex}-6R22gPC4lAs&uU^ErGMJBujZixHE_EH2AE4Nal!B%v;TnN;Qr`WA_YN~ zxYqDfI6j>JrNVkjL2JY{SYa@J6|b!3qnD~NfG-KWJj%JNslE0YCoww5y+N8e)G{%n zSWXt_GYn|F*t6<0S~lx(S%YSH%VcqIb|}R3SfQ0Gyhv`ev zWh_uGEWDD0{Q;?Hu~G!$ zJi-W=Rd)W){JVOlnOJ(fnaHRXh^yv{tHNFe_kJ5~HlEvu9~%#1X+joVeT)*gIIS0? zf3>Y(BRa$vvi#19Ekv8oifwKApkL|U*gK_Li1k{!ljwB+43=(|q zlD#<^KBK8W8=tW2ATi})T(DGz{?=2dm-J_&BNmeCC^SL|CL=r(5BMhWVq^EVE{^aAKC!i9U}z#fK^tGMlbOhHQxF zOd@*68^#E;iUvo}prSjLB(**=9v`+p)~`TwBz8+tG~6B)de~gTqd*PEZpm*>PJ!yo zc-VDn`lCCkhw#>#tk!pSkMLN>M$Q(i5l?By51^E`<^Cs69hoKJKi0rdh8fBUjBZo! zl%xLsq1|N!UY|OfK%3ksG!7$hpU0}W77mLOM&J*uCA$S9aAm%(I%Y@Y4fKy6Q&^0m zPPm4dG#1vAA{=Q%Beipor-g9DY~QK;a15sJ(e>IZZyvcDri1axu;(+cfGZJ zxpDHmm)=;9NSQNb5>TI3n%}2A)4&sju6ci{P?I&I+G095=)GIAycV*&51xG+jNt*i z$PRFWOTt%tuP@7OT&ZDu!qRW-T1G$nL5)5eVx#j@eMRw_a-47Iu5pH*R!7*>io`}2 zL=ri%N;a~P#oeRf4Gk)Gp_6#YbTQMt^!eeA{=EjjGxPgQfcV8dqRGQf;$c(Fed{C9 zW*VMt$u@aWNPolJ|7~MC{+h5T&e5p}zIW9BZLj`xC~JO;uv>%mY651SW#Hr-QFVUu zE^5IzY3D!vOA=bqaF^7{lHwl2YFHyawmQ)CXH&^Bjn|Xhx&4%wxNI|W=3_t0@Nc=q z2j<M`;UCruWvAQk9q|9wE6-hT318#4Eq;&)OFk58Ecet}MB}19Qm1}9 z_3=tmvF+o7d{rROWjMQ}>W+iEMly7Pf9O&0!({O>6#NhVTsaf>!3d@lRNCJnZ}H_s zKdvT{ax~mB*Q1~6d>gH{+_>31QCO|c$EOr%&$iaM-%t zNchQGSxFAFWIO?SJJIEZ^{Sx8kCrNx>=J3Knt+g{ zne7d01OYx)l;!-xGL;7YGHErA*w1)r4`rTA(<@l6r-;l(|5%}4PYFXS0!qoftx9Hk zEmF45ObR4r_|s3t@eO@HYoG6jtEVss3Pw)!A1&ndtzdrf-|vbtq^~VwzD#=_ish4Un-e)Tr}D)bxMc zZ0IBg5d!n9*&ABHa8>qG%|djQ-?;PTL(;f7b>xnjXE+>>&_u z@PBgP&&!?wG&A6d+>877%~I5ySdjdle35!|Nj3s@iJ!!*+V?GC=o*QHaE)lF3raL7 zcwpbhau|^+Gz=heEV%o4rf`Se)RP#u*Zx;<8ifgOPSlu#GVMiTct&s@BN|>} zGWT@2%P`f0^QCy!M3=k=1Yn5RMD6&kxO%hj1)8dq7H=>*V|<~ZgrN&XAcjA>6S~P4 zo#tW)NU4Zrb#hZn{EecTid!s+}h zgQk52Y;1^ze`~UE#mVr;Pu5=eunpJ%6S+;i*!~^<94T8Ljw&C~2SI4UcX27#kaZhi zX|9ayXOQ5`XS6b#*k-YSe&SAm?=-t#-hl(g#!hsT*6+o?T+6>^p*X|8o)l)_Um{v5 z=jJyaj9(Hxa)^6~$yEP94r6t(dGhgej(O_AJxK%2Q%{1+^y5iPdXZ|0H`kk=1!g`Y zA2$H5R{oPX{iLu$~^EYf42IehCxzfHON^Dhp5F3iCr?ntO zr$pjqli4vih0W9*fq4%pSN7`4_)YzEc}*it(spP=AUavf8B@MYX2KCt1kDClQDve} zu#!8o`r19RL|*A~UskG6yFC*P>8?Y+>8<62NkGYAVe9n?l`>zeShPrNwAUW(Q2GOt@0CTs z+<`y%!@LXiA#{ZoH7EYcuhpxTkJ0D*6I27LF!r-}^Ey+(b1O|lo98eGRk3ld_vol$ zjmQfh3oY!Utw5hfCys`gy~X0=SDF<}Ab7Q3zO7Su$Pe`M^!Cir7W*zcaGeuBGZMPS zU(3kKy9v#KeLvRCEu#N{Jw8|5PNF+&=&enf(byVzbOwy2IcZo<2H6eInJz4peqiU{ zQ{UELa7IZ?db0blUK73_uEi+UhpxCYR~uie7hMv}@wso2KzR8NnYSA2qNB$8wQqGA zYvPBDH1!K^IiJxT5b#9dB4Jp&5#AtT^n7%V(&Eg+GM_}=113!BY?nu** zHun_$B2fQgfijI@<5QFcP`ImXz==L;aw;TQHFljn7v_;?WgEX|UzD9M`>Fn_t z!0%p0U8oWgbH9B{`DD-dIx4;w-|T6Xims`bd_z~&A2Mry)g7scpztGKB~N`Ft3-Kg zp%YZINOa__^^o<}+QcI9{Z8Imp8hTWlL4w8T17F@KvVT(vmi8@hFulDm8(@@;9=~Z zIQ_2dm>*%g{`*Yn-ukcFuK%dT5ROa8AgVXI2R7PfBdz{Slct|up8hA%8FWlE zSl?AQ__EwX4~t;52#@1PgIG3%%rb@hA8I6D@V1n_iaViLmn9I^dUaRhqh-m7vq;hK zmpZc2gi~O$7AV6+_erwyFwD`xFC0gaB6VmJ^-NRKhxDtpVA@YcWfuMqx5>ZJ4BhU{ zwoCrx)riN=_C-Uw$LwLAYwZHuPoKzpg80s<^I__M&%rXS%saL!ZK!y=af$1!v=^=W zPBZf3p+#VFhUQa99K8cFhC8hJ0((>s4{_Mac5VR*js=;(FvMhS`*7u91_J?DJ8Io+2Ssmd8^ znT1tKYD64F;mD?AcSe>9m{*nNF81prS~;p`M@6wi$SY-qOyxB-9$1w^L0p z%d6sjEPtxRqB?&*si}TuA&}{CMQj6V7yA#b)4#60M#CEVb695Y^p8wsFbL8r#V$DH z++M>yaO0+M3TiU)W%?OT_HOOLW~%F2x#s;@2i4m)_mG^?_}$BIyTU5a;zel~n}Kh7 zkEYEt{+`NVZ8uLGB$ru#HV|9>I&y{BNSphjSIuwD@5UuTlY{t+yf>${m1BRc{(F-I z{89YDGrxG2CWdi z-dPoUyYj%!N-T0!Lw0iFDD|Z=2&rDt@QdGJO4sx|1|qEJ#Q%O3=4(#4`~Gx<=vIH> zzH!`8?KD+rw>#xffeej=g52t~l4%f$C7p!yk3>!3F!AB*U^M0mne_l?1g_3eE#jq; z12(^vgb;~m^e3$k;`)l)dUO1R-8{yZ{+qwCrF!Ouc5^Yw?%0uv($?}8w`Y0j!Po(F zEy-GYElEV0Te5p)^!;o!xSrQ1a(ZPSiGIx1+{ZbiH{?W0TUVY$7!^BxpztgNK8h+qj@xsZ0#nxa% zT-4h=_QmM9-xr66$3fuZP`vJ|<|N5PeIGAv>OnaKNR^me#W{5;E$PwH{bj{C&uvi9 zkd`)XGj3tGxNqvZV+KgNN41zY3L)!f!D!^)ggdOfFLO8XWEwG^E@&9-`7x*ZPtN$mEKtS*b0umHzz*J+s1?z>Vsfh-C7B?EIRTNuM zEMlvbLPBUk*s$TUu1kYOYir*Yd$p}?)mlWYngDXO6{S@WYf)SKtlQSu_Qe2}{eOQm z&$HRhMQz`H{`tT@x4E1-=ggTiXU?1%%RCE#erj26_JWY!W1I@`ttze&;pygx<)+TSf>#y9V_c)?1I zX|*s+HQ&%~+vm-2^LL2Q#ok4)|69!=rq}~?JFBsYH={%!qcbLZzV-fsP!yG(_g?2N zi%JFqzd`8cc9x|0Bh%WRH@5v|*zXqqR;n31Hrpt__X$B%QC+=aVVT(oQLm3OGf&uO z&nW|>=Q`7A)31;{_3_Efi6pLM$C~5uYJz`E)OWXJqsnw& zdrTC&f3gr}`rq~NH|@Qd#vnUfmB%n_=IkibdYl-q$98h4M)Nul^&H4p&%UIYtv?#b zi-u7oVMvk4p^4SrOr{=^;DSBypa>*{fl+g-Qaiud+yhP{0F&1n!dm(fgirFVcNpUr zGa_AvnsM>;TEJw-tFz<|116THaGd2$hB^i$bHH@n3D1X5AYAMA(7U@s3`lia(0c)U z%J^E4T~P~VPoGq|ZITmyUM}BSm|0(|C1=W_oYOS`O$=8S8TA0gfN7_^5K!CDaF8u0 zq2Qn%G(MEud{(Eu=l_<&&|ZE{%acTm&!S7f$%a0c({_aU&2o3p57>q(@E+%jxus2x z8BB%i3V3KDU90}Yn%LH0>J}et$>tRkStlzMr4*@@Zex>o6WGq}WL+atul|ekF8M#g z=gs@y4+EJQHN9=m^bMXrVBXk;N`pVT*8AZvTU+b{g9rh``rfnu`~XP3kM#~;a!wae z0dctkS&xyANbSq6p`$r#i#gx1u>{q&ak#%sF~LyKPUTp%9XNNWocPSX5KXNulr^#E zqp#<``*O|m$=V6q@{bHxZg7^Y<8%0g4T^x9QO82#wy_CMkRXMAkE zm$@VEzg~XDlo{gW!`Ix(o%1G8;)s6f^^;;dYof0&4#l3Wjcu*j`TC?mJ4}J>$A1k} z)W%4$#W+Q)n=<|fWo!PufQR>)AIZMkY3;lBY3|be7fmi@-;L;+@UQXVOhk*EtHt@0Y*9;2^PXpX1=1e z=T_5*D~pU4jUxh!5ZBGn1Yoe<%qPwPn=Ezb?fH|kU0JG?QB5O=B;|4nqYVWpAv*4P z!acB^kui(UpoAqcR^ZOo%`9`HPiEYRUkR`CnLrXu>M)(uu@jLO7^05}v+Irxbd3WI zyQMB-6WsSMjo>P-{`E%|5v#3t;Vqz$1i`w3+EqT>eX0$ zabm=%i({9+(P>NQH=!-skq^ceyYWj|JJCY@F|?$Z9rAOl7)xu;D}(|sdArxBO9wd7 zddwBq3l%KY4`lxn>%*Gd*w({7W(fgPW9%XdEr@Akt#@NXkh%r@uP$CNg3(FN74fLy2B__PX7=Z^>n28`y7f@(wL zz<{PPwS=I@k+ERj(b6Ay<+N15UCHB3se_&6#u^zXhDUWpI6idGnxQzEwL2@{7Cf6< z$|79#7f#sqQEdX!y=89r)=xumkiEVnl)p`zMno-$o*dOe#`d$8-idQ!H2@TA!nLJyjz-bsQ6GPy% z)nyTre+0*F4B>wWX0v7*XIQ>&)dpu+O|hG^sJ z#pep4k9Y6ZblQ9IlNce)(qZ_Xf;?~Y_vn0P`8LsnRFUBu`Cw?vf*EMcn?d0{0r~rtrY>ykQWiKOOgN)utQgdICEue zYCf<7b)RtON`^?-Yrb1A01&t?IgAs5Psa-UtFqZ7QU8?I+99pA!#fcL#rij_E;GS8 zvB4{8n@YneA}i?>Gw9&zgN8jT>;0R5>?&df*(8=D%Ff19JPui*!Xjyw68Nyjl*)J@G_5qjDj1sG{+in|ZTSWYQmWMFaz(Px$He6$W@S>$CxyOO_{)P>3s@f1 zS{U|;IZQX@F+Ygj;2o}pV28cS3}ic68MPMNCp+AZ$HZCYyJckW4OU1D`zEjIb>Q-K zXgfcgo=@UF=7-U$uS}I_alDQybz6f7&26LS(7&CfY#veP!Kt%<3m(mnd&h~dmh3f` z+dH_p^m6R*a}Z9QsZU8CtELg_=N4c%MAv0U@^jwmdnC||NHTe%Rl}~P*49QAaZOor zq(ks#E|jkz9M`)tP2nW^3w_Gfl}jZJO4XYx zq+1%g6K90YC1R-7uXQTPsiJWFcBM;vDIGKMnW(LCNloObhj>YlnFg3O zwE4nf#d1n&`bhgn6EVe&6_j};Yy0Z+I6{~TlUka=L9C2g$_xFGe z{~}rg`#S4M@fEh8J!tx5<#s3fQzeU^{%SZrAXxtiSGEyi>#h5|dXuwNA`RxU{yjRaXGuFL!m)^&12j^?cBf{lhhlV+0WjWb z#m)*N4P$>WVvpSg*f+g%N&ttXrDBAMy-O&gDj}o3GFqS;E1~hzxQ1MKnxEJTE=>*5 zb%KEkw+gsl)4M2A*Bsm-%4F9AgagKF4BKmT*&igoV|Wd<3fpZQM$wkag*b)(B|5XE=IVBoDkJellW=#+?Zu$YC=RKm@^cA&{7<8 z!aG==&<36zrK}|Rk7<^XF_wQ8?503@8*TME#Gi@6R?ZiFf_57D?@jx*aR>S>-z=59 zt;lRcAdL^n1xT?RisU|6`aD%YmYnlfr6jS*Ly;CSeyxlv0VKNPi@ITipDuYbRUA<- zj4*`>E1ZPVlarB)HA8~jwMGy0Z)za)O4A_L*A^uI4A?rcqvaAvTBjx78aqJgo`~JC z9W}oiK$?z8&Of#aSeL1Zy%dhU z6_({NvKOmV)oR*5ok|l4M0DR$e@|hL`Fl<%$8=ybF-cK+x*_Fl5*4 znW%tqZz?wPR^$bP1m~-9ja^+uKp&JalojA3DBKlerPzNt93NBk&edYB)vS z1SK_bqqig$rE7fs@KAo^n1Cl6h6elyGEznQ>CaE&9U5RB=k!riTJp-u8z60Fk*MJX=0}(7TcU9On+UyeG}!yxH;iTP)Zg;r zXuY_K7g+<8QH0F;nIuuUWD>JKR;9cL9}rq|X8h^_rN);)-2i(S>5?8wZXhMCd>n4| z^NKG0Mzy$hT$c&}{}Fvc=l|iS?X27>0&1d+wnHQ$c48-gtyfmZQ7U5cUq|HHb(;1W za&{;6VDCPLVe{6og473!qb@;OT4O?|u>UjW7n+K=@k`K0F5&!d@s9>|)pGEiK5NnV z08~4`?_unl5TOwy)xymRV#=zH6!& z)Ns0Y{SmSs619)GhKKud@e4odT^OZ?Mbib11HDtog9>>(mu^TGk4Vc9=0&q4hgiU~ zVkYQc+{JX>&@h<=MaODV(-C}*` z&U}9y+QNPo0jRgF8UW<*LJ8GIii$w!9-D35RF-@P3bg{-0B6~&7IGG#o>jFzkfNg$ zjSP@Z%XfIiv2{2$VN;f)@^L;sxZ z-M^e1+8-pN3A=-gMTG*wi2`p3BHQbm;HcR%*@`eDQG9}z}&ErNm zut^cqmdxwumoB@-b?kCyl1P{g&_ey7hN9GITnn3y^KOyH8Bhw9>p2Ie^fOG28#x4|?xIYG=LR?y6sWWC^6IucIUxB8O>pH1-FC z6Y#TtL=b1#ms9BF!ht}t`kl7`1;^;W?Oq2mw6&|x8ThD8KiF z#xE-@K*r;~urLZyX8dXz0)F-7DJv!xmQ^4l9yKx|`m~ucb20(dCMyjPh0e0)NUi+Q zL+I>xn)VenH6fU2gpmuqfc1z(e*9_%*{cx_fJghiqk&KSSD~I(;@$C9pX^|U+Gh{* zS;4?7+E%1)#=_iiq4$tJsTKCE6#BIT{Z9AG@ATg3veF+HJyg(mg!lQJQd(1vcU8_C zgpDAbXfTa_^#}Dz&d^`5DovnKo-{XOyE#B+>BPTzpxwaOZ5 z9y46W`sHC7u2&gT4M)(@#|Y!=Kc6i5x94v#j4htQZo&(c9ccSR;2=H(Wt*aNCJ_~_ z-jeg|zKw};V}Jq8WCCgS8>KEyzi4L^72erZN+*;?O{AV2m4)>?Pvr;nF%l=)44A&g50dJPCwEVTJk3BbC*A8)D&xR6Mc~R)?9*|q*quoiU^3V;>T#kWS`#P%a84- zCq^P5Yir5E_Ba|NKf`0g@ezboX8ACA0vOVaV0s9BC90DUE=i2p6s>x;#!T}riH+El zIxI}&QylNMZUk61*vdT(-;2$j#D|(VORWPU!%LFv2z*yge^f-3a&Rjn_L@1FH?&za zVUp<8U~aK`!qrk{)=z@ur+WoODzj&CT_xFka=xBb^CS@D)u5Wi_C8Hp^OBtH$DtHg zPpm_fm?phPbp$k^N&Bn2npC9r?BCF>Js!>XCl25yha-V)ur~{iHE%U_E3adlMxU)W z(3plNKLrzM0U+Hr!O+KveiwKxWY-$V22b8xu!(nhsTV^Es^slougS*F)Mn0j z!jVYx^A!@kx``MwWaZ8#80H?+uVRKDqE$zzF!~4UKgL$8^&ex?^R`kR`(pNVvvOkS z%vd?a&n(PsoZf1DsjdVbraRtq&*-{$636A#L=X0F;{126`AvrtMcQeR%UJSJR(U7?hu|%v2(QERvz~q8gW47{oY&?R({V+{BCd7_k^P8<8u^se`77B&hq<@< z-OoWS@`>T$W)vpm6Q^Az3X9Jroc%cyCH{u~^Ir-}H1dDBFupyZag4vkLK2P}OJLm64c>Sf#`t>O2mWQjw3O-{|15=fYMY<-t%q6qTKOxm?<^}P8*-wvh_LiU;l#C2 zX3wId?MfG-qqDdU`Jv-3ZyQh-d%cb@^oeWxE6oMYvKJ{qX-Z6*aN^d2aAj)ISZCS8 z=EK6y(z^I!=^u5Ke^&PQ>SC$7%GVbc*TsH|b9jn@NmuRf`R#2L6guyVu){8RW8SA3 zEZU+~r=9J~_e)|!+LC9%ZkOL1185#Z^Huf3{C9n zD?X_^;3WU{Pv&-)c;RJp>*@BnuD2VzZXYwZTa@5u-1;o^U2c14me@U(96^s27l~Pt z9o=+SF^l+PUMai*r31=?JXZe6uV>TV>wdN%&olmUC0)e3c7Q@l;!fImbr4c*tY*YjUe6H zPfM#;*k%Vlp<&;Gsft-K^dkVrM}-qp**j{+vK=5m=gVDR9BSTJQozd3yPVAS%5B53 z#8uD&x-2`G!*apKzJ@06z5L7f=`!se>kZiS?FmpdoWQt4p%{%dZRx&+=#z%L=No;2uXqaTEtJH3NoEczBiyl}

BDD2QC1A7^q&s*3t{6ce_kIeTgUppi4UNjlthiW+;q@ z_7%hZe2OUGXSC)$E0R?&#-z#eoH*J%i<-8z9?uVfxRDrmn}dp4Qsq`eTG+xe%Cn>% z&5Mh+3|6`NhCS46dmwdiKM*WlgA8>p-csC}GZXy5e44Vx!SF(nJ!_ObT8@MrZzr;M zGpeB4&E5zWhdHQ(fx@Cv4ioSxqsT{*VXMAY+@#hRU+rnQOv={0e~Yj^wL~1!e=uOS zGok*99oK0KeDveE(Aek>(OY)0Xak$qkIA+#&ANSY0O=7P5wKq&dyLs}p0N9$rLc{m z2FwCghSCx+qt9^43E6Bu%B4U?t@qd@PS@FTj2tV`&4(kP18-ASV^t5KJ=VYB1Q$z; zYnk>SFB3A=G04muT)p#plTqDoU~GewA19B(`eDT1(t5f~8U(cTWtw+8JY?eXlIhMhWtkOjCTjoYk4ijPdg zGK(wX)JohaKQ9~LQQozwUnNd0n>L?a2}sVMz2+NZnYn|}`FuH-VlTu-o+)0EaKf5JU{O;c6qTJ z^6cdX|b#Ej$2C8XI}^PBe0?=@)m)NZ-G z%X@Y1p5E;nVI5S;dDmirft|b#Ng1cbIy?0YOU%E72sf`@Opa$<=hgII&8sb&N;d=c zUv{zDGZ?Eyc1-_Z2F~2?P+XJ*5Skd`E(8fK1h33pMh~VCq_Hh`O>9Efn*SS05fx;i z;LEPY0KzF|$&TnRiMTOI_a@Fz9iFx3?=Z^gZ?~3$ugT)QV_6j;n)z4Cc_9Udp5b#c z)YcZIzePJeeP3Lv-ZSRab@DyYV$C1BcX6+7x_i9fGH)yEHrYJN8=Co;zR3_becz}PL@F;^#btCtbu%|8C{6Wp2(Zq3*^ldSnOVME=~dS4ZCSUiNskz$|% zgEZiyx0L#v;srtTL~~galXgn z;m%I~w5i^d$UJT-jB4%|1COjL?8*yDP&NH4rN70S#P;~M@p6Ta&UIecL!z(2w@AN3 z{4rv@H!Lg&D$dlx%k08UKUU|O*2wVhdx%q2vexb3`@VmeDA_G?C-B(qgua_Z`+!=% zzPV3&53%#zw3E7bV7D5|kV}TD^phK7TxxZ41Yprun)h z-5j*EwCfJ|T~iMV>s7l_aGcsnwtE6R>GnZ-|L9!XJ%^iUL*5D20RR{vgn7YU*c5r3 z=5aPx_2QcDYR>95|0vuBRFaN6#C19V%QTBb%T8tL73cJ8N-smIpe+M4`K!Q4p*Clh+vO?I-8Y21I$!8sgCNmkC3c%dtWnR6XzpF)HdGa!`c`Tjjte zYpH|OaLNnZ-4M_^xW$wYF&3KJ0MEVj?$-Jq?Q?z*7rEPI_XcCZH8tV~g@+%mZQC#S zKf$67wJUD-t2g-R9qn0L6Ot>ibxLz3!v0KXCk+4v=7H!k860JzZL(8Wh$Q`-4?XEu z*80KEc>hhW@`@My-H674weWE=8h@5(=1iM9iTlIxk7+fCgF#_VQ=EgxFdJ7XI87jD zNKo+$Xy909L0<>z@cc2>Vz&`DV&Jl8#S3=;1p6?E--Ye)56%C@0rj7^9H4*xCow4K zs>+@Nsz1*iVE=rHu-NE2BNWiM6y zsD$#4o9LhAi^Fu#c&Asr-vg@ffM?$e)Qc!J6BlOp*6esw$6+bg|7VxRZUb?k5_epT)MQ1PVES&V16N4ss7IC{@nUixzsP*>WSMu_ZiQ> ze=eD6@BD}*h~{ESc!rO9Yz7;)f>}oQZw`XIgd}6_6Xz0r0z$^f983{*>WKuUf1ReGsXFLcxx>(-*bO)0A5P@|sRqaGg}_ z*R-cT-6i;D7d-xt?#isB+a$8C-8I|bhT=cFq-6Ac|D&Y;KIzMtBw4me2<%PYe-{LM zZ46+(4h6UY$LuZcG0rJoABDn`QM-|;>v|q zyVTeJ9iA=a7C1w7jW6XmMp*9#-7>R8IbTRWm-phwo%Zt_h#M3!7qn`x!|QC6<%Sd` zDm-_JH!@e+A5s=AK9$Z#GJ8NLK)$9%ubg+IS9s8Z?d44QGQ4?lf5MZ`dg>XkhF?QmpDC@#>IEVEnYtFWv^g1-J<;RO*5y=HLPO@12j1nqugYGR9p}Y^=sIaxdx{?f^A@OH@w;NXIYP@*xRV>lE89|oS%>^ZrB3NJbz65QLQzp zLjy@eKV1tg=KPku)m{O|YTLRi0_%CJ1e_csXHv4-Aa5odl>DzEemZ1)E^cjWY#Gh`nqVwED)3 zmIm$yD7mo#3_t8z$I`6z3;fT?hWKlHk{mDhR%4yv{>-r3@H(5Yvr(XFweecMG~l&- zmS{4Q`%Zx@+>WCPhcg-oK}4QhB&aC8PFSnc2H21asBy-A?Nbxp{cYwL;pSpOFnXNc zS09*ZCRJPS2Q+SLG!$J?XGQv&(BImg)-_+Z>IqoPe+qep5)s!5T_(}t6Ufm)%-nVLUnyMuB2DM7)5rlJc<^F zxurt?TF<7mbdTNJ#WtH^g0~%_uN0>Fhw3S1GaCoC)CUsh$BB|@InMqMAP$jpek-=d zCg3A53TUw%2jt!SLW5XmUbqOS0gt#5Ggm9n2hB5>iy)~eK$DDrv;T$}`abLAEF&+V z7Y8he%S)@|xpJixtK{tif0)OT zdEAv1xgbo}%V6Ppu^9%Xy3kWo9B5dn8QCazw4k1JIXfYDXi#F5GNk(f&StQ)*-Wn4 zT9@m3D-xeZ!SX=0g~!?DAAsHrL%aK8B>(IUx(iv4y)(+&Q6CXJm$EU_Lj6c!KN`q? zc=`^nJSJp?XGT^YNJWpPGUSC*S`pxOz7N;%X#H7ee;(?IUMDNzGqd#@66uYJTbcia zhOi(z(c4T&<;Og%(-svdKxlRoex&9;* z-J8jN6=mKu2+@IT>03$A08gXromICyoEiw5$!_GDaZ@CzqM-u23<|Fo@`yoxGHmF^ zhE{V1u#KaM4rj|r_E#}`DEld(reYmVyslDI%n}PR*7qv$4CXqqklac$7nUKK>rKRN zyryhj<=zz5C55)jM9}VTUZNB9DUJ|Pvg$V3bJSeshfp0v*}I7j_quG=nKDHugdVBK zu(NCheMB3MyFi>8+qWt&pRPNOc(=j6pl)9;?f*1nQsSis^*NA=AAIX4njGGS2|svc zp8nyp9d$#nQ*M`y^Xx2E5Xo`Eo{GI{Z>vhk8QxsR(BQHJfX4#@=`1LrluMUnuyEQh zbJqNQt>=rzJ}m&h3VaOp0jqHbBTcG=XelEXFT8y3B{E=C^DaO?u z)y>Q-z((ceTxO{Zw=%D$3It#xk`N~095*v|P(UalwOUx87AtlE-f!_$*1o18zRFWq z;pvK6LvWxEVK_qMQJF4f-%#kw%~DjG<;em<0c$BVZi?b>)rO810ns+vNHV%6@Cm7JF@(QDw6}3B#b(2D^~4Vs_2EAY#hgIaSK(%zi+}|2GAj zbPW*urcT@XX5ngEXS{5U_^eRJZ8B55WF}w`g`3cch)(2Ey)6Em^*0hbB3w-Jjl8%` zu?9pw9xSeD@ZNCLn<(q%#-Fb2oAUC8%)lK6xBIflZn(oAhw>vr8mSM%{Ci>UeFUy@ z3?vCx(@|0IatMkl7I?2rDRCUe2D43M7bBiJC7@-J8zor-;Ealjby z<=I8qo9>alU4Zo)n85s8P<13VvfXjMsh!)1TS~a6Ir?k@8}=EFKG$(KqcdEQg7OGi zlEsu~ChB8G+Q&%y15T3jtNUl>+xtH*tR*hAy4ULYGW^cYerr>bsK)s^tw%a?#B#TK zvYS~BjUrwlEyqV;VGuDpQe{J`Z~Z!*+6X9rH<8*WN%>bH#u%UPBJgEEsW>)8l4nQ+ z;>T#k_B6s@e_Usl&cKs`b-)p`p$eZp{zqzd_@m!g=X#YA($TA<{6MY%v0_k)9&+qQ z9p`SG9s~6poZB6BD}+kaRcNs6h#J zHw;-K=GXVXP)yd7_OaGMFdv^3>Ju}~CuQ7YLV1*z_!jaj!rTR(yuu5osy7e~I+ud! zQXTK9W4(qKy)?xk2+JB_%WSQIOn1EcoAxmuknaX#Kjz z>|(a0PZU2;qW+m|dl1_kAos$7>KGlW3$3A9xL|Msn2|}maMSoW=m43=4K6MaDA0zb zMiLUckl<2!A9J@Ju(?CI87_ynN2}%7i>;q2ML-^ znq#GVZ4Iwek1Bj$ar7GBYzs(e#HR*D?13_E$WvYR{S2@-5 zxtURHv&Fl4z9HR$4}AcR*GvTd3LHG4n&3cS;5c}XR=DZU7EY_?$>~PPJ<4c~v=K9F z_M`^ufWxgvLj;AxPcxIi&8i}*ww(?PW%hue{FxDyGx6H7z=OU`*%KQ$VjNHhY>h45 zW}T9_e+kKd=A^%N%vI89Ec}6Q?`^)_Lb#L`Y>m0!W|0PIEqK(V4$Nggi-W!8t{JyM z{N8gv^W04gdr08KlhnQ_b);6}cG#M~mf%|~Sz?r~=w#hsDaIxklCl<528qEgj?dc9 z^iRuuVXQYx4Z^eAQLsLimCL1AE#3R1evk-FD&zK2+#H9U`=33z>Ir-5y#iajBaD;c zV`5tyUDbyhfzcv=gcBwKUuaDMWd5nY6L@BmeT1o&i!1BNGIq+QmdE}C+!xJIwRX|!NsG6Hk^h7A82 zj!*`}>l-Wbq`M_TTf3yF3* zIReX|2TO4&YzF3csquKk{;HSkt(F@tHQXNH^NmTWt4c+rP!2KW??_x08`6E>8UMt8r0oyunCP zn%Qr+;fv2AOSh4eRC1?#Ol!?FV}PMFL#oFx##SSjP-F{{@P@=4W$yc8ai*l^)Pmm@ zn)2B~bAGX~Ryp-XzZ!Mv6m-E9(F4Jn%HM1kFGO`0Ckf|%v_33sOm4fh;k5@b_^`RW z4Ehj-Y73NA=pM9TG}k2i@;2;JLy(2r8TgN7{njqxdv+*2S~7oA{4inT+r=d2;P!<= zzG2sRmt6r))>(@+FTY$DR_izuzGCpk23BA~q;Y>>%1sa4vwM=k7;TRhdzo3bJ&wl) zsx+C>D~UgG(>Wz;!6t=zzIWHuE>o;$U9RlZ-q3{&eSn)1TTx3QRx4%dGV;)yyU83I zO%m!>AWC?+iH+Z!Hus`QPBG1$Mu59J3389L7Bq0}lZACQvO!+xY`pCC#PcYx4LPrG z>Iv&ygi3di-D+}?8`fWtugTIW@?Nz< zR3Z!mogW-@!g5pf8^PvB1^#fri?q6d-;bw`4>_Anr+N4A0={+dEO-=_`8?gaC>e6BJH?@A(j&XBxyw-;l5-% z(B3)}XQE1hB!o{>(`!AVJ`V~FDb495ra3XSJ+il{#>*AW@y<3Sm#}L2;Y|HHU0!CV zcFGmes0Zv=Do?Pao|AGn*{vQC&d>CA&LHs{yaLwX^)uGY^w~)7^>+Xm@L-SuWQ^JP z2{W#8om955q>Ffa04VC}{?t;gG?v|5;MMU67hEFDPO;cT_z-{*Biq{BA=_>CDrT^) zdrH08Bo)Q$K72?}k5aoa(-xj8e<`7OGj)}kkrv$QT#zMd(%?4@Oax+juHVT~V1iJI z#NWqy-LL%B)qityXL;H4J?A{H;e5}}6yLO?H*EQ?oqEUClwpy_cmPFWTYp1*-4`M#r!#gq`&mq;I3aH+B$O;v`V^Sh4iMC}=z zWr34zFHo*tVMQwk4s;6buOgK(9TL}-qf^B!r?s7c{>(Uvb{Y(rBQ8-hi z&k%jkkene#ohfo>h#lB`ec}wH!klkP#5yrRa?<=!Gu-UgF8STV^mckD+b+(;V~9|5 zwAX|uWkis6GJu?4N|jzsxuTJ(Yp>!yf~oP9RC-;CA;Y?J+S480Cn@*LkmQ01Uf3nojulWKp}mhgJ__f@4ooy3K}GKv?Z-`$T_a`S7G5f? z-=kZ!Ij%t+F+osU+p&5`s}F66=uGwj(GT{mD(l+zDyE=opeQ1sHaf_UOBM$?M*HH{ zgxd$j>M0Z}g7_nnb7lp?X(2TxUsZKE5q;gTosI8Ht}Wajcg+RI=3r!k zA$Deq-2^TkV%BLVZrMF#e{z1JW;oN-)}@)5pHum1V*EYs>%_#Kz0@S6b-~JUlE8Fg zh{*&J%}kg<91k#P9A73zKarcA)yF0c0s)G0kg|x zei>K??O4nr2I^$r`lYZ~Diw;EQeb^8D#V?EqY;^QW#KB3y~dQ{trJ$z(Urnqjl0^u zN|bI#NMQxtEi%WONbtbk`$RHuE%N>(FJebC;uK^jaR`&F#HKcY8lSmJ&fxba_Mndr zuJyL{sN_-8#z#ILhqyQFX#&WTDAQDVuZ5@69+c>dRNHyfV}&e)*Ouu5ehlzJ;%jMM zu9%$!L*p_@nJY30Wcp^~HM&NIYh>YjB=~vBuDg}o0{wYwjv;iaYPvC?N7tOTglhtv z4W&@pB9#PzeFAFe=S7n)mjD5lD2B4b4CO%>b<~WEZKwlTqBcpe1T=r@98Rb=PtG)8 zTK|5b{tTmJIY|tbDES*wlIN@a^T!MHFN}oBj$|{AZk#AiOp=4U4Z8V%>~Xr>k-<8P zsn0;BaI}9cOXD{V`bWu3*%xIJ1!IcZ+1^HUn7)kQE>56fjSiJ+zny=7u$Gr8BwwvN_m*1hDX*|O;d>D(^;s|Zj@%9L+x@kvshDC0j$ zstDk##VLIv!frhl`$-W{QBNHE{VVT_;F_@G96%nhF9gA$Txz3I{QIQo-s4nm?>Ut-CwoJ}9!Msj^3>4$=7AoYp7M-hE|To z>evQR9o3M>^D~Urkon3~iD*lP=Yg6Ij;0HjL$gP&1^M_c!n2{-&A={-s}S3XxTyC$ zeqwv2@vlq&>r(hk0zH*mkU3{JJ4YA27fOzu+leeQ=}x2&q7-jQyrZe}D(d{ofOnLz z`?FF`1X6H{DQEXuNlzE6iDY|M@-+T~@E(U;MPMdPV_Tkp|HcuI$cPugT|lPb>uxm{ zz{k5eaa`WMLqu)v>TKnqEDrQ@3HLyhIn@9Q&&JRBNG!Pn)9?OZB0HH8-0+AN2NZFhd zye7SO33N6!Ql4-!99R?@_*Tlz?Hvpo%utzLu7Y=L`)qtQ_;$h=s^j80UgNo5+AiMc zHQwX}unQM2R;inq3Wh)n3@`PPZfEX#!O2iSfh#aZ92YBk+1I?L*AetN6>lAa&5wpt zl)F1ybJs}kTAI|rM(3&j?&fWdT%){o`10dFEB6l7nw*Iz;F^`6D*1{MXW-;#69p_r zhJZMW+fNML&U{QZMCzY$Afj9IZ8E&S6yI3NH`zsKpki^Esbh900by~Exp{Y&Vx_55 z&V72w#0|&lX+atW;z`+R&c{1CU^jdRR>rc<7xpip$99J47ok8jG5x zV7HsB_Hagt!3GcT4@`76B_=7e(W8D5D+oCQ{|y6)Z(KUrfK(WVNLaFpDp7e@gLxgN zx~?R--BYT$4!gYysO@CXk8OHTdIG1%vJ*fH8!QuXF7aA%?0C5O6WEo7sETOgPxSuDX9vvl)#k8 z#ewXh0|kSlGG)|d9}wp(fnuaCZ6$ZXE9w-44p3lCXx|`zZ%*XeL}V>M$??MEeq=UD z=d43^weE-C2u!v4hom8RWWK{>6jP1&uuLXADbDfaM~%9fLbE?)skHtnD#J)!PZ7c< zlaFN1Wckr9Hw0*cSSiyV=`|wpaAJ{ZoKJn9Vh@`OQ*LMZ8_6DvPGZF7DlsR~^#3)W z@c+~({D-`*tcQu4d8E!E4uZ7HB|}AJR(p6bxPkidIvxo@E?a|-_W&#jT|jjN;SU@r z`PrJedH8GKKn=1v*uvsLDA-0N$%}gv5i)nq-PYY zL!KAb=|Du2R+xM2fwv|P0n&Xs&#!V$>oCsBE~D#qN>cL!lcpNC+%1|*)*+B!e2Va= zni`HfV7&O2X%{nvymtD9Zi~W%D+Jsz6U)S7I0u{IxJl6cCWhRyL$hevjKe3ya|kRr zcc4jfL8#tb!mI54Q1O_~!uV>&yV*1#>1Zq{YQT6;!mkv`Ud9~lK1kfix#3)EJL`PP z^SXH6b7~{s&=_;;jhaxjuK2;b#>aVq@rGV2o*n| z7EEq7G_uZc;EUSGA=YiI|KJVV{TizT6Bw5WK-chU_HlzLgk*E2ZFIEfwH^T_69Pc| z!F=Fh(DUNv4R1jq5)=oOU^%@=*cS@_B0+8e-VcfM8TSt^cvm)O&*Qv4iXqGYWNEMs z$KWsW8?$rXN$&qnPy_jLPmZBtNAfB603pRk+R&HVSO%dUo_I}nOB~L*MBUrMga{~F zH5Kr6Dqj;r7|)rT%yZ_s?R@yYQD$WHTBv5A?$ zM=*Ee8Qk7A(DXQ!oQY2-MaCsOG(gsvu`Wf!HcXM2iA;D)pF>_l^xiQ$2DNM)!P z=635L*zZClcQud)i&n#feVrrz=(uYg{kRi{sdd?4M|pEjJfzJXeB24{$)$w%o4VXOUxr@*9TauB3Gx*b{k4))udmJeTEzy zav^rG8*#Ic5MnLj_|g~SDMFGEtZyTCL||PtK(CJYaf)zopUFP1&yqG)vm^eY6li?5 zB9&5>;Oqa-&^>`Ih>9bE_X^hp)8{mPi-X_V5fbl#ADb%2|KA_GNO_@t$5!v!`9CQ8 z8ii(M+ZKsp|Gz)Pj~Ju?T>A0kV_dxMi)!g}AzDi>H>YLhbOgtd$&p9No;={1bHo`$ zF9~8ohZM4oOnMd=tK$Q47O$I0M2`0NuP+P4IqP4CFyQ;wPYT3&8($|AFu4vC%qQc@ z<#pqsfS`2!>&?i-iKGv z*1f;tA!PQpJ6HF|JQkz6V4uD#Rf#LJ_1oIMNQ(=p&EsF9{bt>U6opau61=QkB*6zQ z3Y9l)D=#9ToG~uLES%e=G)bmTFMgk#Sj)zvKTQpx|7yI(Ov|_96B`|k(c`^~&6RYA z>!}u&-$wz<&t2;1&k=k23$4G^;u`|R4B3}DI1a?Yda1P{i4*^bLWZF50V(2ik>q$Jps) zNNSv;-s`F9f{n8Iptx7!T4+n&$|i4Z+T-=!Cah<}F%{tYfAyWmeVp+&nWj<0DIWum=>XoGO8I(3~UA~DW~gRqux}!=Wn!vpZEO?6ko@N41+#7YQU(7 zL@in!Rkl}KcyoL(uVr!^KnzoOi?uh%+gbM*F5$)x{DzNx`4+?*#@nHb?Vrf_#ZbNw zawhX|svb{_;f0jB?#p3@6Z6p}#YL;?CQGL?}ugW+Ym*NuxF1Tm~NQ_0eEl-Z?*gSjX;CpCIbznV6332{1 zmkrL4M#*eCu8%f+U`GpT4Ov%UMwr49!D6xS$c(jU7}5G^rA%@>M%#G~o8H$tdx3fXKctxf zg2Y!ExRFmlHWtr;e|ZvuQ_IR?M7lVHZSX>yLDKH}SrUZY6r~#CzMITX?=rl{T6CYZ zE=xB^xd(uQ-KYo($lB1yiMvfxE^-QgF+cP>NaBr7<#wb-+QYL$)i~W1?y1Iko2kiV zvT6b^yKSsD`bjTM{G@n&^McnVB@HorgRUL`!%RcW4&&G!QM+jT7Y{|6Cbiau}!_}CVwWZ z75&ztozU3j7(H4hE3buf(2MQ?oUnJxoqiGz%9kynY8Z?}Wa zRfEyv$wV;qBkX%a{g==WG8OSf6h2IG_efD1`U~x?)4^L>t;2&C$npm|An~JHJs0YM zcR%Ns(qCxxCF>pQi9MUWi56y;JMt9#+Y!AYt=Q;{cKAW)FNxAOIKeG=UF2zzp8z4_ z{{lij>B}e3=2MURskMIYF`xKRP_@%<_`w~X7STRg9Dl#(hOXbf?`E1<*539+!`oSB z{y!<47p0yIN#Qj@pl|MDKD!et491U{Hb9?S*u(=w(x%ZEu#P&rC0j~R+?K5*pnBC* z@=!-pwyLcyY|VCf?I(#Y-PtfW9Hfy-AneJ&Q_bz9;ZkoYd7kC@b}h1byCHse+PvP& z2FXO<2%sD)hebnE!*W9>4-1C2vmy4g?(PyF%R3Ep`$fQdE!Lvu9pddv9KR{1p`heJ zKM!UV+?tC{s=V3O%Y{mpZkK1I<4a%&L&IB>j;~KwB8@x74+;!ZsRmTa6IbTb*W>|8 zu}g$bgE1W^>Pe^}ap~Ahyfh=X40oWY&mg?(j`#0;`oj&M_3F2#4CvyIh4_Yox~ovY z@j`X^`H_T6CQfTS3~pzNQ5I z`Z*@$Jy=x={Ed6@{$?-khWn0J2CixnH3N4T_i64uHu$$~=X6_(&bQM&ncrHkm(2EL zN&>Ze@RGjp|HSj2AIkF#+Vk8nbynzonv$QS!n4EBV7!31a8K|F5t#o}vWY?LR3VcqODmdXYlb9gd8rYE;m zjOyt>*XWz6Ui0ur)`Jc8?esP*1EE(G>{SJ^5_G7)s$jsecmU36;NIWfV2I-wcqbQ- za(_eB%!1n*#0`anrRiE=-ezCLZ+)=%ESI>KGv{W@e=_dnWw@8oLY(%4#NW;LQqMMs zzYl!xu|noh+@wQ(5M@3wStV_95L7P{0g_?lboi{34JzeuY-(7ou=fMh>z-6IQ8VMU z%$P!3Fj9_*aPtAV6^%W$Ok9pkp2uSGSz^6)A6d5+jasjFw8=|5pGM~9v31KDWtT43pn<`pmnd)~nI2NuOuY zXVcSoeNV^1?8hkNMX9ftCWC)CJzXV^8i>j7v{Fp97MV)%E)^@y&Jgxq0XG{qMY`X| zwiwR6&m=Dk)}kN(hQ>G)~i#4BS`p7(=fM6_( z;Q2FO6z#8z;wv*;Ul;waiu&tfNH`lP-Z$hG(CM#fpg6V>FVQ89;(L2XK^yz7@MGE@|h9nQwH2;wyn^;0^8jeY?ok*{o%}o z409n&i(F4uAe6%5_Ke8ngHR-WV}bVluig%}{)Ouk;fjM!Twoe^d!x8&pmA4lzmmpX z(@6H(_cV7$Gx@+6+WVS(qyNpxjX4v~+#hu;2S|DmM#>Myes^nWy~0}8_ce;!8{KCb z_46RF#eK<-Je=gv#m2iAZ8WV;OnzzzA#RfV+!E*{-fH`=0ido}Joh7!AdClFiz+1N zZR}*TxuH$}tIJzhZ`LapHtI{LCPA^15F*{$Kg)M`$lIZcK+d(jmGQ}T3`bYW0(E+*%N)=ACOcyhhwmNvJQ zOoleu%HGrh2Zt<_e3$!K63;Zz@~@jxo7HjU+MYW`j>bDPO7@VQJ|v_pkvnVP9UrQ^ ztc<1sZj`l&{;ZC9at^BCPvkBXquG_c0N61A*bAFXzprRccayV*E-j8pURc%))=Y{w z>gL^do6^N-a`s2V|3A9k15U2G>i@sr@9kyo^xfG$+jp}y$!1eYHX#i{2@smJ(7^%` z1(gReL~1}li4YJ%sDgkARX~JD2}K~0rUFu>h?Ian^auX$b7xcj&-3~b?w#40JGXqx z`JVDQpA&5H5`0aM8^&6tFV^ZzMICx^7IZ=cg9*p-D`_Pfjl7VI=g{gA2pWh$G)&ke zdWfoNQbc9*qc#+hdbUysdltjIGik-t_ND&eqp~?~nTQ-kShSYUi&)@vy zj)!E#pCfMg9FTw$SgIIw^~rvU@p!ppD5ZHx}q(JteM%If#Jp*etk@rR@6@{B8U+#CquN+!m*H?= zP34-^0p%ZY_v@cqjpq|V!?gRQReyt}P9&BCL{0zNU5Nw)*F?}`{q$_|ggpR!5+-ui&FdwsD=UVd$V0J!sq z8$x{5{WuKqXPsuxJ;(OXw!JScvqeuMhB?vu3~EU;wNiOqsr%IEqpVkb-d+>JNhE8y zxkBnKMcrP0W49OIvIL3=vgD@C$F2o78#vu&@9yS@C@1D7EB7I?#QYL%EbFM#@FV4y zQwS`Rui?VFVUwlnO%>Nz^@pMJbfOZb+wB${XJ*aO-tQFW_TIAccbn-7JnwDQJtZ~S zdrPHW0w$A7<=xanD)l)GRt0UofnDdlX8Ba0yW8|XRg|k5eS*)`;AbjcDJe}A*U8n1 z!SlJYs9P`zPn_P-nre@QFY8yz?t{^wC<${@;2j0@j7Hb#N%@!}hB;_H`wm62ua~OL zfyYGDCLgB11F2gM5Ke1VeX*yiz4*Q&drDc-%t@$WVZm2-WnTRzdL&vEI&ZSa|Hd4$UKqw?V~^dZCe zL|JWWjGDu~-`ZEzs$q4I)vOw@Dmij4iaGEha<8eJs0eNdlnm%ND00*H+rXGk%2}#L z{z^B~etWY~r-Byri!~%^PN{WG7^fT2IpmnSmiiPMlqJwF$aEe&3~?Yi7icu(T{Id$ zY-3>5GA55P9u&khv)M1DTHMLCB{b3<{HjzwP21ukNypHIj6TY56Djc{a#CB9h^Ntp zdf-YqX*@2;HxLz#*3&`tGcb}y&j!|Wa649q%~4fNvsQNl?biw}?q@ai zzF&7z_uA$m-W>DaUhr3(d00IMdVAvW&|WQkzOQ=GYhLH8UiE8`I+(}Q@lUOnQtjLBaLzNUmz(Zcras>c&ohTvHJbIrYz>}!Z;hW? z>)UJm^l$y>CO_Ue`;}i+o=b;DZxZKA{aptyY4-X*6y@biKgDfFK>jPZgSCCCNsUwT zH&0XPzU=SBRIiATvl7n8^DJwB@D)cwqA^Jbp69xcSi#}?C-x!E8;ata9FFr2f-Sa# zoD2YN0UaPkpdhRE8!-}3CN3aRh$>7&Rx7-nQMQvD+L%0v#sWG9Y06YHhXNwTN!Eoq zM(;xIzZVJhscb(H{3ehPQ>g>x)y)GN5!9w?bR%dI$7!lAyGCl5f=l*eiTPzRw zj-_MWT9E9^RHl@k3QS#qr)$+ZbB%=I-y{r=WN)S^TS=Zcgd6B5JUN?f3Vei?Q)Sn1 z%DFgM7vsF&)p!J0G(fVygoVG#Ey7*mz8dCVOKvylP2=9tS444D)%lSPuO`n=t^01~ z+mq(#!uPnBy4~~c^s3K@Xr77?x7K^X8qZtn!DjScC_?^q)0*a9N7k)p{xk}nH`RSs z>Im!bs&i9m9h{d+-Dahp_p*QUQcrsJ6W-{lH+t3@&;G5Kf5J1L^t>}7&J^55`T5Oj z^)p`T51xy^@oBH+LT}4Dv5sCKV1^`AkhrQNtwSK?nhg}DK@0{sj-gY@n;p>HCFKZ0 zYFtu)Mes5br%9SPl`44oYKRwQ6|jmyJu&jK3vL&qQIM(~nB#c4Evu@#W=twfHDp;k zNXM6zxW^i_2lBmUk2elxbJ*$9a*pw-Deh!@h~&_Q7;RBoBO3%P92!4-SsNFo^Fah1 z18N|aZit(j4DT+g8j5>Ixm`Hcm02CoV^%}h=r)ix+FH|QHzY^b+DGQE70?4u1E`m6 zl}c?7Xd$m2$6xk0d|)y!B>S;d9Ye~Yjm~d_@6;>|B}UIiHCpC5w*d;w6VFsT#yfx$ zIA1k5y`)DLbhG2Gwc?u+R7t0vYXzxXp48`+N}q^F(UH2tm>e-<54CWezQegst95$D zeN;+6@qG=?v%jOa!^f1zBzlb9ft|#3ccU7wrGZ+*flDm;G2~Zg*&88`c0zUSNPWqv zv!=pK3dhABBnN8$O_uNQ1rvrD??$Ft-M)14K2ti$VZwb?(mVD+6yYn!mP4Gs$qHAg=)PmB)re6mIv7U$p@$<`o12Z9lAkYs(T*k%q0=7&e;?7qz+_}nA_ z_6S;>GJmF^I~Z>bn2X8$swJqHcc#gaB-u#i+R!A~7z|`P=YCklwSuq41a$J1L&nSXw)^kdkA!Ub&E*)+dhf-!9vr2BU1b_~P z1`K?}@HZ0`M%0)lWbT%y>h>EPD$C+6_qBy0TVB|wJ zLyyGN^*N~?P_70Uy`Eq{Ag`~0fzOo3JClFTeTY-YuaBO{*I0ySuWtWxfX8e>+oLFp*1k9Lm1&o^k3BB9DnRk=QZ;4%Ck*=Qzw zoFmvD#b28N!s`>$otm9wPRy^f^w*|2g)rfQc#13vP!xW-Ss;FB)`-^mscG|RDHuc4 zcL&4(Aq80is)_ytFPW)Zt?X@9{B!PMv}r#{Jag-{K3I3@Hn1%O9jUd6Qzi!!Gc5$c zMFa|zx+$)kp;IzY%%s3rDASJ%tPZ4)B%&+ZDjAG|ds5)wNS~XUOR20IC&h=>sa2I| z#toI1OcL5ya39wENzFi(7nuFjEKTF}g(zEv^W8a?8e@(F%n?$vrEab@PvX$9%z>J) z)Jfb;mc~TEvC76f(wLsx-qZoLGU?^1#ta3PFm4Y>jltxrImJ{5S5|?qwY9VVrKxVU zt53(1>s@WSH`vyhR0)DawiQVC=5=<|dbr8-n?lTaSvYRBYj3ozM@?&jKb(D4`S8x` z+#AaJg>G}|3ME}QH2bIuUR2rNn5on3;B-56s~K(0uDp@1F^uC`1OBa81Wwk6SaZec zCJXKYD`k1A1`aBVtbO=Pgil;oL%9#1Nq!8gL5hOgi6w!B71q@?D&V13v(@IeW(A4Y zVYQz`V2QPWV0DT-Z)Wb<;y%! zD05TQgoEE#RtcsIfj1msoLnO8ErtYH!DL_~x2?gS%eiraB#Gd4#>r=E<8;iXttZEM z9JVGW&m|`hyyoQO#GOCo@eKoLVon`m+`;7Cd}?wQmTU4ATG`epc6G;g87Hr`0EXiH zKtYg7aRhut*YR2aU4u9xpNRIt+zQb!=lWxTwx7PFL1x3UaA5K&#W0dzxyq^Voi^&iA_XODPS-2L{LezYBHZ$eUxq;C31ySv%#-2Hvdu1fj_V_VbzF_8YZib9fm%cH z48{P{BS*(6G=eq;n)uoFA6;{~d*n(ltAETkX-2nkG6C^Ns3Zc*y>`e)Nn2@7MU2J? z+sXD2!?ptOJ2w%)UDn>B$v_3A+VJqrG&Gd0C;yzbsya>WY^<;vxGnP4uuB|b-6mSU zx1MR`{!!^iR8;ofP|mHo>TV(jaV~sZZ7ZnVCtzh33RvTCdJgJX)afd-5!E3w^wrup z`N-21wB=sXJDH?+`nP#M$#_lD=!i6Vge9Bb)8@w-Q|CjS{tt60{omSsQ9G;*urrBi zdYYL&)8zBBO!p%SE}E>vXjesZi0Zl|qrfC(C@yLoiGKmCBUX%y)sOH)r2-WZES`N3 zgYyLAey8Rl6@YBTyRr%{kHGB|_4zSVz1+Ei}SXrmCBjZsBo>N{ju^OT)%Z7soGvKl z5VNDho4JLkS%j9?%ykDln5RV;jDhye_O>51K4q~d74z@fdj-3pD3{v~xynlu{Yo$? z7?hw&F8RqAe$rR03KWNzG5iD&H__@1aJLezew%1DFYwW_AAg^k z$8|r~v#sq{Dt6Rwywoi3ME)NJUuq!GV|BWh@MZ)(XM>&h2W^5cCV}a|rnm)6zbu5P zzCk@oXrd9~{{+^M)5U|(`}Vi5H?12@8l^5*u;=*WXdHf#9dAx^g7AAv7r!6<(Ind= z8qBWkAjQ z|DCUj^F^HRDXVarrOve6t1SOo+_+*`khme9=~XDu$r&5*JST-;H=ngC@jEB@`dieD zklXx|G9V9@)&yq`;`HCzW}d?2b%WSHyA7d6$CdddwEmNGSw`uDDd8CoWYjNweF- z^SFU{xXXCXZgA}LY;_L)CfojvO^PZ`6&XJ2GK#G4D%B= zH}=LvHzZzhs_@g76<-`j9tNdqS%{tm?n^fH?jkUT5`j@RmZ|R=vkF$T#Q9J|j0LEY zXe069EDj)cf>asLK`$xehm5V|Dm+W+&3lXY%u;<~=12O(;COw4dA#(YFcqAl0N$BD zrmzv{>=bIzR(Ma+SR|o30^@06p#>O5(8*GHN0PB14aXmXF~zx&_rOhX1O?Ebs6oJ$ zSRmcp&gszg;7kp^9ezuH+c_MC#LD?;S?MZ^-*;rljlkB;CymJ^9CJ@jGx7t_d&|@{ z%6O7&IvhWE>6>&bi*t}lGG2tR^bBl1!l!QvzN!Uec=7R%$yB77?eB4wb?R4MBI|#N;P2x6Z~4YYW~mhXTnATF%w1;{ zkQFjx_~d;J7o8q|ns!b{@3ZmY^_-za0f!D0cN9XCssrAD^KEVaK?nEh^39s!g5ZDY zJyBDt?$Rl=hid$rHD)>fqfXtAdS>^g8Uwuq8_b@U9%i{9;eN6PlQ8~0z1ikAzY>uE zeJS{AucW+o*er>o=Ixlh=jZB@-bN);k0CQbjOqQ=3rhbNkU_n(eo(17s^0m95{;-u zZj#1^+}@nW3NV!z{dzczQf2&{?QC^y8_DAYFJq=QqI7+qcKJRT-jS0(&D=t4vclAt zoA#ALUUQY{T+1s?9#%W{)sDdrjHXd~6JgA7@L)(4o7L*HN^a5xcwW?Mb*R)EU8b(L z$e&5NHQvEb$q+pg1_9`&DzlpHXp>6Mz|=u-l+?>O0shjJ-dYk zRH{@URIMpy8Mh5X=sIQ9q2ReT>?MRpQ@$4`)G#vu1?H9$77U zUk7>&BYd0EbZ^pTWqd}v%mflM zy~N&|zFJN5r)IYEru#GXEPI+Ybq>;?1;#WV8Uw0O)v~sLWzG_<0HPSj>S$Hxog>;C zbp+{Q`18>4A#g|$lJ%>yj!&VV*Jw4e5Fb+BH>?xv1@PWM6`-thlzEsw-aP@+<;PoY z^^;^t>mf+4f&1DJm9&C8ogu)dU0B^vc;IS>=EPl1uCKT; zd)16;9_6nKEi-2X+&*eGf0 zzainpy#U*k;SgC5o7Q72gJiEo9&R`8V2Et16YcAj`i+3Z$!V{q=0I~&oaS4o(5?6~ zv9ZxGxQ!yW&_afy4WP#H1$8*G2hG+zql$}G&5I9;pf~`b@RAaU66iZ^Gwu#XK$HAml|jHfgu1pzFAL$e@kh;JmFw9SFl zmMWzy1q(ryA6B+*YZ?35wDL^Wq<}|XsxDT7o_W%g{Qwx6bJS0Dv92K)Y8-D3>EiS% zvlv4YQ6Q{jRo$tIsj9NE)-0h0!_5h;o)r8{kHb{QY$<_q2|6g{rR)*A2OX=J9&tPQ z;?mmMP+bAFl-JBBP0&0^^}L%CDjUGlhIs21pZcQ~nA-DoSJ#$}0%=mZpqS*lY#OKO##E(7bQ zLfa@S4)`dR8nTAy1_A8j3PXaj*Z>(W#D!E`WfkvK1?4@PeB)fzG!L_2c0;ny z86S(9W8p7H0eljbP7tKXRcwPtR4CBdio&zI7^9sCBaRSnE^u~Kr-nqw&dIrFH`R0Q zGH11CSF!hIw;M|-rUVS;c33a$XSjFn@{dAw;XMM5u}(Z)^;pHcDJP>yOb(oOhK6YS zTs4#lV=j>F75>yI8B&XR9RmMh8}Hbu>y&?m%3Y}(3~i*=e(33E9bmpAe_T5H$0ns# z?q`0nFT(gP1(zoI437VV(%0?h{dzz4d__zy`3f#&CwQ8oc>85;+RrwG?Aw4ym-xKK z`3wsqd8q6|%DfWSG!Y}fN{CxP{lffiN8N-p+R&Zcc_(R=IV45KA~~&-QM!1OBF2Y- zy14bAb`JQv2A5J2QKJ2M=I*Quo{#cU(**qUyWw&AThWL)L$hVSt-s|(sl}4{)Cdv= z7fKJwR~^}=TwVKS%XD2LVE?A9`Or%8X+O*EB+*HM6CtqJvb-J#=wvhekBGHzz z9)US%YGp*&<`nwSW>A{GI4hPMj?=COBERz$yuXV|=uM;~OZ{(`pisq;|FdLSo`w+- zfRmFFw@ZG&ufk(n`4ujXZ z_GX;Q$&e5=o0{)4KWJ8)nzPA%jZR)NA2b*E@qG?zM>op?ONcHxQ1w&XjcSTi)WBfO z`!05Fny_HI+2NK4?1h0+J$(XF?NJM&4#E)<)CR%bkOx?;@!JaIF;rmb0Og|ZIRd#NGD z900dqWCBAX2Q|_8>SW_OJT^G{M4jX+p`UY;^ch)zj*^)=76QW_>FxvQ?%G|)87maj zzH1>!$~ohaHCg48#-8**9^NWZZ)aPxpm>s)#=DhNsP&bXzVq-^tWXzQxCKiEs-VNM zRAfSga3K1659`NzH-$ol2{vYPmwuTTi92ZwogYw1s#EPr3`y6lwO@|b*lMl)!!@MZ zuAq9S@xIxu8!3E%#P#+T^y^~1pKc>l3aG7fv_-M-^gWtuW>0uZbKB3?-*-ER6ig;T9tygAfix<|b%b(m(5 z*TV^a$t*`F&FOjIP3k~s0JmUjk_gUlLjmG{$p}boEz$gG(hXv9DQxj#b zzzP3=l8e~Dfe1!wnl&wqeEjB>S+qL&=@h)zd6^$8ggtYGx=9&VL$%~q&jc~y>OR;G zXqc(`Kt>cId?p@Rx$m=da^F`~UNXra<0=oa+%{fvOO&^qrQ4v9!)&G-CRl{@yKE>j zC+e}7CnPOEmK0mNcukVwPc%D#7*o)h;Y8;7zPf{K;C{Wm3B%oy0H$P;uf@!jJpC1_ z1Vj3JN+3(82{BV6(T>r7XjZV!zelm-Zf(5}$?vdEN@va02XpVOq8Lar^CD}$xf^=L z!h?5(4gtU0a)^I@-S0Gu;;@fU!-1c)mb|TwmG8OMrIiCLBI3;)SVcwz{eePItgcVV zk6uRl_v$~gU#KUlSwyT;44l>adFyhiVKD!4UB#J}TUFJ#N?_lpsspl>DIRFt;dkgm zC{BHd{=Tk;@L-(I#1RQMgKwGD@TX9w8)e$m|3-S6LYng?0YUelX67lgkjmz>B%z}u zkHYqn#s6^qj3vtSa*!~HaTI0<$!mD(1LcXKP*)435lKy69^`5J0CYuzjc%7mA(DDJ z+v!@GdmZJ=?h^;>zElq3_@^x65@I}ho)~sb7*`iipxAs-aI*jl4w)e>p4(aN;!>M? zzOgCDT?MsO;655qFfNwLw$j}DN(5nN!^n*yz321W)#{FlIeXycV${Z*=Q`6kH;kwG zebm#`<3R3db6f_IhBE=mka^u{hScSa}Lk>LN^VN>Mg?7KpBb?Dv~+7E`4bqvx}Sh>ZQEL>L1St5@$Lft|3 zY>u@ja#DzjMl8;ZgD>y}$s~?m3)5yY3)~#or8w-^+*Xe!Z8gLQxl-#BY(DQDeeR3Q zM4^&|cI5E)lc2Jn?7j1l*DKV+2=S9Z>cH{6*jz;lFm*BUuC8FJq@9#6%35<)8(U`G&wvF3^}4*C8gu?w zyr0I1buRI9i3RjoKxweezHfWC%j1lRJVnc!M3Q};1}R;aadb$iEC zUiuP~IHE$ewOQm0)GU zZ<0yl;jiOXt7~+jW>ll9NTl-;iF6EfZ@p%#H4I#G6NzaF)SvNYb~-cd8U$3z=MJ>B zcsW`xH`kur+XD9Sj)CzNwFI!eZl`dz{R~x~sI6tGhop3N{CGNP@>6Jx4r^EZysU2R ziDj^WX%Vxg)4gwFoER%Jd3-7I(^Rsryyw>g`nHPXS^S5}#rr@VoDC;Uh6)BmX7iT1 zD+=z3B8Hrmw`(n6S>*Ll$(&w5*))D=?PwT%tg-w^Tf%F@6U;K+;ew*i!LBDq4hcmx zJP%g+SPu9yQ;j+%Uo!vZS$z}%+WNujZQkFq&HD$pdH>ut@890${R*|8ab+&n+ZTAW zNg8i)Q2r(%o)zjO_{MISmO(YgS4917iEJVK zJ63*Nv$}Y>y1b}X7teE&mm`vWeX^f+c~KOXBa;#Ed1Z?HR2`W<>L8~Lxm08ON5)5G z`5WF@e6g-?9qAsW*nVLe_ZPY$^*5_(i(W_iR|SU4-G!Xg8X*)!H3fYnHFV*}1fHfg z@NM)_VOqyjD|)n$K0jA>3iyO?)z!C2{OF2I+x?#NN3Z6}jQ_L{W91&=9f)guvH4?bn$K}ZCZqWCN=OPXG|MPxg=%sp+wij0q|o1? z?ax-Fi*CuU)+M*vq8g=e;nNT}^bSM^Y?{%B7qYjvuID&oc1a?PuUU1kQm3Pq_i0QC z@Lw&cMFl+ayzNCzIF11`IEJa0o8l+M+$2($vi)Eiz^Tb}5NpDc_CRpt6w|W2EHt%2B=KVX{y#HvM_g`)E9?aR6 zOWv`~du*SP87{ZA8ydr-w6vu@SwW(S^2_asXfU>(0!WU;rlT4&CJc zn#_KGy&XJYPk7MI+-FY&Bzl)!d$+A`wbi9|eXZOZdT$U=WYLZoY){yAX5DYM(i1(O z*jGO@^_2FV?n3G(njx=t8!imHb zBC7x(X`OZI_o#<@9TMb1bv!HhU$yb1IIlH67Vk;{GkDLdc(PE_l&{kE)i@*P4O%sI zh=$43u<)$C@Q#2FsiwfXG~9!zT{kJ~FG_DGZo+bMkDl6|b(~WprIu<$RL`y<*Begf zshriD(X?e3?UC_I% zHkaD*J!-5D-T=~3{D-r}z3^*eoKV9ntsVs_zG0yru@FG%z%F<~)7M#8?mL>WgE-z~nSe*}~JhZ=MKiU;v zXyZCJUgCWR?+cO{LPrNGQ|}ydnzVN&h^O#prhUHI6U^)PYSYxYAzmcnn}5`$rYvJ< z{X_@*N=MT%Z_zOgI9n)|b*h%Ry~}9V6zLi+g|}**##7aNkUaO_u`hVy9oc7gnqX{n z+bm5T+C1(YDS6m>VYW1l?AhS*Qp=$^!l6%+e&ZIRrssFZ$>(qX`@3%srv4B5zXZt5Wt-fZqGTZB#$OaaK zWAzdHz&)+5h^*Dr^rOf&ogKP z_+av_Ubn~XwR-%)xW%NJs@ZSP0EN9B1w1CHi9{N_%oH^ld(bOSBjqedF;QLDYJTW= zD_wn_E93FnD3}FASKE2F77qxN1B^)RU*K9RUC%2xoy`8`JwQgy52E0g)F;|}AMxmY zjDF%>9SN{m?riHZqn|9YPD$C-(1BA+=-9a_cx7nYJ2j5>7yWj4=H3>AJhA-RQ=To67AE=cfUv~hCDC!T8_<9u)P zXM(;2RmYJe#4tu^|1EoaMDQ3`wmVb2Y(8w;9$Ct}ap3OKoDdc5{J%Sk>p@{t={}Tu ziL{WZxb+ik%H&FN4Wcfi`=V`6soHMqb+^5TZQna325Cj(y$@my!}!>u8q8Gt=i1xd zz0wShf>u1ZNefMb0NO1AGypt#gc;byA&M$RynK%cBUQL?A^LuIT%^WwN*BQnrgUF+ zAM!fDG$JzS?CkWCRsC}nhxpZ}5{~u4iR{gAV%BQ0Rk7)aHn-JmtEC7w{)TqdLGnyf zW1H9NwMn#R25vXgoNW_SEsL+>0H>@PTBF{uNB8IZG;zc%^%*TlAQ|>}wq-v-HK?YZ zs$5y|&y;_S%q>_tZ&bw0FBC4QYvZy2xPulfY@V{ zyeI`Rtb#!`PaEJ-@!-$_A0L!vnzPdLAp*8@OcIAmZbUWk)=z?LvsJg*?W8O_>d(Ia zjBi(wYUHFHs$j@z0qMw)V?v*%>~qA4^CK7>4zmxXCo-7~QeYgZStT=19QhFWMP_G` zBXp2)s+>G&2OlcMPQ5Dv&D8?PmV=B09J-9cZcO2 zMn?;MKQKuezgo>@f68n6ngMjX93O>PsX31@&C_HIsLd&l;- zNjj#eBLt<4qpgM97h#R__`!vWNdF`GIXpWHLYxTzzHTMKKT#TNjx`Qf6>4idcmg^- z1PKJoQ~dG`JiFlTeQN*G26P83TZnHMcCmk>8dz*=Kutke4@hAGYHDS6uLlZX7~f=Z zjpUSnQy{=DRBeUvAnbL1BC1b%r|LuvN|d3+ZhoAxtXR^~tpx|#0s#7?u<82?tRN2+ z^dp5dVSi!2B_8XkPx7ch>7~W0Kz%J%>MCJa;kCs*y%_Ad1z`kskq5g>k?s0*Kks;MaW43uZsYwT5EN$+1yudqb5>BD4#*UnQ%&^o zcrgzg0S;T`wkAb(q;y1{XkU}@pDG{)Z-nOC)PBmEiPqjpmk`1}_ zRHS3Uj`r;hxWO)=T83kO183Y>dRoKOV46L(jOr-c61D|wLwp`hYneJ^x6Nvpx(n|4 ziO|a7s$Ug3mqq@GxgY6r^XJNLwp%IJ{B3)A;C>Ni7Y0;$+cRjwOW`3G0$uhBv5yau zIOY{*!_{VRm1$o`xRtObmb-mzV4o%Rx99k6=C1ZE`?k@)ziapUZT4h)L1uiAp%&#p zc2b_|sL8RF?|?(sin3U`dfShw7b7=wpV@Ff-bMQ%vt>QuQ;bZ;wOSdsy`F7&(u^(w z<`dWF4xqNjlfJ!D2fx(C3w8PeUEJVj$L7S^uMDeC60g7o+B!-D(RQG}I$!wNe@gb8 z*QUqHfn9V>r6FXLv`^I^mL!C<)99_ zrJHWqk1r<~rz7v&7E-oe@ttSk1J)2>0ur>cmJm3o^)8S<=K`%(X!mc_w8sH0x11*) zBcpJ4!fzxYIgWUyrFO@D3_(XpvJW_SYjEKJO0C)x28x&f4S9bciIA5vo9E$ouq5z1 z@+~|TxfuZmHsPp^!NV*xz63q&uG9W~s9FBKI`ey^4Q1f9Uk^64ofA|V?niPHU3z{} zT7gfS5CxSJNEqYHiu?N6N;D&%c(Gw`z^ea$?E#*T=RU4cm-2vSIm0B-(+r3eK!K~t|0;&pKF_E z+s@pe6RZ9aKmBOhKG)Ir`{ssp{8SoJ{EFVa!LPZ;x3BPnEB(~vzP?tz&urDpom*iE z4^nm_*(W>h3O5d#PTU5wZvqG2CXoU+XIa%nT7`jl41@5Wiu{L5)e(DQFz)^< zZR{@0KU5U48fIGqYMdaJRU5)E>ZQaQE*wZ(xd~GbBjzYY;6zxEC8>K~83i9ECSs?a zPO^wi#Rxq{=S42=fTqRM(*lvrRq+4pI^c8NNy&8^$U1^6QagxwvVL$lAZrf;)syz* z#1bE0ps|2QtXk^3;!_o)vw^der{Gt;RP`rk$ueBzEW)Q&x#z=zkTqf$?Ez;-fATBw zwJv@VFZ1H2(P`+z_;xA2{GC*`FnO-=TZ-&JUlLCZ#t>Nx#H0-I>8tv}`LM1)Z__-= zxRzHJB@a8Eh|sW^g%gk5N1HESl8!Ezb2;lUe~5caAnfRy0@auDc6X}tG;$?A55M%K z>O*idW`~4%k>56?uRy5i#8`69Djs~+IwsfM3Opf8dq5^wj^FKVT!-%r%}87s65kV$ z*BF!;o-sII?R%c8=cu0$t*_BF58?Lb-~I9;*d1xrygE#LZF?ep_+%U^m+*3}Rkv7c z6u#vhA#!VN6a4C zR}LEdvneDI{+LF|v@)PpLHv59DS!|O1kx|k6cIiFnnKcbG8{2%JPvYjwBHC-O25Sm z?^G}cty0I)43t!|qD5WCGYH3abjOTVr>YjpeLiAE*GLk?Z}D{(w^9Y&n)Kjz@ZflK zBI0o&ws!*t5+hkM53F(%Yy2vB374TakIH4j8%0gLA|Cv+;BIpRQ#qmpAA9h~yBBv>16Kd2vCveM#F$=ecAkjwJXGrr+G(N%@k#RKIcyXoi znk(bm+Ni#+ut&dda&(;BFB36xC>TyBr_>(NqT=56K1W4k!Zj3Sr6F&jW>n}IU)f~C zcB(OSV7EKQ=>)BCnzmn2>J2;khh2Qww%@d4V0Gfeavg;s24P#6va@)pY}{MavBrgk zuM@lXzby5#C4%d1MBwGB-Yz0JV)YLu(p-xSwAuPSjnhSYQpEC0O0IQwWQO}C@O`*imKZJ(~4k#g7kPPfb6&)y#nxdXED zjNiZ|T+?i|f~jaq+;W+U=`U**FyiJ@M(WBfpu+u^ME@<$^V+k?Jd} zRDaU$mt&ClR1&*L)vZ)HK1wf|Xgo&fDIh ztBVCVmtO4!zU$`%w>hk@qJ|bRr5;K2t*j%LQw0q=jXLt((DZ##?4-y?H8;?(x7x?u z!(Ox?xhl8pH~h|1cYE%$p8Z#^ohlokz#mR7@}w7p%<{_Gd3s{ewCf4@DScwbe6hJg zutZYROhp|)+E?TnX9^ky3gYp|&mktaHhVBYfLF`1Yj;BX%9**@%HnyfEFTNtJI6jP zBlbgFcK~+GR?c*+aj#z(_A$NqNB%M<*aCX4q!%VaZ?!txN?LcP%jptYx4)t9Fv?Uo z(#q$khKVh0A?^&b)oRnNjY-q5pn70X>Q5KkFGLF`0S-CMlKcx@IFA7=?~{KPuo zMy4d{w9JVEjb%~6fxCf6PZKxfcVjCdu6W6H=CMs2(g1z*O4XG#;r17+@DergVijDX z7GI>=R;r3LIl#CyDplFQ|sb8R07^-Cv`9I;rp zslC=w=53GFznux80eDito!oh}aHFWmNRriWglUCyi)DGJn7|(ow z(*o0nWx~XJhi?+535N5K)59txQav!QiJUoPYn53f4k4RE9K@l3N1K4HHTI0?W;= z8b*RagW^@Ev0ljgmlwHfJid z@!ZRiegK`T5O*e=;enqQx_wDhXftl(3&}leHgnQmM1XHpKau&>2BF_IFfe8$3a>9u zXRf4l!4y5cF=%HNR66gTL`@seN9$IRm2Id+{Dhf2JJEdhGTzKIP^Lm+ut6PjxRV6B zM5&J#-lvF)u2R#I8BqvlGZPBN@@z@B{W-Ay6HupuoV5Q0gQza*Uy$;$s=plsJzK;T zVMc^>D^vz!WzCtEti}a3o6x4{{0pb=nk;}k#E`KrDg#PyEcv)!9MDYJ0X^3mg#16`>0c3;5lJso4&dadCqfYFZ zG)xW8(t>T&!Ym{aZ99j4A2M#s*MAXN%Tns=hz$Q5EbqoFlTR`>KH>J$DxW9Ue32H&%68JVZ7NY-Af!) zJ)26#(le=aUv9=0VDUY)yJRPoPzd(MFXW@j^?0=|h6`OyVp}>Kv`5{W?@(0ygr49m2QJzfiFzyxqD2oA62CCqU`m5&vJV8Ga z=kv%ZCabcP>^O)tyH)DPdqifu Hs+?w=hoa_%s_NipwZ@do|yyZZoX+iWOw;Pl~ zKf+afb~S``A5{@m*A08Pi?PC~{EO>LI`xVw>D1p;BXJ^ib2S5ZV>SLot^SaF@qBdv zDJdQ!+zs&Ze5-0I(f0@7ua91%BnyXa5C;3`Ie7nbJtS>Ru;xL{ccI`755<5z4z4Xy zcq1sDPNhRJBwLdXB(o9D-2)QN-BcCttA*ZvoqEYm9Bz|^s|R%hAg;nDi%=cx!^H^u zGi|^e&n$XZG0CU$;HgFJ$>R%o`QFCH5@o-x&-s_+7_H7FxzJL-%EhN?`=7vUqu-Py zZL$kFPW;}nGes)o66De_yD-?*pQ_bk)xi^`%yXr**N0e$5er!!N3)>}h&GLIfIo*? zgt-ib8pjX@fLKtisSfX{PB~?%u6uC}C1~!fX(Q2=0*N$jjk+qIjQ`d7fJB$N0oI7tBvk3Yu#ND1im-ct%~~u57t0`$r_!=EfEavpFw$0h8zJz zY%etxnUKo16ZDIUs?<}xH_cf-Md6tDo5VpPihi`HIoY$)z|r0+J4Wn=dq(e7XIk(9~*qu<9f}o6M6xQ&K^#!Qly670H<9ZE( znxK$~|21nG>(N(LsRaTaA{|B)_v9b4BQxS;1!RtcS;4aoqs5!`Hf6#`1?{tmpq-P% zK=#&$;@r}Ud>@|@M~tOa`x0I95d}PeioNtjnB*OH4~Q>es&Qe1BwHlDg!WMf!os@+ zWh7tsVxUy?xrQ*yY2!JSdM8WM#b{6-T*rpQ6y6ex!3Hl4azp4$nE633&)y*xw% z)44_#$%!a_c+=y>>-9mh+QaY*@e<;HI`(n9@mNzS!ehhoR|(1iJK$XiaIjaGxo7oO zUGPqwx~$G!U027tLyje~pe|Zh$9GSv;7=;pdy7JFf8t$i<#dbmnM%zQ91gCd}oAgH{Tl+CaJ0T$|^&&f!IPrB0=}y)|T8P zX3jXa>SIM-?!ZF-xHA63y~Ny0)-m5}v^O>S57cGWo=;w!f@BIAWe(gM3C`eVht7m&};kyun!i5_`fYw3e}>#KV8 zMLkB(m-WoV4-qTO+4t*%uj}no8xWMA)hCkhdbY9>MY7`F3kc|R;QO^z6-E-H z##(s0G`%2>b3EM?nmSmtH+yfN7p^3e9 zt>G**!ZC@C{}??zl>qOco?s)-rXa)ub8m#0ClnS|d3xgAEcopJ`=4n;Fk$%T+8@s` zrei6@6>D|{hDj11ep5UMUKFq>iL8qkWs|+hK3bHeTcSPUMfTo$9~^M0 z4&&pt()DfX#y0oiHv6$Q)&S~Wv~t7o{cXAySIHTz;qq4XLh{jTZ4hJrtxeU%&$Z#P zdV+V+b8R?t*OcvB$`B(y+7>_FWwIo}zMR}-$JEz8Nv>Q5PGG7W(eq;#ho>gjo zT9{zRqfpCS#2`n&u_PxrPw9e#Lu@iQ7bb=UI&;lD<@ZoaAQTmh6uZQ}bwQk*re9qqe?^{6nP|c1wDp z2RyWnAjPNcrFWu5qBvw1l^M6q2&7ch7eZI|Wqb1jP1c)D>h&fk+4~<*h&BGGU5s)6 zo93=+#W-1VVoA+?Xso@nu0=Fn)Gqz@n~pJ#y1q>6Sj40 zy0ZfiDEREI0-aljYqeh`RQ7{@fBh*Fwi^C=>Iy zyvNJIEkgoLaalgRCx#H(@GmB<$b*lra?4p13}ZT>mMn_&3^f*J#<702({0a+8tw7+ z0$jcv+?=S?nENcFbhKR$FiuJd#$gWyUNlG=z<8AXp!M^;ME1-Q3t~-~0x->uQA4WS z*A!Is7QZ0_VVw+w1#I77gUm^d?9JB7mYGpYe;m}^98xP{zo4Ub_}HZ7hm-vPwa>=0 zRs5h;!_5<9zC?>^ll_Qsb!RDXRwoaPpt@!#ANYT2X+9_8uFL6%I)ZaxXDQvr5{v2_ z+J#)+EY#r|#B}+(Lq=RDZY1PiqS0K?AK! zl=I&uhuzzWWW2pznmK<@yeUS%Bs z@N@zerEl%17BStp6SEihf#j8xO^$Cwgw#9D3Pd&jxmxqsM4k^P8u0+BP~+M9lgU?= zYtCkA{ivpvqJmMwh-e1eqZtS=#YZ{0vWv;&0kxKJ43w)Z|9hgKh>bjQwRFdJiDC0O znHpU(Gs|GrWYGZw&OY;ct@CDW5M*RZ`r+60TRlkc)@JJxE2mnY^^8T%!|rVnA0c4^>v zcL=srb#6e6P*7qE=Gzh*;@3kHLl$k-#LQ4LFI^eZg|gu;$pn5`*ow%*Mx) zwfw)V@2HtpE5(UGu$gD4HkfLo`JH5+P4?+ze*u(se6b|ipH=zeRbE8I?gk0V-4zX* z)kfBnw3m5Lb$5jnrDSRqhdYR+oRoZ3m$cEi7RCZXLitg&*(}h^R!{7MG~g_z7aI*33M9iF5spp zuj&L0(U&kU^IT|E}LP6j4HPAAOvCd$0F+&v;}- z&Pnl2u$Q-odbqFQwm$b@`^4~%rguMBJu~CGd7>=om-`xC>!Z4DN}oU8Ib}Q);>;ZN zL?8F@ZXdqKzx2vwU+T*`&O770x5ha)C>Piw7p^+X@=mwx&va(I`pvMq{s8aB1CTd2 z3`5Drou#eX_FOje7|~8CyO=>i9R2txbU~8TBk@&u8;Y+Ids1a z$ADq%i0VfP5}yQwDtEwHuk590h*(LrPOUy2UCAFCYzLXdPjJ0q4@U^Nx~MAL!yL>l z&Xx;1>xsp3ZZAr~wpsP63Wv<)Dl<{ictP5#yCva}Bu@!rz-QovV+ms1rE*=0w826E z>2D7gt67VP9LZG}oK6fQdaw*|xzSv4w2$fK08!nITJz*ZN6) zcfwbC_3ORqH+#itFD>l7)vI6V^|{fZys-6H$FIx<&#*^xkK*Hh5!(yt#O$v$2eB$nlW*!y;m?m>AqfXfJf@E+i`mi z+WCATt%BX`MfRcg;`pBN*2Da$@JY9}PzDaR4D9YCdoZX|f7ydkRw}fQ9M6KVKU+9sE-iRnMU@K^`E|H)^g8Ykr-J||Kz~uc>oDFaF%anPax50zm;h($b zR_?x}&Q1jPT6l>;Ii(3{@J&n7%gwNe70n`0gNiRJOjd3ZG}T-&PpRO_;NsS1qtHw+ zo*XP)*R8MVb{G}@mEDe&xvE>A2GuP9<5SyBU84I^E4tBlOKKUm39KBn8uZfO18|91 z&E^=Kl|1(^WF@R)OO0+)gRLV`zq^qCb;FsY4f6X@EH`AP`!2Hv zH1b08gTXDbW&NP}z+mYggLrTn?0UT9XAAdQv|?;2gU!&KxIbEa8=) z>MVY6LfzD4L5-TBCnd4vO=>uqymwY6^e-wehku}Ixa54aoC%4xgJHqz*rb&+OzDy2 z-9$dyfxmnvd&v7FAiZeo_tz=o&T%L+&-I(n60-O39|Msqm=E+vkM+BR*Cqem`%Axl z$$-75WE85W`|aoY)wBKfU;ACcDin1<2ZIGFuWlYk4{jW%R(AxeUHjJk&Aa!P*eZO; zmb->9t8+z%`u$kxoBPKpQ0SD@t_ptJr>@xFUOM1?-s^ovRUP$MADSLNW6|8ur+(1~ zzU`v@%}e(8FWx^~wZHylpZ|Kl{bE10(Kg8S-XEuy{lBjF(+>5wG}cLBudx#$U>)!0oSd1xBRw8jpLK?3VVfeINF(5Gh8*n9*!qK%Sq_&bXV-pxjzy2 z)|D~}ep$f_wIoB}wu+P*VH5ncXT_{3&5lMEP4%4(`KYx^#sGBB2T z{_O+yodb3>;<-5iIx^3&?A=sGmq6cVD#UedtSX(H+v4!J=u#Qxhb;1iCCQH^y$Vg}U&e z2@TIopcFySp>tmJ`w7tEy*MG?rkhD@>8$EX_gd|_j%-MLomm}*UFg#4!y#HL_MSTX!;H2{6>veBV0p$E z_YW7o7*byinWqffrw%8fRuOPoy8w*#d@LHul9II0L`9VT{=Z#g>`ns|1b@0R#^nf0Ks!XF#Qgj^6h%W8J zirdb5S!#_IT;A`?+9;|Y5ftRQc3t(~($0hHWT|W+RfNdI=(W9MzEE+AiBfS`%S1^n znqw@TSmH7%ukf@A3DI9M?tkA7A3iY5IDKtcz0$1iAb`5f_zWuJ^R-3J%gySE2{d`? zxnXWKuTTfJpw(A&Cq#~wHR^3zUL1tGligQLFcNq}XZ)W>so+f{8aq0yPzzkwNmH&( zr|L3|qxNxg2T!?^v3er3XAWT`hF>7Oj8MCxU?gDQ->8Em&ev>qT4SeM+o|cD+l?{S zP9&CR;c%Y4YH&cGvshVc<4r_gfdWe%$Jt8NOd#MbQZ^$sA@=bDEMoZ!+YJ>P~bBFCP zAa{8rd5=A#opz2gUYuB(ZcoL}@vm-sQ@8q{+xe)QGL)prM*r+J-|Z!QUMjq*!++qh z9RI(2?jPU*>5B$@SuPdn&g$LTBOiC?QUnkCSQ&cs-XwbqR)r77G0mlAyFscnQ8h~D z!#a z)JP=0Y&MXsBWtNbzk42)Pfi$8bfu@TWuC{Q1SMMrw(rQN>h0ICObAejZ&LFIK4_wD&Ishsv;{PYLNQbYR;X9`K|2TW^I6JEP|9?)K zdi%ZG`(}5O-A&nKQ%OiAKnf(J013fFYNSR`#15e&5_*#k(z_@{ga8VtG!a3iMMXeF z5)lwV;ro2g-9$e4`|FoH?%ca`=gyotbI$v`%j^Am|8V?gpT+woH`VQsnG^1)3+Q>E zkL04HUHk|ZLOnx51=j+I_{@Ahi}`Fp%7Z_nfd_bRPmvsH_%y2VB|($fxB&Y``P3;5=C&&XR zm5DMF$?(-n>2+S68nM%20vWhnUa*uT$ymD&NS}&c2rViVIjTK)6@B-4`?U66rHR$=8m=N<)ocp0vyX^M< zIDL>&AU=MnN2mTUvTM`GCNa_n0aSqK2SYHPtUm8hK!U=Eu=pg&YrK@|Sl&4^B#cx> ztBS&D0MXI`^estI94SzYxP5dwB4&G6&ZxH(A@*8+-WnAuGInb$@UDO+`p#_gATT}O+z;Agr~%JTqJjv zwrma2jAbz80;ET7@pC#w*G?Xi1l48pEBsZ}FXL?0)?4HKaRyW&H^#{=vHI6`pPlUN z{N9XIwF8v;Lmo1Wx&n>?J^*)7o%(nEXV=lHo)@!@Zmv%%_E*zo_}?*uDu%QkZa&f^ z(gX<|&)X&)Urdd?;riP^Db{dLV9`WIj{F}fk}jpXF+Y>2!>4t$IPi=4R7+dKy|0@< zsPjCP#yTf=>W;XxwgW<$4`wwZ*BIJ&4eG}S9v~+{MhuYZd8wj^$n5qsuYz&cP8ue;n+)KSPz=2v%_frTA10(p zU$8=&v}TV~mVd#!fA(;k(g~6n8?H*5)JGJY2B9zWCGLhjoF|=E78N#?BmnaFQ*YDd~%wf$uvR6{WZ*h zU(IoE&rV*S?%td(lZ7Iv$c(~W6a0-6qQF%s95n^&O=l*HrphFEevXJ_^V}Tu=s4=| zo(tuw>}Y>x4(w9=yhe9}lPa7&+rnYx6T~3MqRol3#c3~C%NjhQBppL-60l-r1e5Wv z?bG<~2iwORD85Dd3wDO2A#b;}!>>yf`LDA&wYgsZawzWgAC#Vw)aLfga?sdxtxQxm z^FP6C+X1fZ!(`2*6UVsktIV{7#GW4bc!dorKjE^xx;+1sP2ZBs^0Fc>nih@l=w8`QN^rra>4q}wDAN-60s*26k<@P)S%fury$?gIfj3zueIjRBE!uN|y(xI3iOBCMdk0s} zBKAxkI=G{D#B?6v`VL>QF#ZD!23FSNjj+9+uqr%xReaJacj_wrM5B6a+rF^6?}0{g zBu<%&Xa2gml{*{FMQBL?zMg8T+_CMCCz>RHxr2zI%jddzCBc(c)tZ-5J7f`>$dd|p z*P65#o_7$dso+HdGX>_KEPipy(xT@eVPPMjte1SwI!x_iO{LMO=DJEN+a|HFavc*y zdi}W?(btO)Po-FUx)hEA-xlvVjIR1N-FKk(=3G|gPW7m?Ec4`C*O9xj$z0K-uWSmp zZMAw}E-X2Z%~e-6F|Bp(swU!0+COu)J8$+Bzg#MGWQ%mxSxvdLS3j8L*JQ1_zuJ=z zG%@q2f>$>=NOlrcsN{vb za9xG!)HRj*MruVgHZ+SY8OKU+<&G_=x6o;cuHPifi6pM+TT=({{zHSKI!LIqk@mz< z>9*B-Xvg~M2!OOGc&O1l*hqU{6VHXtz22CPf{hJZN5Rk&f3QK__vw8;BjX1RjDmA_ zM9|;4W97Prt)t-K#)fOQ{qdlLv9FpdeSO1@aW7-MItK1eh4-zBXTLwjHv7l&`~@gW z#_!gr4VI+(*+(^WY0S7%&oi%SpdNX1LxK^MX@mU14xA+5o!fR6?GCNZ=651KIYN3*ncj}d_M&y4rs0#Qi<4Ksz_DFWw{LG*o) zwf}@vM= zL0_A0+q|20Y1af({=T3FWiohU0fd=CH%6G3d(E7>3n-%Z<7D$gS^o06x(hel=NSBk$c#+q?>J<->GMf2s+xZ-?&Va z_s7{rI~H`Fb?3y{mvGDApuiZ7dZr9?Twvs(qD89rz5LK&HkGN;o?7h2&ckK!y z)wuh2MYVroe)!~k2z>}!t81qRy7s#1^KYT^Bf?Rld zIrv_gsuQgtY%A*bV)zME<`vR<7T8M{s0S9{NC_reYI~e3z0YOiJ6v02X z?ADj-k1OL$y0`4#Q#Qwx-Q>c1ltoER+Se2QVd^LOY*R3n6vwsd4E> zm}t|w8GVdbD0qp)+w4^Dk;P(LLq9^w$HMr!h4zGn_T+_3+8Tqu4z3LXA=tkMQ&Gs` zDH+KGmAs>=vhW^>&D53JOgkd0_V?aiEN*9ke!*r|iJn;Ko?b}yB&pzOd^ul?%98L{ z6_RH&j|KlRN7c(T+mSxrUv6P;n`9zywRbR^ff6)$=j~Si^Tq1%#lh=~-J6Srp^O3X z!Xg<(e_R}A@zu7|A!07`ajS(>NzLU3n!2WktoNgNog^vn9lV6@bN92dnTw?g#VCPgsNnBo;&;ZF0?+e=D0d>1+{AcDhKqDhdximya>uBO zdP*A1WJyODU$vVw@rEVE2?G8DH-DA{{ACau1ABg~&fGOPXIBmmirwm^#T=Y} zb+=-FX~DLBIyc1`e;#M;K6;^=gSk1285@Bp<&eWTL&oOJZ>qt=k+6aoqMjpgQ0Mc4 zH=emWVlm=Xnjxy~naW$gM3U!OFnx9I4#@>Okb6au^e`7U#I>b{R8Wh1_h@-KT|~#` zV@b1jH1^e=^dvQ}DJ3m|iLH;QniI}n0*=G6J#(^~REls=AGt2hyPFz}l&k}XtlHmCz z?)OVrM6`M|?b>ITkau&Uc7Iq(-{tqI++tyJM-^uoRhe%hH}f+4&U_9mOf~@n(D=QfE_Lu|%HUO-pNlQ@~=6K@A`@ zk`)yX%a8eW{`X6fZU5LUd2P3#gh%OcejdNB?4Q!My|HBI&zF{Pq4$@nkCry9Ult#` zEVF)@1L@*aaMhCJnk8j?Q<>*7=GPgbx7b&}Y5UL+;D`cG^16!tJU@7Hp?+dvsWy6c zA<>DSER1yX;|qgdF4Sy~)9zgq3-!b@F7nngNv#P!Ojz7b+1s4~1FU*Ux+e3-CBgA} z92QZ0h2$DnC*gMy5;Aq(HH?Tq%I0kK=@}$*IRhuZAo+I7wPa`VNUEtqhor%;qgaje z4FziYcBNWbsgvV}sh)=JxF^#+X+$!7Y@g{}Hd6Y&sXrRo4eOllZyL=}V;aY?Xbk26 zTVy6lYQehmHKzEnIyJ?&CKGR}j-(^g0kMumtUL+j74OOA^`qUb%hjpNgYPeQw=BjmsO`Mm)<#J_xy+W zvSeMr?7!Vj4b`8P$rtY|&tcG|-ZM--Ni@dM#gkSS?w+}2xodU1yAyVI>z8lSa4t>f zYd6?+y%OI1uK;&mtmcZ6vo)*vC6G%)JlT07P}9;CVO=Rx#4CvbiU;7Z)miV4yH{)< zY7wS6e0o7X&($+!{0EC|ulNt*_I=32fFg-kjd#W#a{Hh=5Ia8gBW|=52g=O=-H}`11WDj-u9>I_IaQE*~ zOIck+7YZNuPh9eUg2K;-_Bw7ZByapDdt{DR{!e#T5AQDB`1l?OuhVu387 z6m}g=>(cuYOG+4ekT>8pE5WbAZW7cLd75S{*)?gvmGvB=0c<268;LQKf{6{Khlkqr<5wQ@|1EZ z`f&2LU;a0Kc8|oA7keMB#A4jFid@Pq1#zis zpi)FhF}ji#Ge)mCQ6Xub+C6w?cXCj^qo`DSj7q~^yXv#>yNQV>;M8uQCx%zX5AX#R z447{_@Pg2Lbkph7_P%^C8N8$hT+cZSI%4GpRk)0kx9Q@gycKLhSqnSFsZVXUE_42#<#+cWd#eDVD2tI$H{2r!IWn+6c>5zuhEtPz4z8mug=^I2 zg5Fa29dBw&p?Py*Gz?lIJ>B2-bnot|?pcL+|LrREy7?3sLp<;)7=tLt zYeqf1m&~C??JZGMoJ!W7y&^o1@>KedI{FKSo4S`ljR7dH z%S>EnUe@+utw%vV*sT5|w{r2`>PDOS9}yzB5_^MHC#{lOIb-j563HqTNK(fbnmSH2 zP{uV6q~Nzfz;T1K{tiUae(uRG4 zEHmAvhic>jYhZ;O1`vIA;6<4R`=v=io#56-q+W0d9%r)q@JvVXcY^lZ=$-R9+?LE* z^RE@9k5@3FVDQza^H_)AEdpey28uJMu4FwTkR~IKwje@GvuQ6?;Smo|p$$lpY za`hZTz54s)!c{TwnCGcjkN$l(5v5M@)5>Td2D^f>3fv$QeV)a`Wl6sx(g7`zq1Tgi zHeVnP4nZXjju}f&d^zf>C-BP+P-QLqgz{edTt7{bju00|ME1RpbCcz!OMQ2ju770R z)qB~i_G0Vy2!FY<_T;_7QZ&zBh`7qxz09ie9{!%L0e#yikCN)*KsV#;-lRHJ^@B$01Q@V zvlNUhl^Xg4zwu4xCXwid%kA9Dth(IZtJ1gM>-6nK-bBy6T-3`P#`v(Fa`&(v+dYTB zJ10kzu2Y8wht(Z={CrVLjf5`}X40MQEE4?La35Xqs@!xmrrwL5p(Sehnw@ zmpf@cd&hoeSlAUC*A|_-U-^RlH0E!i6-CtAOZKyu?x$U`Go4VE?d{g@9l{ZY?sdt2 z4d(>$>3i2-v0rpfP&#YxtS#BeILEWE?8|U@W8c6Q{<1G?iNOXy?)8uwT>H$vlnwZU ze9r@dtr-x$eAj?MQTyz^@V+_s{JwEeBKtgh{JtrRU)9BY7vs_M4uOnOiT*L0xcv(C z3uEE@^t{UfBcUf+s!Em(^-VyuxS%<1P%#P~9N58m3e%x3b7ay2U(r68p3SO}IxwuS z6Y@>o4Qi$LjS}Of%~HBd9<;#Vb|ln^l(S80YniFj1QY`)Q`=J9rqq`wF|lMakRuFT{zPmOaX##;CNtI8 zJ(H)7Sq`z8r+c|nulFHv*sQJhglIFKdB}_g$lu@trO;Pm5B7GbyzA^=oO;X20)+NC zr7Ipp1}!6hu~XzE#xUyI!Q8>jqM0!8#aGK9v41yeCA-{6CfRkWaFvP)iw@ldl7oRf%+|Bs4wu0@42`+Okc%M~ zwK!JzJ}Ko2q%kx4z9%AENMdhM3usCsuWBPKs=9&K#PrP=QR2JExR=beJsDa%pB;iU0QCctUZ`cTT3YF5qU(q7^^oK zB>10wbFDJhsodYGzL8xSO+w#(T!oLKeBnv?sj^QfL*DGU%ABW~A5=BELuc<-0))Fy zxigg+E5a7nm2Uab*1bPgw$Gicnr>7zzf=Cps^vCT5r`iAT%FE5W}1Fxl8cq2RBfOy z;v0Plz%UbJFGlV}e&Y{N%^9scz&8;g)NsLJVa|~O?VDGW*`z8TsgfJJ_3>5f0v?LD z>|V0={Q*}`x~b4hB-;@vDZ0a`I?~Qqip0NWlfsNTv_HOWmqEsBc>Q ztm_5Ok?>s%sU2+HPKsy6`B|B4V&G*$B_k;MpiYCL)gn~Y?RvEVQldN99_ZFCO8a}4 zbUU}4sT}2PBwoiI9#LFm7B?N(1gzGrb&Fg!x>mazbY)dxQ61e#kck0|PsZy}RDhCa`FXPsq!zPMMPC9wcn?Sk zapkG#mQ|s#C6#y^lwC^Y&iO7E=1IwIiNbJn&_;SL$92K;WT=wT%S6c0Jr!(#eysC2 zmxPH?4J#Rru49JPtj*&v-Hks0Pm z(dY%)3+yE@If>4iqmVCO2GWZM7@KE*Q|rShC4o8=mz2$_5eH*Ez!}zQimrnXlK;-N z*w&!QwmNy?!sXnstv8x_gB@WT{g^Z2_Ls8&v@&t-e-!XZiJTy+Rp+NI=Ac?sIrF(wDS|qKcG=5JGXrk&j^q zr*pQkgg!8Q+ci#2^{?Y(@U=?y*8kt)D}N_&kx@BgZKQ-7@KzMe7Q8ezghY4XT@jgk`ROrMG9^)s(B*we`jMGJ4%z<5tq0riYeR*q(6_;i5^U`sw(8UEHa!58_e z$$N|;S(?!p*HSK#0a*%(82DItEGBs$8Xx}Fnd$i`IuJ_#{d8ObP>tgA#mtw2BZIS) zyU9g2!dNS72O*$fb#Pda53W|`A{U+Q^f@lL)ekOJ`PC^L=^7AHZz#y3b{Ci2O-j{6 zO<83;z;Xp7l%do|`XAp%1R(*RYjEqsRDP$>mH$)+_oyBKoFQ$srCbuyR(xKRBKE<~ z@wX0dq9U;I0laVKhqB%aQ1!X}%&N~li6gXcO&vsK{>NC1~w7Zf*^C^@DqFZ~9*7s5t91aJa ze8k@gQ6~K%16_ZlMP~zE5ArOheoX@htWaMIO4boM*J?Zp4TL+wfQw4_w)u9Bb{yTZ zytULajx6Hwt&>{@S{1K$?=1uztSVCB6B9x>R@985-eHGgqUKO_X-~3jzF5@5=KIaS zxIvam2vr?f)NO~UZ?auea%6F~+x^f`ve+_Vwyz(@H+^-iIwl09W=>@aA7ihSECXl7t#qcunfU0CYrFYoi8Gwc}&Us zk@`2PEzh1B9DWCaC6mtp#DKymrhr;Kz(t*}@dUVaVCwTW^BcVy%tGxMK%7(aUecc6DX%GXU>;!_I zhgTrsl(@ppZgxr77xzlqBDl6NZfv#r1*)Y|ny~d!52lwo9%KjlW+xV0Ly%`s@I7{i zRbM2;FJO(CyD-j{!=iGZlx(;TwZ}A@rbxFo!gYha!%A9SuL#_HyYmojF#UJ2btaD* zkmup^=l)#3#&#M^K$NT1saExJl)l|VG zZa;3@{v7)b`OLAhZ^eWrjvL^(c>B@v`{|kB6ooc)wVLpRnusUp5#3V4^vGc?`lURk zTT(Z@bb{GhDQn`%M&GBY_cVCC(f`rekG1iul3#)#IrTHSQdv zZ%dCq!{}3hLddb_lG_NJ$`96=qA6t$cSi?bh9hj1S&Fr&i?{#xYPT4DUi#}BjJ|5< z*B_yk`a9qRFZjKt&n$OGy1SK`>eE*HWAetsv@q2Gd|A|Fdccjo+vwYcmiJP^Y@mfFd=p!&RPV^Hv~=w~+@v&Dp!m=&`o9TW{@@-_^wf5B8xog0Bx zH=0IXZ8sT{3s=M{8|xjAN4vo>cNDI*BOA&ys)MJjt{{aMByhx%+re~eup{-2I^k>V z04WYejDQt&5PdUC;1iuS7!}u|PmF`)k^P9CoS(~2Ed|BCN_u=**RvlH$^M2F%}pFT z&;<0!jBe7+SwGWpis~}Mu2#)`!Nh2MFhwfT>Q&xGmCS3HUo)?Me&RiYa*L++MomFS zf33;I!KND0T>n%PhcHI0^1Os`UIWpXq|=GYq1Iid4li?xE7ktyfTi>7e8W5CAx=aV zb+cr%fFl^;=E6qJ!{Liod6hQTq;3v@xC&gAgp#+7{f{x{!}@@%r>;(&>&#YM9>o}j z3yjTdK{(8+^ZVcFr2D-7zLtGgLWioBiaL#w$%P4f-h|*)p4)0l0|3?@#{rD_rI)htO%~Q&bV_j-_#m{c?-S5PtCIQm9ralI; zdq%roY4eOU53McV-X*v=*a+j^IH-Nu&;3bC8Q-q-F@%zEMev6NWF;gMm>TrWz_lPr zotgoyuw$HIYCxqd-S|7{#vIz)Mz!$ER80L^jz-SX_8vt_{hC3Nz{>ks|SW1`|Hsa;~^dEBa?@RW4)>1!;*uZ=pq(Q#rb8 z7Ro7%pVEl8tBq)(5r=#^JSy{5NX-wJkv3w5_oS^4OMxp{SZI-j*F$k<2{>J1VcYu! z9{<=vo{W!;e1a>CG~+suE;OSq7i`PouO@>YZue5N6gv;W2qL0LA-oxBBUVTw&X-1v zCKR?&O-(O7maRK#KK;?^y=&V+B}t4~{XD(My*PovPU_~{;ox>pbLYAQi9AvUO8dVV z^R|hF@M{(ou)8q0DlkMs0K^>=UZGEd`8)+tL^r8()hkMEQopUfJ)~b@;n=7SM&aI@ z2IP(^Ghlp1P?^6nM~!8ae?4tj;mf(BqOa<&HPOI{ybkiNCNrDy;U~GM#ZC?;+39Y4 z{tBa?#{ZfN2+R6qQ~b5W=!{Q+BK}st5^j_&uKe3l?)j4c+md^}L{^b7k^aHbmzlQ- zRFm5QoZYOoi|RUxb@5c9QFzB{VXClEnId*g?lFuSb(hOs;M;lb=U}8z-s}Eq&D&yB ziqcL6RorS&?7k1UDc+T%^4Tb!!O#-mM|Ec1NwCNB&~9EJX-Pe-1ktgE%i4qxlo_06D_id>T?rW-wvX0pH^?Hr=%_k;d8dPo2LMG zZd3=%TRwkqwOi9pr}}B9cBR{vd71gEs$I)Ad(=)$*_e(!+ItHFfPyJ>Z8n#!jmDq> zjB`EeEh4}w*O~lx`ZoO)LWZc;f6wYSYxn=^#>%1DI|H{ph|-qN`sOD5ekfoO9Xm+JN`;_m$KI26>}wK#Aasm5d!NFp{js7ms3S+G5}c|Ei6+%T zEV}|TMkUS!c)KO*F5i{n0b6iAt^z6J>I!LM)K0CgC2ln>N7K<~s4t{mfOoO^r_sav z9%$E2KxT{~z41AUfkd5?$+{HVihyc~c@$hr*b>K@hIK6s+@x~NUJ===aSysKTx_FJ zASmjgO&Fqr#@DF=nW$m>v2Sq(7$3ciUFbZqp+VaA9K@A3Mp!;XXlNy@UW*8IT z7|{A%d^SN?`lkxl)8)eD9_?0BuDM3l%ov}_XzrBZ5(0tm3AQOKsf4>ip)r5maQ+xg z?GN-&GlEAoz$~l!grw*rRvsP0=C_IcyO>w+04!JkAx6OG_n|?ne)>Su@#($~Spce^ z{tXT|uKz~53b*j>7bu(9{t%Qeg zl!y}rz-BBZRPw0c=`XGS%Zz(2!w`Eo(a$8=z0h^n0`T3}pQBrauWcSv zh|uA=QF~H1JnetaJ>{#X{d3e)z6_z)eecR_FXI#UO%#4ETn@O{4-bm>Xk(b>nhIUT z+g1Kf=pxh$MB8bc4I6R&=u2G%rd1NcNkS#}@{hnH=~+JAL=9M~e&Dyv$e*|Ir*N61 z9wUEH=Fp1bPw)_u5Ucf*tc~i|HlO!SFY7wmJGifn=Ge0LdN>&8XQ7+z~XqP zU>S?1Uq@Hrz!%T~MX`#Re3abd%uks&j#M&yJfOj{n2b6HS#~J>)T0Z%nM@J>2BvDA zn?hV5t1i_3rMlQsI&hR2a5g&5niH)q6>O1|Wm@YKGY}|Tb+-I04H=xN?U@Qfa&w}B zws&t_oN(i~lpE<8nKA#QwuiYM&zL(5TSWMb2A&e5an=|OiGq+fRbO*)gl|+mbjc;s zITXo$7dqzLvDQBs@WRNJVI#s!TbKnZnLj@;7X_go`^0tph#KAGj_9}pBE5hBM*#Lu z;`cw5G8wx7*KP+^$=^NLuj4@Q@662Q?6S1|ilt3It*+)x9!(2NR(#Ybw&77Dz6|B@ z*9Q5VISRMK8zrFTjq1UoC`UJyD!Sn+sDZ*)hnf3vwoyhqgzr|WmcnCOGH{^ zzS!Cb3&a%LGUBjhB}Z6@;wfZF8U0^sx_45Yc$l6@+4oRSWmtZTIyLk)@Ea5!A!Q1K z5g7(oG?=a^G)h49$GKaj`b$f?J?d7R#v9cUEIuP3j3qT?Yw^-#`%M1GaP3sWy|Nc8 zPzp08Q`j4=ojbI5sL(0w64q=6OHv-rk^-@+%@mpSn2qIEj62Ob>fN}!Sr@Jj3m`K7 zWTKO;J_%v{nKG#Fn`T1Rb@0HN{7d=p!x9Pq?HHS(tYT(~UCs!8(8j;8`sdXjXZ~BO z$=+>SLYP;dm!C#=m&vGrmoLX!S<9NK-?Qjkh zMf_dG2?>esRNYvBTl!GkAm>|uo#XQn==38}cmt0M=YrHp-Cq2@(NJ$84b#2J6yaGb z&#jGd6>dAWCTg}#^cI;8T@2+qvMV=IDEsmnD$)>xtCRdnicO{z8k=D2OBK~@x~1;1 z+C&<}E4YduQl~g?TzlAF4@Cxc-|%xV8JW1}r>HB}T^JelC!?|LgDfH)X1Lok)Y1)Vd)j@G@{VfNGf`Uj ztp?5t?wI5tCZ1&G-=+?`6+)7S(DJ-*_2{K)S@p1X3{E-jAdXv>PR0$)!nGWDf~LOI z1oHk5tTv`!J;vCVazPw=Act;IU|7`t9D1SlPFItu2)|$T(9!C}^rY9wq5E-YS~P16 z#$=hYQ4guVD6GwP%8B}2aGF!mn&~K0lK+)q5~L*6Ygi>>-KuJRkEdr_K*6xRom3J| zxoDflbZ{#2iN1H^rv0(w%#msOLd#mG4+V?&N21%u!Kb9B?81?4afaoVBkOtLyl-Z>draS4G=tv zy7(k?2yw(QAO-^}MNssppU1w~PT@Ldkf#_b2E>8Uvi8{*?4tvymxrcRmG zWa)fd{_Mb@2d#n*%{mj@u8KL2_f-C#rV2=X@* zsBXNRDg=o9>QlTf)oV}CwqH*-bHww$GpLqOjos#+$#Eia&-Bv^Q&{Ff53oW!#QNaf zPbdgo)7FL&r7F!h5cfPDmL6QeD5ey$qIhc&=C3hkA_?)aKg;YK1uDzXb_73hJzuWI zrd@EH;*FEyySzyj>WOd`Ps;2_DG=~oZLqOotK}$v;CZ+s@%=N-H&-9#WZ~F(2o5}I zltZk|Xe+Tkgp6bm(SB5kT|R2u_86NBj;CkX#+a~CHkSwndh3bQ<#ve|$LyKp{hJj~vLJFmMO4;Qc-_&qwI;HDRp_|DoDUdrgaJb?;O8&TbB2A2(=x z_4dSE=8_zP^Yq;R$n`65O)$RNvvqCS!g8Fg(f*7QD{SD(rg=2lD6R!w_0c_QX|gP$ zwzJQqn)GFR1SC@ArS$7%dL|CKg?^}lS3~m$Jm=Vn6clLGO-WKHl;a>bHtx@~F+Qrg zAMQP#;uFfQ(}(GmK}Wn(v_oc3b&Ik$>g*O>n5lb({Qxb;sN0AP0`-FC8DnQ?6>)b5 zC^DBa25PsM^=h+GTX42)HZ^qC2iCjK^x)WtZ3DV#U00@|6>_<(?Tres&k5F}kZi{@ z-j`Qg$&*i$v2Am>Tvhj~)=SvOPSZO<^QNyU+ zRF8KX5=Z>thvBZAhQa0Z9C42}3Q)MLC!s|H4<+;c#UM`dW6?d@C^@`EOSun|*5P^0 zpwJEDes0sR*jqJseJ*eE@GpzJcfuYl^uZA!6z@elz}4!oj3~%U&0!dq?VVW6#G&yT z)pim~X@;*o62pniN|8*>b`0xu(FDa2P^yFsaF{9eE^)D@Oa>22a7`vGNq<*6;9Vvk z1sJvM)zc6Gv&>maeI=gG#Ga+|*$Y+X$P{F8jDA~xqSP@umu{1-pQX(+hsLWED~~XX zZcxA%{Nw%bKTdzl`1!x;OmwE7%SoA-@gems-nR{Zv+>*3{sS?UVRZGQ>XD8zJX6XE zJh&=(E=lJY6$;e~o)m<}`dAe;@eDYkn^EI)|EwHC112&@#tjjyq|rvkOm1L2>O_{; z#4$2rF2)BCvnYh&M=p5W*9&T*-0pc@J1^~&>h-=YeezY-zV!S7ZjfOXtf0ido)w*& zstf5E*Kxl6vA*xs-VF(a!y@90FVILp;G^@AINNAI4`j-y;IuTXR7q=(&}?Kw))rO)wl2y zHJ`Tpg^)1Qasu_}b-2ZNKgx_?mLropa$V%kU9ZgVQReIC6wXocA~!PM8(M&Fp6l;B`SSS}YYB(lAX;yi$e_3L$Ow_r_whZn|hD4v0fYW7#tI3sf(RWmQ z8rnr3-c^z}O`Wgv#Y#S`3-Hioign@Aq}MTteR`ut7e|}zUBmq9(`{8BrMBVw%5JCM zC;q8-q*D$sd_4}wa4lBP8AJ+k08OA|I}*roV?!EAw7QMEUJ!N0lf8duJ2kv$KIA8_ z2rd50l&y$-V8Zf9>lMI341 zx`PUX6fv#~GF3ma=w)fxyA>FI2c;bFPsD4!fMyg?QS@;&o3_mI?%)Ji$1u{vh1ETrc3IRGA3>=kZjrb|y{@@F zpoqbB(3aI^QEpTMP;cl)?@x8DWp*!&3wACe;&=on-MBTayy*d@HmW+QGy6EyINr0l zPAd$Zow~zHI1zSa7`lfP*m@L1nF|Z;p_G9WmF04^_hqbRk1OQyhumhTgeH+rxoD!a zKyL5r@{1`HI*Hs&u6#KqH7^t0CAtg`(c}0*z0>lYEdJzXFjVU4;VfD-UR|IL)(l4z z%;h8T3sj%nqiG9B8YUZC@DlO5UYz6Ihfn2PQ^}3k&AU4<&nq7V8}i{9)FHsF8>NH+ z(wZ+yYZfq<*&_}y91LpF*0Z!7zT?nYcK05uo~2>vEI>QsXztc~I!ewmm$R^E>se5@ z<8}SCW%%J^Im`C6WuEt9dY0m-p|gyu11~nzF9*vxM4xBR#G#h#Br;_ZgYN>7E4M4o zbE5H1E|dXGA^-?Mm4U#9T}fL(x0AAmbG8zICNfNnya`*`K_n300%17fb_Rp0DK^PS zG7sBv4(ec-=>odajf@0I;(Fq-1hC8MAK;09tL!Z(N%N7K3%S$;FmH$h@xHR4ms3NC zQlJF9rFQFMc7s-D=-zZYd;`A9XVeV}`{{GM9@cDD0MqW#+4_#!h%$1Gc)03cHo2Eb zBaF8*Q(QR7FFt89F}+jNfN!FmoEPviXnkWk_C;d+bHg1WW| zETT1xhU$8C6>6mCodTbOd0Jz!OvXvVmp4cd>2vrESAZ4M{wQ~g7`nt#YB%Zg#H+PQ z6U~sf?43KG=+X0RM1#Q@uD0u= zdl;_B)sv`Ov4wm*VGarnelb*;=pN_pCG4B~fs5}1tXS-*fXRaGqYcvLJvX&5){h?@jpR2&3JDL*73a`-7_O!Q;1&(fHhsZSBk z8@!tok&-2J@x@T>r$}?jSv?A#h-cNRUfZX7wI)Y_LFm&#*de zzgnK*3D$c9nB7=EfXCbEF)ZTk0Rc^%gSx@B_v_)eMDF^C!6Rw?*G2e^ZSMLArl>kn zuT3E-sz?F{)%L!TDth13dOk!M+sPX6E1oS027Oct7?d4A&-)ysvAcQv7~trxE6 z!sV3Q*fq9(7`pdD^}aZ%ZSG&FT9l_E&%1_H7og15OT7xZ-t$=AVl^8t7W?02p`lm$ z)aSX>G3w1gz%oy%Z!hL*-$=(t($~^E&{x>@d17B~=yO}|v~=9;Kci>n>xyxm`z~H= zcd9DLdwiz7p!6vfvvBb+IxkT1%zRA=_Itpg?Tm=u z0FY-tVWhhhC6o+Nf%_CizOZlj_72Rbg5UffRMV1KTzzo$>hDMi&-;zB-vY1>TBVno zQ`A8K5k5B8M^*OiatD&U=6xd_;)!ap10)NH{+PIyaAJ_dE`Vr-8dlR1m+Q*z&k+AL z=;dOb5uV!?RE#N2(cdz=eN>xi*XgUSG@(c&BDdybK~+SoYoMc!KFD%nS!j&^$YuVmgOuq95CV zK_!E`9X8zPKc(~Qav)RryOeB6V^au!*b9_{IEv+cH{EBmGKRu40x;@QWS3t z+*?2@YV(6ohQp8?137HQv6fJ09nUB@>;VGbW-uHd4Vtd75jV_??D%}fO~5{j-JuL{|@fTXc)^Tmb zVb?frOt=klYrdma4{|TKf^JD9@JY0e>53bNPKEbBJEXDZVB3)Ku@?qy#^E{5Eq>Y} zG$hriz^h@ANUayljNX}~M7){Qcf}nV4@X88p54RU$`uoJ?i$T81jVE#C{GN*Rvwex zHL7uKrc?IfHeuQ4`7Vlg)wT51q3$q!hwHt}cPqJjKmLM$5JB|MhnXTZ12e^JUvUCO z-?pl>Idy(2mS5z)aq^B=BT;?U+MPv@dBN!3G*^Sg@((PQeKhuNJtRw7hGfa0_jaab zq8lcphG270l1#0k%%C9ETP2m$s*7+@B(`v&xN>yZSpFzsHoD`p%~t&vop_mZ{#F_2^>X@qEng>)Z%{nb$RK23S zx3VqZ21ncaL#TQSXpQN~ia%Tz*SLdSv!mh{@@AFW3(?*hz<};1q{-JP#i#-c`nY;&aVVVvy{vx@7CtFr+9Hf7Q%t0 z**QO6ZDzOi#?weN8gBYVPGk^IrKhPhBsIVROOA4DlNxuo>H3F^`v1FsxI<+V5`fR_ zZ$J=@`JcTVZcLbuT5!=;SCe;AH_F4xKCPf<*x6jK!W)&^-X;FCf)wGn4=fHEjNC3m zpMiwDLCwh0i}gIy(-ii0fUqY%q^j2 zIr13+rW8B3`1$`vAgl2h_**3;4w$hb(Z|_DA2X&seJDBX8}1>EJ_{)8UP)kO5_tFx{nIgaf>msem-k`&`Ey;R3DiSJeP@|4ZkvpdbfbfJ< zb%tFcvSt$3gvTdP*d3BG1>X}_yG;op5i+K5E1{+r)jyPXTG%qWw%^s4@tIkLlfK`M zBvG05i)*w@-TK&{O9ktoUZs0e0+`#>g;gKv%jQ%)O;5>7ET`kOOb z&<)|B`-daQ@*yjNAeyl+v2JtiVV&TZ>)*m7l>7yYLqDm5N40tcbC!{TSAm>Xvirz* z)%I69^CSZkEDN7Bb_9k;SlX=32z@{9boXOTc)!mjwRdv?{X?z^iw1g1oD}aIIv3D< za_2b1gCJL!)W$soQ(xn@>kv-T_UGC?g0<9~?xhR^)+9hH*OdNEJF90f$*;A0mgBOO z{P|{|tsV5sR0tdlNbUQ|k+3x~sEwa75#R5M!QPHnH+09Vuw6EY+3~C^NI+^y2=Op@Z{G0K;dkN4wt8PlJ>5Q>Zt^bkx0l4 zQwfE;`br=yW8NT!Sw-a&aacn-1oc({j=}Vd`36t$mTRF$z7 zYW@7Uwy|#9*2&Q6JswrgHugND&Nk3Mor88?KG(R5j5;M^a$FZRC5VINl!D@|njo0R zqDPlzrof!eCE6Fa6*+z5(5SX!d&V_-n<64!NkplM&(u z>~MEQV6G0-^{FzJPM#}u=GwsA6kwGTQFr&yPx@Y|qm_d1ab00?-lc-e@oZ(&K>*l* zs_hIF(kBS`4DAKC21N{eUr=z_X!YmxrrwV77ZbuN$SA60f2m3>&0ELHOR43&OrIlG zJlM^H6kqMQt<%b2JQSY$4A9JeR41LCSQwQLO3R9>vST?$P0iHhD=mzWY+mZz60gwd ztd7!cl5W40ZgaOH17F0Hk#2HlsiWmRK1(h6jf$RAsNnGU&oL05%l_~zg3K3ZaJ5qi zzTS3)!JiTV{bh!MH&Q#4XNf2xqh&BVF(U4!{ucA_;&+o=5=WU4+>;8obAuA&QX4YS z=^6K(4E}s%xH&DOzAH*dcuuA?Cl?Q84wThK`dYFs?@_Q+?MX&P8^f4ySYTR*PO)!)i#@Qv6rBYRGS zw&~o4$X$#X>-@06G^-}l8ZxoP*&u9{G4uccp8~}1zF3w^?Ff;?QgT{I##<3-WZM?}mK+-$VOB zsNTaDo_`+-ZuQSN_>hnWiL`$wf1D}wc9`;sudp-a>XQDe;5W$P<)hwF>O&ovOgELl zSiF_5fYk(&j_y^8Xu=|#CNv>lx8LD)G+@dYH?R{9Nn|1ad6K_MfVkBP;#&gLi^$6$ z<#h@-w-fC?Lw#$5@X|tqC2Q(g{_Ki-_UcarT;s^f&nG>8#99O5cIOy=i@ zrnh~$RIPteKn@QTn0a7zN9)NP&uvr{t=rN?Xh&l8sqY=N^j`gdc(juT2-Ll(CX6uy z*FfA_y`~PX$e63i#Q!>jb^^}Q?JO*d5exDUl!no*nv3I6uwC&ZJo!^0-+d9-$@|u+&z3J7adUtR(q4ktUe+Hg%0R`O4FU$4v+Y-^kxP#9A zo&wcS>uoC5Uz^xl5_Mz32)HR>1l*hrZp)@4;Myb|0aqt70$4MSQHRTuxDc3yz`*P{ zJBlu#19rpk;E0ATnFs9VjM|bpttNfjA>IBdw>k3#3hyo+tQ{W=>hV|8-KA4814~~m zhNVj_n2(nDrG5FaTGgFqo!D?z=!>d z?Y!I4%@Ej@9x!ay8*fQ3Bufq1q4cm3xTVKvYJres31*iCJcL((ER_uT3TL_=1b!Gp zGkjoSC7&{Gy$g?Xg;!nSY#q)DA2oId;d-o4@h&oV5g#hp;o*{&Y+KL{q|b+Z?-_Iy zA+(oQrYXG9g~Y)8x3u|*4o5{-x)7N91M;mZP#g!mr|k*t1osxAK-uqVobWg54?2TuY;PT#wTrxvp1Zk-CuRcFE26SLE+D+(&?Tx?jxhe64a>+ zcPLzK3s+gGDKOg46x^QSY07O;?gff?roXvN7nb1FAKzyUUda!4iH`bj>uJd*KLmA*K2!KexvLee{ehze z{1yHXggi`0Ijr7JvU8y>cmpIY-EDXc-%Hg!dEI+j^td z3VDP7z6oDc;qf*+76wT3a~^<2#FhKaNL`zmMFL7p8p?eAOH+6pYi`&RCVAg{_DnaK z@YlYa>|Ptr3161h{tG8;wz;xEFVqY49V*;kvV!e&GsY|lx&MD;!$(X^890JX*I~=M zr}CeM)BPn1_kdp66<<`*3(6g5&0`h}ix47(Cn%q^mpjl2e6+l$!}tlnhvsQqIGiN; z6ejOaq4}oygOY9yi?+);(i5H}_SIN0RE{maq@l~v^Fv10&ZYP8n)&W8LtPVcL%-4C zWq51Dn!;_$92bPoI`?a5HVI$cTgLGGuFy4in!L$T8@QH1M5Zv{snx){ZLT}KPsw@v z+n6a6kR};_=Td=+XqoF&cr9bJ1{zXzXV`XYn7u8ux3ioy5d@VZh}O>z2SbM91(9^> zCLPw%3KdSmwR5~Gu(BuH-E6}rGw!1d!&REfVgFI#%XaILdVFp$j0<=K+*x7!abe;3 z(4HC2^UEQnDKv$tk}-Nj9KK}3XUKmf`1%J+G`f1dPoF4YlGV9g;^lHv$(=GyhHAa=lBWL#^`tt?er}Fx#3LAn7+T&5c zzMsIDi%_n^qyu`Vt?eYG*Wuo7`icBtGVG*3Va?2~`;V9}fZqJF`k3_Uq=g)~bCsXZ5BWgK zLjcJuap8&gBi^W1q*_S$0Ls(LAlC0sBm#wGMhgUzA?k}5wQx~MQfmWxk0@EUshzj# z>(YHdK!1@m=($@lpk?(989+ObqacRb%z3D%jWc%U$RFX_NLuN{Vd#5J(N5L#*OSOt zb$(WisAKC6=gG|Hb%Q*jq-)TxeQcZo}Zf!HLhc}bX(7zb^(}II4V26Z#fK{v>hz_KsGbeLv4ZO;{#_&qe!f7aq z!}6x4=0WcnT$h=jY4aG;Rg%o14uX6vV=Fd!Dr`d7wqzv5ZkRpV49c~PT2B51j>~vp zH`1zKM!$ThSh2l@8r&MdZK{uB4|yDmft*QIg>@%LFGak|jSU2QuF7qVhR!_!nWHRtA2u32cLj;eX8&mIXLYwmrs64LS&$ao5j_@#` zR}RNg5aK;dgE=IV`x1W={3qCUMId(_KU?P=9r?v^{#Y{|y*qIogyE(ItBLuETQf(f z;2^h}!97Sq|2mpKFpn!{Q?*_VG~!L#1h0;F7J{`z9UL@wOTL;Z=k>)Z{+>#)O)Yw) z9)L5UB0#6FGg60fo?}#}1iog;X02>aQxpW>q`nH#iOrm+x`*D;(ck6dq$o3GGw3{` z=|&+iccrGP?*ebiyut8P{Z;am%yW3s@y(D^Ax{0GU&Q0ur%Pp?+OZ^@qUKK`d%4rq zk>T$hjqxYWgD!z<;JM;rJRkvEd}HVtt>FE0a5iotJ#VN*9YgPo<-3suSwVKAm}Ycs zmu-j}hrtHRGM0t&>g(0^T?f^OI(Vpk7a5^>Bx4f3LRwcT&Dv(He~=2LZ`;wP)gP_v z;e4KK>V&}YA!(hovwf(Y)x6uWtM!`OgkgAJUOVHh*ra-96=v`EnRY^WcA7ZErJYxr z!u2Mht#z>*O$e!ypFux9rK%16w=@(1lhV*+-rm;Ic3N6LISR8-NVB#vv?MQwZeBp+ z5Kc7KH4tPv$nZC*Dr#SGUW#KFbDH-oO~7s*$*5VytCN>cV<$A_nin>O&F$WuX{shB zPHnlye&XlWi)*At)q;pXkfOd48c~1q!>hRkELvKnZ<(3fb>ZX zS5mDvjG%j$s}69rJH_>xaLFlLa%V0%o>!;$bdZ~Yy5YMCdR%$zr!QPvz3{kT60!7S zgYYvAs*}dtmo_FhHKmexoyNQgfhG-Oer1W3Kq)@dpnh^kAwRA*PBKGCDMe{#sLkv{ z23;ZUfYmc(CT-s&Lh;o(Lewo)Zb2Xu{OVUV zgcL&_qfJJF1|>rUEc)=Eh;HQz9i}a`nf+m-o+vI zn}77-xF-GN5c1oItUzrCv!1x~b0{kre^_Ts+4FXgD0_)%9T7Uzoo!)F$qxryYhjnD zz~>QQQ%suxLrJS1P3l#YxXcd~7~T-KTuDz%`OsEpN9xsjWH)q-O^H~x)m8l(T;?e* z=yU2Tc7lFXImkN(J(3W&pCEZqkT-{dpRJWIz|M~jU2mR)Mzpno7xax&2 zt+uebZ}bCp1kd3(*q53|Gf0uZ&36|Vxr=yh(B3ssZ&#shQf|6!LTKml_RYe_rMJ=~O#UkJ7!tS72nb z9VED2t74a3f*n6lI6!?f>fo5)tM~{gomyQx{ z@@E=!Lg=7@ze)tkyYk0UZa|SZ1`2{GkR3Qn1n=3hIg(dt=vC{zN^IQw8t}ug)^DL% zMCfpPm;KmI7fvib!(D7A=_ZPY^EoahUsXTqZ`1YV zL}d>!qy5R%JKmK$CeOe~kQ%Qr=JcoT926FVjqt;^a%%JpwMok=rGDQXy|+-4kG!=b zyz63tf~5{^QL{6Ee|UWOB~zQHeR*5iTYH4}Sf=8~)W^ehhhr}xKs2P3uacu1^!7wV zuz8liKeqNj@7@fQchs)RbXIgMITfRAyCPMO$1(618OAx-N7v5jt?dhXPgjr?<@#dp zNqnMN23vfYpieH%1m6Y4PHmLhvGIsElKAx`w@GUHwUDKRD>zNfn3G!Ar$bnRwI*ku zxlvdy*FsnH9B}{!Ced4H*m!i%Jraae50Vtwu4^~qhmE^A8;CjtK&<9*zx;VL40VLz zY4RLZ|y|yM|@2Zqg+gt!2m-)a@L%Pp5fDRQlD(V0bhl+t0`yQS?rBl^;{#$_Br)(Tgm^>QN&j z>Pa|Yx0$rtNmHBkD4K-{Bed<2un?hSrjlTTJe;?%*25nFFtrt2!qx)z0(}5&Wt_>R3B1TKaNK7F|D)B9xSkSCg6aps5_Qhs$i?`0Z@eVOiTZ=^$E&h}0# zj@jlXdwn9LknD_M0yht1r!j1iXxzJ5icl85IZ0s zAaa%RexJS1qzLzZ?)!c||NFk5&!0?oIct|y_FB(+)>D3uFz_=0$QOdaO-Jr?1UG%a zIvf5|h-lGFfgQzaC~p-b>zWMgB#3gC(Hb2RnlLp{jmU7JxBZ&+;-?=j_NLWXVd!AzX5bvaZq9NlqWj zwT%iK|F?)(SVG9eqK2t4H5L@z4?!XsaN#JQnt&$gs7r>(=5R0&^6~Un2-RoB96N>e zUnz4{=<)WZIAHovjjXR!)^DL$IP`!##Vi2aGOw^VxiBL7;jK-n zq`eoleoZ(2DtkXdiq9HP0J$-^Ahc?h&vq<5o8G12(r@3E?R+L*pfHZQa2{ zXCBhtgIYhTyD{i}l(*%7MNR2)#G^*J9c2JayOWmJ8+7kIvM0X>a(7omlKvi^usdH_jp!g9=V7OdDSIqdwADB z>Yy+Dh;_{ZS$ev#;7*R{zREj!jdN(*z)Bv|lo@m|BZb53sk<%ZoM>MU%2XrOS4`j5$duTP$k8#<^c#O4-4-tKKahKDypt%OtDR3|cv^*kGz zzdf}-SzJQ*cl#XVgc5nX#ro|*0H5lx$~?wGw~RONYX_OSs#qG*UX(_-0DhFODd?CVA<8ccU$LnL-OV(%!H(<_HQW04 zgL5Lzl`>C~wK2jnAwYHOI^?x4V-%8S{50q93DV?3rD|L)gFx70z2%lcPy0JkHtrHx zUyrqhun+Rk1U@dCd!6c-DMGD75%;aw2>x9nI9kzd-RxDX&Yz74g?{gPCwk5) z1mf%AFHAfVXnQ>asB_xjS53^~=nOB{LFbvEAH$wR>3*sT9iDfe^pMB?xdYmv&^}rIdDjTDS4(V-vZy5926(u8&~}!hD}R*S@gG zwb^(E!2zyU-o+|maX=ELbJBP<$V73dm3x+28?Xj){g6c=n(kpfA%5>6HhfvGmd86i ztX#cK) zp;!rHfFJ~mUt#4!h<4e_xfzMYT0;;?e0j+0_tj3wjneu;GjKh=+e=)J=Oz1V@IxM8 zJ#$>Hy)A6dV&H>F7HHTu#?3euA#rXA7S_c!+&yz(A0}rR&SrD1>vWN%u2!q<uFS^6b zKwH#>wS5 zjyewUR_vn3M^md=!3Z zv`yr!A8i?H;t@vnk%t!JeMDa%OKnzsQ^PdmmP^T|ZdJ0$lxjVC8h7doBjx8t z)bk_nEY&Fa*0j1;c^lxwDGM`61KEd^Wftai>Qa<97N)Y0SacXu-%*yyl!Z*r^rk*A zQvTtHy8m4=`DU8QzbWsLcgch*Y}j0dxm#7?XUe+8n|swr`SKBU#k;)u3Etc*62GL_ zE2O~JCk1{|nH{CTbKg;5UP+D*r8$a-VPvZuf2pjWcq3~@%BPK})$fwyt6Sv=?XRob zF^jOQUrVTFbV(!c$dOlSGjcul&g3?2tK2{nde)ov!ou=%3)S-r-{tezn`>9o^JOl% zjIQxrW&TC{o&ULG2sqJ>*4eVwL3<5vll(E)CV$w;O4WzyDtZQ_F~{f-ikAL`*0Ui! zm0yXvRlEeSt7XhGWm*>!16p3mk6(n=BXLR!*G<Xb?omB^t@cOhM*3)LUFXs1of6n;L}aFx?j1F=*BXBm zJQMvn>w?bDrFTSI-r>()>-(cVU6IQ?5zk&5`=fE$x+wkKn7y{)k2VPBBftAcM`o`b z@kd8^;|bRKPE-_9IvcS~Gtd6fm1_3dmCEN>wl3oi9$HCBS5nlKl=X^c5=C1{*;Z1x ztC~raWhI4KNolSjsXJ+NOW((;D|U$~3KIkYzXp~t9fEuV=AgtJT~hdt@{chRG6wj5 z>BhHav~Vu-730UlEzAR`BKc!zNUDr6GgCArVpuCAtF)ihwq+YRQ_J>(e+VvIL5W32wVP`Bup69*qiFisOH|^F#QDVl2-|@ zb*bWA4G9YMep&hUj{>T{)?`LaoArDkvALu%MPW8};}K&w60LfzpBeSrtQX`)9*s$f zGox`EX7*`HgOo;Qw9#h0oTN-09U)~TGde<9zjTO`=q1CG}ZJg+$$;g-^UWAh$|`MN(%YLSfZ42CBkcDrCe4!5O2Z;nc9cPSwOMhQkHxvC1Y64E7 z3{;2(bRnU7$r;|@$vDJYDH+BIbxP=s(2jK2b2m9Df+k3?72z^?cXA{ZsVV&w1r`Bn zh4=cN@Lu|UZ9RbtjW`7geHzOdnj1q=ThlV&=AF{8Iut8T>9?t;w2HiVmOm)CMN z-;7V{NC>W^4$Ws0W-28_JO^c$ddi*D4gI&(P3ac0eU1$eG(7^$NlHGIbrnX6G}Hv^ zmW1z;CnZPOHwOr_X2W^_2fw7T!A?xuP_Dl!sS=gWT1UOa0vi7%e(AZ^&8;LD)v{urn9r##;#tr>FkzGXWHAKPjv2)nt=Scy1jy`=iUE&AjSBD+mV@D?vc4G zIg=R_qiHb=ZNu+x^IskPEPqMgl9quwGmB&Ym~gM}o{wW2Y22cun(oN0(fEAld&S**}}??`}xC{)@JV?vj=S zcH#fYGaBMV55Sp(XP|ezcNE(6|G##iA6(;D6N!NW(cHYml%;0!3(~fE(J9O@8-#Z2 zMNLA`QnHrpg`}m6RD4~bhGRn@O&3-?{bRA4FupRuY$o+%?4gkHE$_R+dPv$#Qa7h1$+n6tE#Z0RBhPAcy5~3WRr>APa0B5vG#1kk_##`()|e9KJZqCNE`pau>rD z)=45hAqWsz-*S=l9cry-BuO#k116n^XVT9ldtp>?Ut&r87#IX{9nWaFZoQuDR{}yy zLySm6+^n08@OO>Ux0yF8J1MEKiqZ|p#62F`oK})37)fsYrc)X7c{i!&rgx#T$1mhH z`*=F1I#E~2+YZe%v7gRy?M4B~k#!bx~Zov2uqSb7zy zY}|}3!ZNuQu2_Qp#9dxkfox@Purg(uWd<)$m1ZDOu@%@+T6aES<+>#pZ3T#Ll$DdQ z7chHD6FGLTBz$TiZGlS;CZ1zz-4j_QSO{i-%CTuBw9mPbE7Zbn3+<|9*sK+Lglk}k zhggoQk(|5(rvR4SXt~iS3xMUwGP2UgS>`y)nu7ASncqiwkF~7^6fAvySGns`mid%G zgpMD(YXNU{7ZyeemN{~)w~R=A=3w~HZAlx8bs5V49-xG%h#5XnOt5J7i8~aw_jV|6 zuXku{AMfC7FW>nojlZGyTV4K**3at3pLG1JcK$>c;1dFs3xvEF{7l3m*F!rYh8_eK zrf;y8-V59E3gY1F6v(m~HTSguew*&s;=*5J{YG5=M?3*FIdQ|S{Y-`RG4Ig4V}i86 zw$j*#f`f^%STEn_MpgNme1_b}mz6Zx9W)u6_3>s?^T>>a9hUhZEyg3f!+?i?!qL)8 zEwfbeLAy20@OyMOt0ANRy}$Qb;Jp@juLa&~f%jVAy%u<{1>S3c_gdh+7I?1(-fMyP zTHw7F_`li$vd%wMA;=hJ>svU*a*06qK?ENPJX-BE;uZ%hU?5y@;_<{iw5x=b4W`=V z(!4S*m>Ai+c&m8&0!7F{Br-ec1^6H3aT=In;ed*9j4>kl=tJ=F5jNLy5#roHC|@L- zfEfTE__UMz6*547oa%16zxSxO9RFT)+4u@};Czrn)R9x$nLzVw-Y{%ckHjTmb(@lIKPZj$0-0dso)e$a<)JKNiBXT8Lcur z!dr&e`kUKij^&}UB*&kW zy*MsU$`DAwYtNQJ&gm!=8c5{60$77JYX6_V!Qe7|qw{~_GEFVNrl|$PVWYNQpeGnd#xY z?6i8GPq~g-S-5xTC3xp%2?fdT&r!*>Qq#k%_!S$}o?_%;Llm{y4Z92EcPt&Y zmJOiy_z{Te83;(~BC3&Gr^J_)Gh7nrDV$^H1C;8f?5|Vd*H!isl`R3}+J@-f&J5#> zWB?IeXB!0eAXcU2*-y&zlucP?Sn&nMx(L_i9zC&5FgJks6a*|k(~eT4%ch6M1c%R7 z?7GA)$194u`&gnw<3PzkcNaKQ?dc)Dm2wThi{x4m);PywK&xM&X7E&>G|&@vxY5pn zT35?-;1pq5&)Fig-5*))<(dGJp~>0^Y;z<1P}}_%_E_;Z6>#KL0}h)_@Z4O8@fMkY zp9YE`5sJsoy+Th)GH^l!Rh~f(RW30iJv-40B;#la_1(vcp-(?>@VV*gH9@=GLZioa zs~L3rRFTsD%;;~K@K)0-@!cl8&t#v)c|(XT<8vFmSVow)z3!u3f3D1KmenBgvrW7K zT+i?{ClZnu`t#Vbb~hxYh5CcpT6@}j*WPH<)8=EzewC9PPD|5g-eP$}Q*5;7Rhf$PkwO6zPAj3BFsR6cHWQBX$O$le3&m-pGb5q|X$eQ15>s&43pngtw`#W$L&#h(J!?w&Gw%K+svux7xGDgnzZ119S3)bLbC3-_vy-zyA z>lz4%lavOh@LH`7HJ537rSiB*BJ^gV_2&yVT^X%+D|l=YU*-`sShYv;|K>fM|FG5i zh;MyYPhH%xO+4LSAYp@xlz2RC?zT&*X}Azr`H8yEB@CCV3*$1XIyZtVpk4cHobKdz zE(;JjIDXaMlCJTbN#b7)z!`Q zw{&uN#7+)9$v&U#4@>r+xv4(QYP}g>ZugT;mpc(Oo(ADOGyy*dT8EGLQuhGsF}oi% zOZ<1`KTHYxO+4h!pN|i5U%9xKy{r>ID^4deZSdb0dqjJ-e8Yj<=>P`B04w`7Oy?tb ztp!5Yo_FT8c0lL$1_QLa&+i#Xn{7D?Q97n=}H1se-w}lO~ zX?Lk}KoSq_AAS-E?F(yh&uM);v|e>)&JJgZ)h5VA`SGoOdob0FZ4h&M&5+Blad~Dv z0chzmerr$*P4tYme@*+Dr*-rz4VaDT8$wZ1(_A)v&DuC@-Y#E>~{rEP;`OAP7a*<5V^RPl1?l#7Qq@3OkBnr>jp4 z)naLdkKt>qS4kkXW6U3Hd#WjW-0_lhDv5mfh(~R2)_0hjG(k%5S2y9Z)cP~mdd8hY zRrz|E@tuAL$O?8gH;Ku$nDJL>`&6n`J4L&v@{tZ^%7C1L{F}@wMJGRA*t0kQ)npiE zk}!f^rNr--QyfK*#hz)ecZyv7Bmn=-Ee{P~MSbyIh1lk>O; zs-~?vsPaQF{XjSV07U3Lt=21T>k4mJJ_&gH<3OE?OP=5EPKT9|wqXL1kn*OTnr2Mh zguQ#DL+nAVc9neg(~I=+dc@fy`Qk5u#YqIbyY*Uq7{kYa)wV0!xU{na~W5XePfrPj~?Qes~kr*Km&XV~X-)wQ{!cf4e+xgZx{w`o%wK%n4XL|`{ zg4T~W0D4U%>36*?mlE3_X+jd*MldXQzO%q5)Wy%0!!0+%8Sz1U;=hIJ9%dxs zrLd!^HIDqV#Itw3E&Ef|7pGd)iydncp~+psSn!!czpRP5+KI8yitu&2_(KzgMLL)x zaR0f=LtgNp7e3@Uw|fL$a=mWdTQnKWUobBwqz(fK%n`dpsE$?vun=&MI$ypM)V}g8 z=TXnT*VEtk?2A47BG37?r+@2(fAQ>>z4&{co?y=)9>pw)c0D!iSkD+WARX&LfsDc( zo1r%(*G^R!jPEZWf-m+0W_a*7g7hXPDj~<%K9;(Us-eUS>l!;b9JLnORz2OZZi7U@ z$t9Jo>0HIG!Y+O|d|nstguhNJODMlweuJC4#|<~Q&hDC0xBUcaD| z9~X1rLtGkK_uCV65VbOfN;>|d8YT{i^CzWWW`S(}qChFDmL30o72m3YC^EnhffkcH z*r~gpCrB?g=Vk2AsYNF#M+AP+&%5?|)4Gw@#5F_`$MVrw#o0N#P=tO6-(K9-T_9K? zrAdB|nU?8e!YGCexk9%;j)g(P0p_`_D(&lMS*5p;rM5ft_#9{fZ92Zgwtr{albpM4 z`%A`NZ5)36(GEFZV`655arRPhh1aui+TuQc>-)TGZTmVq;F+cNA^wG?`ijkn*~Yoh z*mv6YU3BI2-860T-YxH6fN@7xc}Kd1koTv8w9Bk8KUR99aweIxmHn6k_?YO40<3C% zR`1F*TmtGNw%=r;bFOEpB;bN{1-gVpB!hh^`DG%p+H6E0g7Vv}`3Ocs1c@p^p^4}o zx@<)@a9`XYfV}7SxXs4%@i%Js9j)q%j`b8lCLCZ*2&j6JZU0T%uj}ws+g@ew{|^?- zrcB(V5=4;55;mAiAh#1Uw=tV8PtY(i%iE5=96BBW?Qu~r*aWYl0~_=2+Wx6FkI6n` zwga5qsIo+&q3qFArd^S0U1X~k76e3A+BTh`UsS}j1eWV=fv76j+}2I+#-NO?fDhcJ zy>m+1?QQ#~kVZ2+fgyB`tVXxBs&CrX9bj?*7@)%?_AGlRM%}I^Do}P{65C54#M=2h zq0fY?qK{B@W8ir(iv_cpM7UI+RT!ctEZ}?_FP55~t0%K6E5rYReC1_=HWAv~XPenH zXtFLBkyv?Xf>i}c_ZPrrIv{)#im%142PXGDo%t@si8CP)jLTU}g{1n|C^b$<P9ZYMD z?c#kd91cJY2a_*@XU` zS`6w_p(thh(BK%PI!D`|4T*&Sg;Acny_2QkjOmIxg*x)lgAf=%UHZIzy#73oXFky7 z)H5|zKBR2Ff79?ymWJQ3%?bKDjzco@8iNRuMTMn7p7D~V$lj!vTb;l2t&zb=Aj2!a z9#(viJAJPPk4kR-9L73spQT$nvW4Yo1^(u#{j_IU%*x&R z1L`tGJ+86!qF_0l<7V|Z_@;YWorm)Ms!>M4>zZW zA9zXPiS~B!q}d? z#Mv&kZDP+A{U8n)zet?z$uKJr4u3LBeU7z35wYr>VasrZ<*n07lczh|#NOoj&OEN` z$+MkVel$GbOm+vdAc>@1a?e#y_Q z@d@>k{k7X{)4TF%n;y$bUG0M&U@oTI{puifuhH|=ceH*L?0tZ2xcyvB#U1){Q}au0&?n2X50z&S!69ep-^Ad=Lh29EKecF1_YZtEMA`jj3LxC@YpV29?L`SzX=)HZjz zGY#07R+CW+)ClZGL=;sZhdpQ%y>|FIHI%i&uGVVHU~6Z~VrxRz`>T5nzQ1$VnF0$c zO*9VdY3b#1E z@Er+#!=edTzeiNB_K~CMoG<3vC{=u-OcI)jB)$_cpES{;ww!;MbD46#N((h_1oD(6 zr-)&-UO?yy7Jq>va)maZ2OJ#&jE2SuP(bC}C||eZzUGv1ze%TzD-_7!T^g2FKV!VTTqzsac2eZ);ygwm&{|FMIm%j;XX?M5cgaTpo#>XtksNXd% znhexiOmS!1I~f0Qcn4^-)arii&yQ>VxEYYZitg2exc=bg-A=XqXSMq$?rc`;7kas# zH?=sO&d0)fe>1EXXTXy}wQeyV4G)23M)5lF1?Pm+5>3(OlJv0^1(VV|_W_ z{84Q^W5eE{R&f|$;M^m1sesv(y}+j}TztLFuAIE}^qenc+k<-*V= zGAEgy5LGmgASKycuFOF|7`3=lpwoRpzr>d6Rb+s2YbWIMB_OlhW388+8qFa33SWAg zUl#p`D8vrpH7K`cA(g_sokih4%vw;;{7W1`4GR%>?gr~wqeFKz^OCPzQ7J5vc> zyOXnH&;U81;Z=AQ3t8k#EdPMx^$E&4c4rppfo=A-4=C>7e@ssREeVd01s6+9G&X*& z&zl4-WO4yQx?=BWrg;s3ulnqv7VUyFjgvNFeYA2q}r3 zUfo*2r`goQuL-uDe2kU&49S-`Kwo7NJNe;>L~ihxSbx-If+zvAVZvIo8K$JoFrK2K z(#wskpy{Of0*u6o^JA?7a}ZsKDKrQ`JDp`L=-_rxCaRx3KABH4VOx8e?Y9&IjBID= z@%lqzS&jth)HJ48?jF@+g>#vZ@@y}I9Hu7da@lD?RU~o@#3>H_BGNON`5bp?7A2(`v9b&of>2$)wx{b(3|R2RsE$ zACCJ7x5l0ku~YH;%G@i@M6St=@!3$IHn8JTX8SZ012(u}A@NWMSYgy;g34UUD&E|S%Off<<5?zdHFe083#<)SsrCdkw9lX8e}vjXYdL>Wui3`ii` zvfk^!@KZAh#WS(DNf6!?HJWI&FKnvdml;$Gd+2s=yuVZsJr95sjEW%SIO|4xDeWHL zPDEzDphh6y8W&l4MYLVys72<==JaJ~g&kSejmdSBB7?*r4SD&R2{SBs_66siCv@i}<04=qBzvQvUPlbQW zCwv=ufOHSIYMRH@%DYbavAJG(NE6!gra=VsYI`U&iY5x(+Pt_JbTxCjQ2N^ZG$;Dv zRHjs}NM68rB8wm|A~Pn!#^8%ntlZCS0M9#G!xHLaBEt$5K-H|h4sZO#C>Iqn!Yu_f zM{XbpT_wxIn?OX5G-v2N4xBsjx zTc#8LHkqX`AZzG9v-&VAcOzuph63v>+?5*ySOcC_WF%imq#<{tvXKiolr8hBZM7m^ z)P&S>+f1Q?A&Ofuxl)WO#CDJ#FjWG|LzK`)Po_H?#BDw8as^_UTq$#t2hpohLlu(!Mkbl9L^K3v#@Y4H@pQozx>Fe8xt#CZVw|H}i~|Dn#`uLmH^aY`FJ}VEDW^oHEHFbuLUiba6nuy-J ze7ZJg=)u#qbB5kFa?aP&2u=|6B10Lg!7EaF1mB5J^*|P5Rnu>O%G{a?Rb>8?1`~Or zV=sWu^3`qxcpqfly`4ks;M%CUQ?E5@)J#eCpGx)lvnC5%{gX#(D1E;POr@8a(2?-B1>o+N3Ld);9SHUW`xS(6pLT8rB= zaYEnpNxD>+j8r3WIbTIERxE{xMiUS-@;bF`WU?hajun<@f+A0(oZEmEz!Ldd<=F9! zY7uv2S<-NI(;b7!9VL2%9p94NkxT9+0NvJj!(+dfPLGJ%q; zYD&!5$T}?RPHnC?Y9@2?_$*IzATFb_i1R(7d1aX(9O@r6Eb3=c^MPM$ zQM}e9qGD}>`&{-OS8Z^AZ{On%S>_GpUxEDFU!}YXrN*|%tMkPV2ur~_l&pd850W_K zp>7De+5RGC3&-T9vv{dwJK1{ujJJLBcO_TKHW1VfS*zWtll=a<)w1uo^H~{W;lx?=Y2t-ya1;|QA} z=nzPaH@Vr%ywatf{a2H&#Oh|`Sx`7?FnvxdV_5JZ-TAM({&TK>cK{%BtA|Q7^SwYn z5cnv$$NwR4R(sB$+!aXf-J0-ct51glR zxr-W^hbJL)l#Vu!wel<&*aH3bKXHqvTyH zboDwFy{a>x$(^FIpUf@I^0qgWz5+2SxBzwqw0!MjljhXnhdqRfHm?W2)0pr&lVS)r#uPWPBhv27k{H1= za)$eq-T_lTdiUpje z{gwC@erYdvA68IA$Sdu<s% zU>y+}VqH8>A%7@hI)V_>ndw$pM)UD)@5_o}U~rc`bdj@22$jr)SNYAaY7-dmBf9P! z;m`7>Vv*k(p>^XXzV#xiKi{s4umu~`!=WWVRt)w5CdTh7;vm%3-KC3-fcd>$B)a-lx+(YjF#HQE zTGp8MPOODV?PQ8XsE-JN*dBCxSx`3m6G2eXiuScmA!H8$qC4H|jJXm3%3{!b)kylP z>F9=lNPZ@cl;gy++dyKX@}`1IY@J0&z|GXv=g;(Y!PYVVmi_x)=O~}qKPh0 zx853ucf>uJR?`}67T6@b^NxC%aL$YAPlxcXJ$|7P(UeiGMPIS4^`!-b$?^yNUPj)l zZP6>lBxIa15=(bR`MV*?Gv%*B6U>)+z0a}_-uAVhPpt zT02h;`|$zuScN_*CNXyi3;z{YM#co9Qbn_^^}|&ZzfB>{WX30hDoqjb_qpkeA(%TG z)VJMxFqDY?;9F1gkf*|FPG7O%b`bwB&bK-};XpV!nwFgt&V^IGeUg92qykz~1|)VP z%&}f(d)?ZiRhO?9!&bDIs^i1;jMKW^>BwR7RD*~LDRWe22AVOA6^&jz$?0z~^#O(Y zb6*VTUF3Ch8J%@`ZorvR@tbn*f79>^A7Oh$m!IEg0>^d`VZtCUsCS5 z1V5_yb*J=YGW*~vG18I2PNz>_M;)e`g@_4wp)5D#g*&4clP~g;x&|`|Oejv$FRC4^ z+|DfT2N*fa&`RvfWL!c6(aH9VwpL|_jgyPBW}Mv}nljRRaBcsjvKwvp0p|BAI*TqL zNG5nig)gg?hSMR_e$B0XN#k$hK94r0aH7tgq&p-YPws48&n)q9IB=GDJA36|hqTy# z(6C~V`bEWnXl7Zl;vWWjo_so`UMy z`s&q%ORH*q^~&hd>a_LMHY<0vLpNVSk6b~QCs-f8ZZi?3$AnXFU=%ZjjaV$fH&wV= z1Q~>g4o{b%@-#6=G%KF0zDwAtPqM93!R{!BK5DJc?E?YXrhJuxY4odlqPv%?{-kP0 zy6%w9|FYXW*{zX5OgRdnOO-_QlFh^x6F)$uB2)R9(rZ}RWuH_&0cg9lIyu`oDQmxp z)Sao<_^(FxD^Z=jF@K91NwCfWA3-qX@0*64|)apkNjd2na7k{2E>(t8`D`*yS- zu9@wkYS#m`)_R?L>P|;c3QGMW@*dm1KxI!S^s8%TU@BGoyn8&suOt#rWsL@2+y9h* z6kZHCObmQ+tCXOaV?r^dOg0l9R5~%+YG;B>t~FgHWnWaDSMGUVI&Glw7C~}LGG&xG z-^SN%QA7R(^TfW*+Ulpir^sjBy3=JaCNJx{fDzp`u6jyg;ZPy7tHnxo2}E}}!7!_6+VFaEXQDjCi!eKk^@3fT!d5SM#YWOV z1-joyORKS2(@|wM%cq^{e(g@x&Z4H{Y1J@Y_qg5Jad)Y1f7~b8)~WJ<>anxgj|wID z0F)rlc7~%!(Dxi;gI5v;PZhMG{2PU7a5zKv#cRz8}!c08H z>2_*F?KCZZ_&bodox8*E8w58RG$#+@7@~ux^3KLMdImLG>CdrqW?|OCN$D7666p~m zhf|cfTIpejzGE%L~p$g<1BDv}nIqd^ul2RGUSTCgqw4vk&VfHhP3Fr!!?RnN){MsSZbPyf@nj z+i?r0S-C@LM6rjQ$1%rogvPuLNbwQ{{BhAdQgp?Q_1}u#Z;QD+D_R|1?|C82E{3O+aL78Xcyrcb+E$j;o zagH=Z-w~)i_ookbvF#0>I}8EQ&9YFMKxa>j{MC_jPbJz=$tCCUJ(cjbiipRW3_E;Y z!mv+8qdiT}6s70>j60%X+BuFftF3v~>s!C|^2om;a-OV2zpUhv^Z3b1_-OO3=zXsd zy>FlBeCN?lw6X~>6rk-W;>Yl6cRQy_($2ktO{lFpNOk&!}l(2M3*!$NxHOAex?h< zVTE|li!i3j+;0=c*xVZ1x5aq%WJ)h~Irn$XoL}0eTxp7nvD2N6{sisu87h^>Tq+BG z-RA7(e?&aarc+LmD2n#Ig<%x5h2>z+2$KXP)M7!I81$}GGo^QKC%YEuqCZsD1Ko7d z%g33k#-Y8?1%FAVRhU@m@#i&H0y~*~(}8c)B|_}>IG7H(BU_2>;N6)T=RnOx;y)Kw z7GLf&dw8d;Epp~Nt=@)K7dK^dV%0gRTFzrf*I){B{k7HH+0}A?d3-frYMUi zW+@59*$)%Oaq1jplRgJhScNvuMa;_E>63@kC(Fx2D>n?U@qX+1((q;48LdTMuDO@< zJ9*R2h$uTL6EDLS-IdVSn8!d7T^wPxx6(OTy=@es7cBz8SjXeaD2odbyETuj0^jjB z-XbW~&Qu#f4~#7(SWShvjMh9eT^6&lTyeWFbF=ipmN_^bP;(#}(27Z@3wosRr;6!P zW_fu<1AyGHJJ91ZwOY`M^nNaIxz8hE&m&)7lDRRc{UvC9A#nc8g|QEk*S(gt+>F@M z!77Eb0yja`=ob!ARvC8>CSaww-x{{$8TxJ_kJtqcON`h|JOE57HflX+@y1)G=j@95 zbBnng(=V1W2}-NXZB$eu)~Y77E3Xn%fxO_l&Y&WQJtc(zy)4wJ_{1*wFAGv{fZ3HR zVh_i?Q@Iahq%UGmI;N~Q|1xf879)wg%tolX~Y$jx4!CH`q zLn`rxQ}qcZf?GS`pG3hyhhv@!Gjv~E^kIf_7umyR9p*IlG70?nYfrVU4A7oU-`G2>m@Rwu`=|r7XL^1>G~btY3~Z*O&CorRb)TzNKVdiS=u7^o^3ftz^K^ zem&0IUeb4!G8J`gsdnQ(KNnmhDekNBfAO?^N6GvxcKNbDw(l2#ouI|=1 zbZ6SswcX_#lXpDRWq#MiJEDJj$GLLVeZK3T-ek6X({jd}N(d~|JWYME~+jk{<|aJxdn zmAz92X67E|r_#%L^JG>(m976JuV2d-0`>Jcx-H(E_G;ezD(gO-EnJ`DHD6Pp9q<~2 zCAX<8Mksfv%(qpJv|0uk0eZHU;CiKRR#~8ezNw;bAl!_1#AXIim(0=OO!sQXU5DoA6F}xDn&$C(+x``3uLKH+;WCugrpymCZT~D9KA_jwt%Y|6Ir3coO)M+Jbd4gxk=FNg$S@cgVvgh1m|Br%yX3?Bp)MppH z%S-wUC{@9It&nADM_`<F5twXqy+@vOhavwG~=;HxFQrunR>4te%pOU7-r3#a_^ z^J(5D$$QiD-uWfHQl8hZ6`Iel<@ualzOZyTB$D1Fv-}2=_SPG1bCI%1Oq!Ai;L~ZC z3Cah#FH$q*|TU5q!-_GhBB7v!ex9g>z?*L8l$lwUMN-BwmpE~Y z8$fWI9=ASkT11Yy%ZbaJr?+R5i9MHM%z5g!PaHn|noYIwTA)%j zBA~?ftl+nK883rThbRY|Ienv<(*U)(QJHNetD6=2C%T=Icp#BA7?I&93f5$av)x)& z%vi-)2X`Qr5+B-tynTHTB2b4;=6lVagIJ=W-zO~~UKR})%3TnWZ^zS^31F-GFs?S( z>m`Q|Ci_aVuRToE8#5uU=XIRTuZW|(!*PQh*YaJ~*;uBs8kwqRXJyETL#<%;z(3vIfaeRsJr<#@EA5||#0hT|PI&m@ zRg!(?Z3#`YAh%Nj;pXSiT0!9-G+6LVw0^55lo5E=SY(E}eWLDatW(*~MhE-L{r&Ww z@v^|JP&6mR=P0SfuM~EyP8$=9x}RTcVw zdq>-|%K9xha+x{~UOsB)AM4`IdcWWS9Hj&o(FpZPil=C%R*74WDs-A-SU+nsij+qdjAw}7q(W<`6R z9H)3Y6cY0wS0lF1Yr5ZZJmPPr+0s0D*Dr~@BG%9EPYj-yTxxe&<%g8DY%sz@5Ls=n zyM3lO|}vf3a+J z_Sf3#N7dqb+4??ZC`kW+$4ttwn(>NE_bksj+l#;K1!sEkiC+FBk5UlY{4SA_NtZ$s zoJjwt(1Am2PkKoUX(6khQe=}-v~N|47+L%Vz-SAY0B_3d6nu`!?8||3W)OcV2-XDg zn|}T+pUmzx@wX%tJUBXcNaL^9(WQEs)p=yCy?&pf{gx5Dcsn#FS;un=r#d*eH(T*3 z?*L=4PklBh{4NN7AHk>Ekbct_-&TV1* z^)R?4jIRvySB13CpPcCF#LaS4-LdQK7vMr}(gH^yuI^WH6! zPMW`Et4w4--My*C?N;X$YJ8&9xZQdv+pY_@Z&85JOuI4vnsqM97S7KG7f1n4&F0U@ zHVg2uAAR3%PkS^nuEeExs=+0jzA!223tXJCsm3y{#`=QPm{41ctJ{)s6@9ToiqeLq zo2ef`X*#T@V@mTN)`dy?KadG8&zUQ77}Q)JJ2%FKYvbU$IKDV8TtYPJ_}7`}iA+aY zlpo6MLE}#~QyE;-u+xyn=VG%c3iT`U!n82J0wjaHgTg$G<B z1+C%YPMg|fPl~Z6tq~FTOKP2dQ7mdAF{tU>uhv<=Ns6(9b#Af2kgdv)JuRyWM4C>B z&eQo_wDX68^K7B@cZJ~hh4|-%(l4Yi7iXh0#N0(l&eb|)(f2nikY&#D`;!mE#r-G@ z*e?vC-6>3KLikEan+RKeGu8<=DRr}oZbEe1xlOI7e!diDzoAe5+^QhYR`d_6mE37li^YzUCpfD^4lfpb&KqV6XyyX0{ zRD8S?JW+}tER`MtZ>4o@K3bJuky0=$bv__p=xB2V%!RWJhG#;;xOx-?X-x_OMyvw_ zq|65;uZxnbNXY7ao5<=?tMf3r$`ewOrPkeL__b^Eo4d+M#Uq)Q_335jjBCN*_e<1J>ML(XKos_gDhLyw;ZzRB(&rm!!()x zy6Pv8OWAs>48{7>7Ipn@5%iNEm7RymEk7&=_m|^4%cZ-@^u)LG(QEnUmTrFi+V-BYi@&y`iu~GWdr#ZNjdoPySO2eU?rjD{;pi zcU+0%GPvW8d)#pu#c{*^`P`fnN9Q}w_xC*iKCfT*t5SK_IaR4ts_t^`x##G<*YxPC zdhl7jD=(YQwA2nS>%Ld?=*xPrSTsth=-nF;3OaJX-hH3mEF<^o zse2UPt*7o%>kWGPPPP3GJ$1X{+w|0}YJH2IzFBQwucvNOe50PaL9MUX)7Po(*XpTj z6tB}$SF80^diqMW{R%yGx#G+8)TL^j*VE|y$jBvn>SDzg>8T6V`T{+DzS_PCIG?$=Xis`VLqdX?I~Qcs<(_%uDWLamqU=~J;ic#7V&OmC6F zrFz#AY!9BScb%lw!baA z-%|QTnR-+48#48}TE8aKud3~@$kfYYW<>2zo521FH_GcepaTQQR~ez4fBMI zJS9_4DtKeuC zWa?_QzDlOARNJqRsmo>4{bn%W3kDHgIq37UnFN= zsJ34qyU$m=MyCF%c(qKOr`G4n^f_w#*)nyO;(nRJ3|!m|GQCP|Unx_kD?Ux8R;cxI znLbr*KSidNDPAg5OVs*gnLbHv&&kx!uq#G>5~&~6`UjEz9`gz!--*<>inoi@H){R0 zNPnfae<@O5DE_BNeXiEqMEWze{ZoSMM3NTfeh+qa6;2a4YpsrS_SU6FoA zZGT&&-cno?sW;X74Uv9bZGTOqURC^xNWHAqTSWRLwf#krdO`8?BK4eFKP%GDsO_6Y z>S@JKiPV#7{e(zAuC_lWQjaR$BvOA@>qkWTVYU4sk$O<^-$d#GwJwPCMz#HZk-AUu zy&`pwTHh_wcd6|gMCwk(cZk&OYJHnX->SCXB2qUiUN2HNsr8K_eS_M5y+~cB_*#*= zMy=P0^wnznRU&nz;wwbza<#rpq%T$5^CGoY@g*X4v07gw(if`j7l_pPqJ1M0Ntdh= zyNC(!qo-v&))TP=F+^O6eahR*>rU2F>t@)ZlukX2x0N_<{V!bJKK%cQ?Xl9eXn~=c zu1R@a{=Q}Y|6UI*T@TW0funT!I{nYr@Bdc6d|v-r|G)7&l)um1U#^?FesSD)n4*sR z@Bj3AmXGtV_5WMf=l}m+^jx_xz@zUtRqlzv6y;?vyx$iSS9|q;Z7a+6X1%?IXZ67t zvcTs#8O(Ui1iWxx$a6ChFPf?Fs`@HDFH`NsGBsXZU#-`WsrQ;Pjb6O3*&C2)@djlE zdPDjKd##zFUR!3EH==L2*Pcmu9hs5d=)O_j*vuGjTxJKavv0h&V`hT4Q)Z$!sc+}X zWq#)^%pB|;+INU|c;+zg$jlMmqQ0ZN zqcgwv{*XDw`%~W^y~UYhy+3D;^G@hH-up}Dzr38toamh_`c4wwQju9AF#SBUOnA#h z->JeoO=MOGZ>7kbF1#~D-zwqti_DqAJ6mMV65hF@?;PQ+7Mb&ew?<_CD!dCs-}%D3 zNMtS)-X$V)vGDSuZ>{hy6PZh4w490c<-)s4WUmz7Ix+uh;aw{hTqC^e#e(aEccaMM zAiVV=bCd9H5q&oc?>3RSRd{!Z%iZ;QUSg!itZ54eV z2=612`A~SDh|I^r`&9J(LwMUn<}=~_Q)E6D-j|~93*mh&GG7UAyU2VayzfNcx5E2D zWWE>PPa^Z9@N%;6XW^YJGbc%JsYJX??-bd$OnS>@=2YpOCNnFfw^H_0K`~XmKi^*?QTE&>2x3<^Ru6u{}&eZtCj;RTWozfHAC#7~y zBvX?UQ_@}S(^69tGg8wNGt;T|bZS;&cB(ruC%sEMypt2Vr*=!sP4CgZS8C5hZ))$v zzUh71=cV>bWK#Plvgrfb`%?202c{Mz4od&7ePQb0#G$D}5{IV`8-8Th5s5`zN3|W@ z_4~vhQpdFYsq2qzi@T0(`*YWEZ6|ac-}aZT|7y#L87B@uS#+HwIuI;ziAbCxx|fOe z*{kljLMfaPcz0~?nyem@gh{XFM{hnyws@my^k3{N2k@!TUKNjt!7JXuy zNPQ*}{}k!ZMSH33pZHp&z7mP;BK?hM|4#K15OZ|z&$uf14Oe~e@ zC9=KL^GGb0sZ(X*G?`u@+e>|v#2GTRN+$Yc`b^ng>dhq1m8o-NVzo@4C)-Q?p2P(* zb-qkoB-0nl_Df{yVwouQmlBuB^rf=B)U!%lB~w?*#5$S2TDF(^V2SHx>N=UYQKoN@ z?WNvY;ue{@Stf3i>04!csb81aAX9hB#N9G|muxTf02BAi)O|8hkm-%Gz0_AsJS0;O z%ETiw{jh8=^(qsO$<(7V@q|o2F564}&%|b#dRiu)mFZ_>d#R_Icu}Takclla{gP}i z^=T8Y$<(Vd@rF#lF58Q$_q#I&lMsRwkFauR*aeZCF+em4Q9#u2Z}J?05O?qsg)4T+ zh1F82D{CbNRXgS0h@yj7I8JgmxJAojHRD)1#$HgsF=oLbZZK_GKx3$TVT(FyK@{wb z2!&@iBTh}bJ5X;$S2XHJA)&XG-o>05{^3p+rh|6*+kRPS+i-Xc?A|;iHn_cJAWSR2 zvG26~V&5@f#hLMpGCge8yPj62ho|(eCza{p3BBuawSG+RdQ`19=`;SW^d8Z>9@d9f z{L0To^=(wYB?cE*)m|*OtN-`y_TTFL$`7Vas&>TQqSDB~Yj{88dg%34I=%kNU@xZ3 zW*ZYOZu!r(*{e%C1A=z0Wa1cryZLJ7Ak(iZKiXsha~Z1ZMR507=#?0^fp zS-gjQSIY4x7OQEGHPwv3vI-N*+@{b7xk3iv3gmjB-iV{!Z#6$`#vU=-A2yp-21cA7 zXxdag;&2CkqC??;O8;$gM5OgeEAn2X>0NuoJ^s40F<%Tl{NAR6M*M)eNaj6y?Q;8)jy{C^h62c-B^7=JJo2W79aTmRbS<{}-AK(|Zf zy%h8UeRLBYfm;*Jvm`79jy@dsUB`hVZOy31Jo(95Q~kaT`%EUq$!O!VQ%=21!zo8Y z0ukiVlnBOl_(ntuF%ahifx~b^x5^}Z_G7q&9Yv`;r`E`-W?yH((ax6Lat!{*$}#90 z@7?)NH8DgD0jcPu)xRvwrS}Q`M4TQ{tjthfXN^RE7cN8L z0A_szmwXKKdf+}0T8r!x;nCqip(P?5LUxL)^ahFM#lOaM4sAA!&k?yox}Qn^Hi_}2 z*Ogt2$Cq9dp|@223iVAfn+Wda%AsLLj7HMXpE)Mu+G5Wj4y@sAtgufo8xPd zKs4OpqGy3*W>Ey6AMhXF4f_w$wtw3e3r`7+LVTn|xI3htfeyTH!@4azy|f<5vi5Ka zI%-LW)cdyZ)Dn*<>2_h;Z;zpl_iMe8;aR2Qt7CU+yLZ$mTk>y8m)}~CTYqCc9`=j% zxKSB=e`7Xo``?(24U|1o{;m&zK}etdurh}}q<254%A&vNT@Rqlf_ZqhG7ksu*Sqdh z>wER-$~+vrTkpC{hoNqRKKo9!-yM4Q?bz>E=Hb-MYWsRUeUsYG=HcM=`qb;x_L6xx zE)fU0OPPm*SLt1B9-htS;qFV-dF1u3wdy=B(Py)HxcfqNybJWy`D(v4`qY1!hjBjV z>a&!2IC!?+rOd;@e!c5Vy*-5|M|rdSyWL3Hh|2b%7=|({VK4djK6$y!EpIQEy$!#y zt*A-l|7W(5a$mQO_a~13o2}-*+XnvqJpSE=_3y_k+Zf8{TV7*2-+%67sy-$4Co7Hp zk<4O2sXtli?1%p30@M+`s3Yb@Dx>?NKe+(?$pze>%%DHnSL#nz#`i^kGTTx)sCQuH zkbTgfT!8-Mf?<^-_CtSi0s4~*(4WkVsvNs7`jc7oC+Cl^+_85;;CT=@U7f{ zNBvaei$!aKnDg0M?`w$G$C{=zj*8E2P7LU789u0MV8@WzgWFoWhPJg$AJ#UaYxv0a z*@;9)_sI6qsZoisDKy*DrDl8Ej#JTWPfZ*#scYvpI5M_RncbC`);)FjjIQY&GiRp~ z>F!zWXtuY_nYv2?&GwPI&)RMH+^#*^_UhWRQw z$W%yW%q9DWfZt63%h015HRlPbeIn|RpSQtjt})Zd{4LCg&#w~pB6cD&>9n42xrz6br%cxD@9AY7ZkNz~iZr}-QKurCYMb)#aB2%@^pXoB}YK%f{qj{J! zrNhl@0L^B0Iz}Vhy)#Gqr(R{4h^2r$p*~c)YRB=|5lz8H42)C2`;Nch^Q%V=)Pe)! zi1Z(?Y_5c(yz7hD-P#X&$qfIwO;(*alq$d<1im9Gz=SbKKNh~Q*gPICuDF#{AU81r z-_?RGdy*LX%SWmS_g#}mXu)~-$azgojVB51vhv4H!N+#Vq+waR`exx{2S{s{JIC6k zX-rdl)xHT?b-)Pv;L9bNoTU$L)elF=0c@rZc1j=ITKeE7I80Z`E;SdhrFgeI;my0H zz&gU~k-YYJU4gZuxt+*;iNN~lQPTIU-+mgIBrD($Y9kbnAO5v&6cGq8%>uI&{S~z+ zw{O>>?>0sm0xhl4dz1cXgY&5BmUV$IS&&75jB^#v=9(T@KGQDFtq zNyV40#Z*wg@LQEm#VoMVhL~NRQ8BEdB8mZ-+k|%@GNJ1}|D^rd@$p5AdNO-p-losY z*gMJn{Hb8QJVFkN93SmKa+GuhRFQtEQJgE0AO@KS)3Fpygs$jLXrPt%j?~!8s zv0&Zw+M^JSs2#>>q}80<7_F{A5-AyJ(mU-1h;fD)qLFCnJ!ZQHZ99pr4Q9o_Xa&EA z3o*9&8>)Z9(80tbWSK!M(uk+_4|?#6W*vkGEgc7O`Ah36UZdxMeJt2<5L*U;Qk-Zr z@_D$!_0e`LT4ye>dn`3)R80(n4_y%NQSiBT$lTMO>+GTL8&H0TnDLLiZ&d;0{|ewX zs5{Cy5}w7l=(aH&g`&y_F#z`&5~5=YNB{*y01tJ^H{%0+`c}PZV4XgmoO-Sbhz>Ow zu?4M#(dx0l$AXw+aFluwAERQkT60I}!;JL;IZ%)hO_)LP zqY*@u9``$V*&{25n!oC+bRBp;SIMfDm@3;;yY~Yw^(V@lKxhPP9Rc?m90yg)N)@qx z;;yxtI~~5?$R}#d#3YOv+9_5nY9f9IJo3*s&AchrB0aHv5q>v#q{^!5;LV67VYZ{I zfsW2_Jio1oES17zjQ7gy~0gAb(unXjfil z`!2QhS@ILxJjXUy+h}A|cX)Qv*rlPOeO`-U?qW^R$JimifpR;l*F>h6V=Ca#jhy9X z1W_*|anm*E^S18OAH@{;=q6kLyB)x508v|q zN5{gq*Q(Nwu@~rV2k`Iuu!+JGNt@&&DzFKPi-V1rzFJ^vzFZ}Izqb#?j5zhnE`T#H zrdDH?P+W9bmFOEI83>l^b$gIX^M?fqs&QUAg4pJC&7G~??VqjPh6Ul3D_^$HtQ7r~ zw}{fJ<;=?Qnp@P-C~`&&9==kH(1+W|@1>TH4ebJFf@=qw;F4V-5JCpU^bq8Xt{AI_ z?U8yQhC&^|Oh!4;fvt9n9kvG86LlCbW6#-sB!3Iqjk5MB8?B7{?7@#=t-?n(qNG7A zCp0c_CVJ7fAGKxmFY7ljooKeKjR(SZOEe(km>kf8$TIkrn4lYoA_8+5(`;q5#vD=~ zbzAWGpi71ei8u$5fUq0=)wn>anB7rS%BuyYCZA!TUU^%mCj|kb#>-EIiEL6k%e|1| zc`xG|iF^+&5$sk(tWFGh3>KIZpaKDzr3Dv3xtMpJ7}eal+7Fl|JW_R`Rc*dA)#hVS z$*P$y9bXD`nXTqQv4QP_ng))*lGJ84Bg=VvN7K*|txe%^JL6YXkJPWH4gEKBz|?>5 z{wG!VfsqJ5fTv}w5mV0{GGzob7|XQ+DpTd_Zpy{RD8qq8qx1pOP&#<{;%a=EKLCNi zQM1vSwe)uetf%0WM#oJs@?9PMi~@D`CY5u_RJNfy>Vl#YlTh?_v&ASk7= zmf}UBA|K(zO{)QkOaoYa$ebv{IeC@*S;RH(d8yqkyAe1u6{12ElnwfJ7e`@)awHb={0B`}#wO*TSu6`G@w!Ib*nV}g-y zj%v%|qv5KlG6n67OjHQzh+loPFf%yKe(?dK&+M$lZ_%~hM$1H>BRs+xhL%CAGc?@l zv>;$gtgfcf@Z-M)S-qIJc=FF`gL-qj`wjuc)qF16k5g`{9CCHUCn3KBpYV z{b;}TqO`z;-VKi-CaaA?_X&>sj(9_AtwI~2YSZlV)&WR}@{`PB;-2F}ln9BI_TYb8 z59n#ybwp3o$Z^OO)YfgVQBJKVHSIPc>q8=UIcU(pCh0?#BRODD3*I4sn~V=?9#GM= zQjUNRl5gB}E-3z!`L1lvQ)bK^epv?mGP#iplw~@sm1yJg(vD$Cn$d`F_LD>-7lG{Q z8z9ITx-v*Fr}DN9@(m~%GMfS@*TTsY(4Ujnz#539^rIm5U1^5VP&GBbWFOCo?@Ips zV`!RBlV*P+(Rsn|V7Z9E=8rf?gJ@!!Mk$B}!ULf>g~ug?SqcaP(Bce2Fd_@(pub`u zw_8`M5cu`79q7}Hwd#cWg~~?eBqyreY<=2K2%jTmrBPuxfs*UDL{vJ&R94YzV#@M~ za^xYiRF3QkH!RKmMwDiGJDBCIW_{Nnbf#K|0w3vGzid1lIjVy}#OVu_!gWSma|oIt z7Fv;xGr}C)H~_yZCix|m%J7?p z|1{~mBCU;v?|mWPkk(g*Zw=yGs>-Gn{X3j2OcIC%<040|jfCCE9)_t;i0Y?O?V`Gq zDobxOY{6(Aqu@eXRc!NN8`{e<0E31~svAPkLd+TU(?3oTGf4fz`9`~hJ4o|Uww#KV zh_Nf~GVL3ctQcW#u&AKd2*^@ehXk&KDtS((GG~cdDuHf>X?~7opBvCl(FdXhh42}= zF-~0@+o+JC8oy`egi~Q29GztDZFZO!31fe!9{J$Zb#0F_4^@^G%n3rR>kcX94aS6YOP~+z>3+m+ zM7Kd@A*tFMa~Kg>#gG*pCSq(NfED&o7q?=7K2=WB>(ymbnh_Lyh!cRbIzv zFAuCkv^Zn}MNA$reoYtYVbuG|Q*jMTkL0}$VtSw;MqaLrJk8MmYz&as=_>JDc+oi2 zorhrwB1nz>p3qJ+VS|Yxsy-V0Zm1cB3Z{Oc#z$Nv3`5|>Y6xJ;sH#hD<)~kOMEq(C zPaEofF-a9z=a$N@iW5g`_LWk*N*%EwQi~(TDoq`gCIay5dN782%M1=O(1pRchKZT9 zsM#^^Sw~!UtAb0D4>c`qu=1ez;{H6z)JJ>VKiPgxEZVw9S z_I&#f=5W-O0i-T98c~_oHkG!{w4!bRi0UCS0?FPDvrA3=c02uz?htT=jXgZWkCsnu zw6w>*(62)G4=qB>Pc@vBJ~Oh9zAu^^R?9wtgF?FNLt+tCNFYXo8FZq7M$B{GM?V~0 zqhs_QxvQQ<=i3OQX=_?Xn8-IW-##2OzynT`g?P7)(SnO%8*a!$$q?{`D%|b^s113# zAI09E5XA=d=SfnYg2amY@hULzsR9ozz%!=m2jJH)isxwF*W^;My@Tgeqq$HGlT5Ya z4XUp8hEy*TTFw_omp|~bfmEMg8sRSt^9RHHUcDl8$~(rO_l@eGjUh{srrxPQ*#7dg zbmVa}$(eaVE6Ar|T z{O|!Nk}pKqOCMq;<9%T?cCRIIkJs zqM>@Sw!x>2OTI9SBBtDEG(Tokzh^XjgtKz02WVOkid-K;jA8PkvfPcsKwx!gkP_W{ zOcvj$i-P_+t>PsZUwZxCw-MPC?3uB~nkUhQ6(K}SMB5H!cTh}2pftObVcJ7cGh5{S z+Kav+D5P-(#@a*uUs#P_BQrz*F$RXA8`@SE$Msabhp6T64eV_uLOa2d>6kmCr-KIs z`9<;QxPPukD`CJ}zN)urN=F;(4j=(Ax;wD$i1P(z~3kVt={B zko(FLWv86!ZwOu^<&JW*ilKO!!0fufNUKq$u22)zpVScoGGvTKk0^p0ET~Vj66o}_ z;&Jj25OKDNUqp?=uMtnHIAvR~!jT%D76=%37qX3tM$f23a5q$=2S_yEU=%=OO4cGO z1k%FeD@dHUV-1v(P*a+srn=O^u;hWTzoJFmg!z}HnW6JkV4EHA$OX{xYQRS(4}rzm zo$P4N6tqi+V%!?x@bLrtq_`Zd6XAzt7Ky{kqt~6-){YNGeb9_vc`N!Gc(A8n7Z>Jj z9PVLdJo8Vk)(|^fy9)X1@q5W3=qrqbp$*;b^87Q^R<`kp0R#%e3^aAXhXt;UYE$-$ zN5z?FOgg7YjQ`ix)08lPe$>G@5k+uFwv@3EMj923%qi_+1;Y&98CTVA&Z29l%QceEH*HS$c z70;swvER|zcq)n@S-#73>y--QWdyE4DjW(NEak5B-B8u&exp`>yTKSc_vyHGO=NI~ zhut=Pt(sVV{91_v-)?Frn@Je3jn{S9s4!7!Tv114_i#}+-_%1zz4-$jk^K+~>myyf zrO$X*cLT5XU%%|Q6^YV*SsOjS}Nt*P>20A5?Mo z-Y~S)CTwJ=62%vK)7QH3l^!X*?)0^8O7WRK?@Jx!#Ye8)UmHf?&5zySkMt#m+4^=} ze4|hQPLF=8+uuRm=&#VvM5=BlJn8gxk6Yw ziwt02^b>mUxT3sn!u=P)vJ)DE^Yj*st%U{5F;3~K3`5*%5u6@~VgSzXs!%G&SJYOm zRu`-dX`+NTy}A}65#BpA26a!zC=7NLOqE;|<8_8ZLs_uF;q=f58H7-e7{GzSZLbqs zHD|dpR@b8as>2F|F)n{;Buc_gR~m?#hLT7|D>2WbwjK>ea@8HlWm@U?iAF$8$QbD%0)WiUc#3V|)Lt_u1i zHC0aSI6CJ20y&0o;U^m>>PZ~3AkNY^VovrZD~6%W2!;|{U@8w{hPt@Yth&I2S@mkO zeVrM)+VtOO+BcY?8&S7}P*2xLai@96-H5s9GXl-i=MG-_?SKbH$CUKx=wt7M=RA#Pg@Q36 zCgZpAGZmWgYvVIH2gA{-Kl+Vf98ik3Vu-NbiVbg>+G^jpcFgRr)sr}h38v7KmQ3i@ z{N_H>9~|W$8ye+)W!l?K@r`+d_zpqT#kc0HA58muv+4)a^oj4yML(IYCr-C!o`Dea zzVj^q8J4}uih!#8;qd(fO3~bQC`EI_B-W(9H_HWMM_O5ap2l}w9eTEf+ zX&vpDGp!mNW|cMe49l^Dt+}6?rWf-0mss{vRAG4PPqmtsTILcfidWk_ z-3l$WkWS4iZ5!QhLB1#UK_8^_^nNH&iA=-K_!s<&GqBF$;doM+EDpxl!fSQ|PluD;j+>V>TS>YHCbm zRr6y08ao!QvFhg5*2CU3tf8sigx`bH5JEfJ!u!$nqG`{@J#YuCmuJ~GsfqU9O>&~< z%tVc0z-qhB*53Dx3r2kU1D5fSWn3E(*F>5TXV+<~9;Uas!}K9&l;YKrg9iI$G-5`@ zGuA%OTdl8JPl-1y@w)Z9q7{+iE$g87tkd zUSyS4c%7y>;|y0%AaW?u6Tpbxs5?fD{*bcDUTkT%*zKqL?C)CLZ(Hqx4>4GV)^2I> zC=TKHhwT{0A^c5#1pCvW_KHeX1)uA4o((w|QNgLciOy2+ufFOvKJ%}>ITs-AKy4+0 z@LH9Ic+cm4ul!25kZv}Jfg~StzCRi~+&sZ_!&V3fYe#YKA~(-q7{6gqLM%Q?+<=ZB3?{ya6RoL;R#hYH z{T!tDbE`$H1Giu$ZpWcDp}GTWs_@={vHFO*>e^v-dc9~ku)d>dZsTDX{o3q2Z#?aY z%}!nEb-gUDnoF;prB_7U`j`ClU&G-gLDSO?>igAU?Q0my5UvQud!MgXjtCA8+MZE8 z$c@I3a0rEXg9E=v7(UUqL^4-+0@UmEcAJHimJ$KP+7MtWKBhJqAFtZ$ro2nQfLm|Y zM`(w;1lpL`p%yJMTyD69Ah1bkTnppAO>&cJW$sD!cSdegO>5bpS6RE7j|scZS7pt` z=;Z6jA?I(jeiUe#KO}r;96O6TkFpn4XwH7xyZ-%Dk*&tC;47j6p+^u&W(&67hUGFW z>UsT1l%Ch~X!Rfs8GYg_ZQSW5i3;N$Vbz(ljMOis_kF4nWWj=lq$>JqpK&NlBKpP1 z{ox;nEaWPi6pYg_0w}+o%9DkD93m?_He7++FOgQG6p#F?KnJ>H{-2slrSy=8ZHMpm z-cL9P1=uo)EdnsXWJl zV=_EyQLkCvel_jro{p>u*UG9$WJg#BCx(aM5guBDc7cnD6}2){868lK5Y3g7Ae|hp zt3#MUZ(LOR#@DoA-{Ibr8fi}rH^KVSTs<1zBV)oITFW(NU!(MMT+c7AfL}pik=LjRAVwNRvKxBw27vlc=P@hLE7~^wr?lD-F0C%}Z}iR5oF3SH{rLHV z`1vioKOd3x^^sVj7@~VeM{me6kP8RnXs@Wd;qqQ+oI zO)WZl#40#{iFvKI>F_fs>y+iRophD0w!A-v_i)fk90%DDU=Q)@*G3Gq_x|+(r4K6a zfY^j!i8G}G5bN-ynxwz&)AE5XJF?Xu``GVa9njAU1Yhy{UiMp`_+uaXhv23{(RHuz z-6N2*1N*yHbJ4HA=|`*BMH?2`W$WMY>#zHxD;)h(6-wB5h7-R-xHZlK#}zL-6W(wz zCFnD!=?%wz-5LFaQ}?*@yx3Y5S>YfW^=0r8iJaru=OQ7iel=17h$o#nFFNiEPV_|- zHZj~qW<)&gocOHcX2S3K^|#=7S80oT0!zdlfnm1?{wX#D#GQd7{}vc^vv80I7x_N$ ze3Xi-dYFmF7}1}7!KJuuCSU+>iasE2$78l{pgqVQ>ii=x`-~ur7Uu>1X9Vq4!N|&> zSzq@}V2k)JP`}h4T!If1-v^HSDd1Z6_kr#o0(hQUlw;&sq1)dVN zzBCYPh^!5CFAcbA?Oz(Omjogw2aw~yLZ2f1qZqdXihxSh#24o|H;RiKM1s8-U5d+` zAjXufrT$+BZq}Fi*x8aPL8Qi%jGc1#z`@` zG)AG8^<^=6T1;ONlPhBsYFVy|S^Y5zwXB~NldEI;d9i4VHON|O+b7wTry#9^jojux znHArg;hg3F-VB~1;o8+*zdMYoQ7O&}OkEeSuMV`W45(B?>jK8rh=e&KAF$U3qGtpo zIv>YNu{MynBw$}0I0W-X2HG<&!1n63fq7R1%@N>&H8hm`J%_y;3dy_#p7%6s%O68AxO0RXS4pMhtxOkdy}542}|+0 zGj|)(Y>BU&y|Jzd;s#N)Ak0avKqcfg@xfT&cHUgT5isA()$Nt{F{-rS``uu@D@?V}4Z z6-56|7_X^Jz%zY^8Ck2{-{JK5YmF9tr1Oy4d{8Ln9B=I#s11**Xo_a#F_o>xCJ~(# zI?y-8N&6=ouL^yNab)nQz&=&U$kB+C_lIDMS!eAO8R3jE=7&Z&d&6C!#;T4?M6%oI zZcQYDP@(~Z5{<$8)I|#ARwFM^diSFIyg+*6E3&?bF-ITh>}8_H9uKGNLC!q$B%u$1 zGsPh1(CEm(@4_dG(DX=yGs)lVtP}pu`1zuFX#8>^ABB%$1V2CzN~ux}fpL5b@6T7B zHY2e_9UVIVe}`i2}gIM&)d)NZXB zdgut>@Zs$Z3AfEQ#wP4`E8(_>FpIF`DV)%#p`*J;HIMd>vPVZoog&8GD8@v`<-`tM zossdf6Anb34i-NaeSFo9?gY7`AB&E~o?!9&rk(7Gm6ME}tCAIy!&CfSFNkSVr`prn zrs~t|sTjPGGp5@!qSIH4nTeD=^ALQ6fpW&In%VQZ^I}f-F7}+nF3NF6pJVPKkSpdA zvHLE&*}F$~v*ym*<1w+9ii8;16CO-^T3F1z>^+^*+P|l}*Q7lo`_A3Rnz#3Ui!wXy z-={|?ml;hwv7IPwK|9j!SB88f*rQjOlB z0TYJus#dij)rhdM|HmpBwp-LBWu20~(!>70-bU5*8JKVsio=9~ktgNS*erP5f_Z-&D6|ZG(6zXuJ|M&-IIQ{MPfxj5G!t(H$zQ-NkYSuLNfHlC?ApRcB(On;$TZmH&??B#0t zMz#KGwJ&NQ^$bjTFpKC9`>P)Dqdp79#stel|3{-xxJP;N;fa14A+nXV^B`DH+R+xn zpjD|ujXsSKVVJs+a>#Nc5llbA;$ZP((Id6dDg--6{S`If+UUnxEjk)*Rh2N@JSH>; zOCgM~yAn6Q^nc*TSY^=SfVh{)y6S~&BE<1i3M(Heq{39fb(=uZb_O+^s)s*=SA*8MK^1&@Ut z6$yGvwxm-r5Z0tQw@U4lNTW2~3RS<2K?viWP~_bZUMIW@67PkM-x_j!?CpOTEV75A zgmhqz$I)gXc?%4CS_@{AAzU+VstGVX9$&J^_lqSs{s8T4b?kqHsy|i7{wx&P7Q*X< zZR*&chmQRc$8MohRL4FPrK>~p5Vz z{OcfIUNzCr`OMZXi42kUDI(@~k4G99v@`XqFyQUpEcII?x<^P}jb{MPnAc15N{mM8 z@G8*}s9Z;$8Pl#hE8K8)*gY$JmN+f!t_Vl*3cI9zG7eF_R$7mT-7R74Jft4us%m5k z3)+n6Cq=C>=2(nKN<=|M7ZPbK@o`Th6;_os8O|=FF!CjqMQU;p^XG8#4%fWh9oHYh zsbJt6nX%gK%Omy`5&blwuMoj^V7#+l3;16M_+JcoL(vt*Eur%NwBkXv4G-yxO=~26 zZkQu*ql!l(Rrf~Bdm?n)&buRahy7N>el4Q!u6Lm=hokie-4#Le0!+?pP>BXVj@UQ4 zcDLU_kZrhwHGBd08~dcN{bdB#YpgvXY&qXXru~4h^J?o4A@lo?g&l5igFhhOV;CMK z>g!`b8SPn2$v{hPhzwqgi=@7}d5JWu1E-eh78x7{kBcS$Vmo2BdQyDg!p1IcbqAF$ zN8NfCKa*+Rd@cJyx2d%E z;QL)PAvd}cvHf=5HufRcy~5z$>XkPf*)OT4>d>ol^hil*NPF(K>tXRq%Z4M7y z7gQQe(6E*Vkq-?&k8@@)unnn31MdU^w*>x5XM z<~mN5qcBK>CeawYnFP15I9#|ec7-15O#8ol`#FdEM+c7&j7GLRF%t(ls3H{XmOENi zm1nBQCzzF3p`$DDSKB`biovMt3(C~(@J7dJ}$N|3a3;*43b|9IPjUl zB$m#A3qcif>$=GI+ky87Vi{sjgINpq6gXen$fV8A(nh78@;y zxs_wRan+4p6NXa%ek#G|S- z_hV>Q4IRLjM2!}#G?0T0LqWb(Mx_J$5576FO5sMtG$h22K)+cUFT2y8bwg_V>u&g2 z*L=nez2Uln=CTvzed>ojj4B&U1DLN5G7gi2R8_PJwtp1zK5-NbZVf1pOoV5ij}zT2 zPArYhzK5|{oamLhc0sh!K>*vJ@vXbd53U2RcN32v3Zc(k_fyyThuiU~8?v3RT>q!8 z`42brwd?xgNQY)(|59zRJ5FMWYD6DSXEMh)OdoD#yrbQot2;)bPMkgv}o)0|`6-$L?)rT8G zli^5LKfj@GvO1+*Fe@uO(udj9&KSRg8_=h^JSGr9@aK{bC z@}K_)E3H@~@>2c!zu~u}J{hBK1LgnpKLA>#|I+9Fa;9)d!tmrF@azd45ZA`VMzz9k zpxLg{!|m)@egd8hj0X;Yw?GX%z46?@#CtkgErXDZ0nO4^q!t|#s(Bm3gXNoc!CZ`R zJd04y!GZMqpQGa-@Q~P9F2rpCho>-RPgDmW-5GD=`kvM?CK4x0jB0)<(9kM~AsgXQ zVW2T+%!M|j~_wPz7*&t<7>cFv)_q$W_QAqQK5~kN?=mV zWk&pB!x_PkU6vlXD)iB@h4fU6>$?oNsc6QtC_dDI?^iP+ao{(ka`nb(|A#*pwo?4f z+^e+Gvdrt5^Iozfi0w`Ccs=nV<|OlG<}7nZFX?Lyq`!ta&#djk$7>{cmO0CuXU;d1 zd^2-_S=*QP*IG#4!5nAKGAEh)nX>~(zrdVhj$=GP{S^l!)k<5=oE%8JjXBTUJFlds zaGWRpb6UmZb8*`4icLD1&7nqanq~CfV$>Sr5 z`ExtQ(jycP`l{vW&$$O3> z{T%Z;=InkXcNdYoz`U3_K9A%Zn2XHu-?RSyBwx-PpHEyYb06`{qqWjsZUJ$gSv!z; zJ9CjadkpC(e@F6l%vomp4#?M-9Y@^HoMqn5Twu;FCjG(*q`!$d{$Io$$B{hy7veR{1!nEfB+s2p z@`cRVCBy~hnj5B+oNvnYS`)D@opyBmErn2Ic~D{3Md+&q$WuEN3n< zZ(}Z;N%G#4Nk7?7Twu`om zUPJOCbNmwGnWvC`ZY}Y8=3<^Wb}Gq>*AVBJ^Vbq@W!A1E?paRy1?COR`Rhp@UqN#1 zM&jkn1?Fwc@ta8Ac^c^#Zzj%{`4(dPbdqOpC0@i_xSem)-E7Ip-(d!d$E-PF~FVwZ!YnTu1C)Lh^i^crkObg}BHZA3)r>mi3wYnd1XVzMZ+i z+>=2S~VAh5a$1f#$v5j~+b8a~CHs*W>aqnfMpC3hBV2+O=ZoQo3$+5&a<^uDU zvV0uLlUI;_fq5Nswv*)Ul_byZNW7R?n@C(N^G?JwuOj{2B;xhV+GJw;YCaxw4|8!U z$=5L_)5PvN($6#ZG8dWi%-U=|{xy7j<{swcE+k*Wtj!_bR@R?O+|=j#gj?>Zr=Y2;!VuitB5=9A$j3y;x)|4Yl*dcNnX63cp-E42I9?S zIdkiMq#wVDU7^OiENCwcOI($C*YyoR}O8}T;g_#MQ(8%bZgleoZKWNs~xys&}f z{mj~Z#M_y3_Y-FyAbqVsyotH+0CC6PNS^;2@tQI}OsqXf^5P@J3z_4ah&MAA9wqL4 zi1i;M&NJtqAhsXo&wG+M%UpblcmuQc46*wN=@*_QUd)_(jkw61f1P;d-$`G4lXyLI zmN~YGKl5=u9&fw-4B&s-?;k0ft>mh`osiTlf}O(_Ys zGZ)o_BK&2aE3LGwO}vR&^AmSG&vNGF%thvH%!MH7_rAdTA>snF7A9_ek>p92xSu&5 zCEm`Qts>68MEY7a@h0X1bH^5z*N}V-bG(jNdzs`#=3eG}J;~RXxq&$L3LmeTILBNZ zM7)(b+e+N?D(NSO5pQ7DMia+he#Kb|Ds#GLIS?kJKxHOLlYWu8 zpE=%5^6kvpF2vb)NWZ|msmyao-tjKUwI1R%%sFQ5J^noAh0OWgNPjc4wmWg>`=p;` z&NCPGB)R7w1?D1iY%A#(_9p#B%(;Dtx0L0~@efHqw=c<;mw7+pZDrn{ zxc4JIpA2zqOFka+I_BhYBzM0ex%Ov19&>@Y zz??gtHv*D>c;5^rbD zt|HEUOZ&&qAl|@S=qJ{`Ijn>b(QbBMPyCsz|^zvum#H!&yACwc4#k{6hB z%()9mzLi(ukN?ESV_wLdyo}_Vne&$ucm7QJ`74O?%tdBf6D5WG z)g;d{C)W{gDDySMaY6d=Yl)XL=a{!KYuAw+32IBn&oLL6wd+aVsQTx5>x1%-R>kg))Ch+*(iiS>}G`BJ*};Z9D1rHjsXjInSJ9-pZW)mh_X2q@QPA z&RqPC63?8#`uh>DXD%|wb|iUr z9?5ge`TdEvGUqbHJrha4$h?j@IiKY2P9!fdFJ{&bBzciJ$=td#>oez=^S>kgEzH@2 ziCZU;ex7*|bCG!ib9N!0&t%fi9zwjBIesYdX66EOJW2ZT!$`i6xxidtP98z>)-KXd z9!cEKoM+xrmLEm(-o{*H?w!TwdoIb>GZ$AA$I>Lv{gpV&9A87ci8*^daYr}l7ns*DYZsDSo6YBU z5%EIi_{GGVnUj|gx9&pv$+g7&WxkYnJ9F+b;_Mtg{^i7*n6p<9ckIgYtBBW>`D$XV zhvnB1FJ#U#Zz}T*BzJcs{p`)G&z!%7cr$a6xnp- z0&{T#$y?|0`QAg^&z!%Xcsq0P0pjeQq#u8fcoTE>A>xj`_;?Q!FJ?|YLcF;w-$dNG zH|ZCc^UU!_NsiDWrS?JmG2%tc$tQ?6F&CNLeMmq16v-De7oH|AGUqoF&)k>vb1xCE zXD%|^`?36Gk}qP8ze>D?Ir$oKavtlyPQ0$nZxFlt^ZC6+yqG!pE^(1rd!Kk_hV+vk z60a}wN5ruMNM87uILDm)jCgCAzaUO#Nx%3d@jB+**TmXF0hV&M{|yBHmh-|4iJofb{d)w9@aoq0E9fejv${2mz!1mNRPx@iyk7N!}ZdJCeu$OmgjD;^oYF=55S{g(UAip3nCX;yiPa**<~f z$wNur!(3$Ez??sfzH$wkz89ra_uJKh0MkE#G9Fuw-9%pM*3OiHO%o_`FN-E z=iSD~V=gkUXU^VE^4Ln!FEVGDwL3|^p)6;1SCM{v1Ic@tv&;qNJhOcU>)%ECiGZ&bX{iL6~hve&+bIjYAi_D#8vHrcJpJUE5Z(`Q&Be{Dv z>ofN<=a}=%1?H_~-bni=&!PR}1wKFK9J6~a$@9#Mn6(E;e+zStIe8xG7ns*E7n$wV zB-j2%`!8gUGjC$fF?alxkH@@*IsPE+znxioh&cPdSUVdysmAyJpSCp?VG%+Y2}{LB zv=WX=R)zJvQH-Z7g(57%sJ>axA>^?^l7uMimt>@}A{I#z24N8vp%VV@GuL%B_nh{8 zf93Cf^`6t`JbXU)eV@lUb9QE|%Pj^j7z3{ZuDadvD0}I@SI>(ee8t+73l*}K0M|4VcQgzXTGCiYuuhgzWes8`^pJIBE=vL!pdh$cjN!6K;L^r7RKNel_h|Hh*M0Bm{ zct&)5f=o|*Cb~v-T6L{z?{k^HT(z&dEG(|HeGemW4iozy1eS7>KdEARF}8us*5J+^55(7s*|c~RHszes*e9C^EasW zRkwOv`$KiP>ZIyw)fv?jReO!%w@`ITbrAf@UHX(xUnzR5=|4n!Q*`<&(N(7Z6kTun zFVSUB>->Lrtn>s5Q3%XIGr%~M^fI-xqDI;ncJ>XhoV>Wu0})$uK~ zJuj-i>ZIy~>M5#|sxzuns`=W!?0QeN)b^=Ps~)U6qdKM9+fwGQR~=XFy`=R~U8*{v zI-%NYCCiVt`BkTFe$|btld9u0w7#kN?da)kUwXzv^<;8Czbpx1ade ztB$KKo~!LqU7gB34suOR>@?K~0PpM9*E_zezr+TpJc$v(Uz}~)n#w%{9UxZs#B_q>ScQT0GU2mbz1d8)qYo* z?!P1Rr&Lc=?Hwr7i{I7hs;gC}RWG#Z2dUqCTEBxuPgI>&T|8f=Cw!S+tvaJRquM`2 zrkB4j^QTo$QSEh;>BS4wPj$8GjOvVPzq|TU7mf)rrGodV}hCx#)_IWd5Y;TGbiV@x?OTJ6z^Zs!phGP@NpC z`5(*tsUbSQ>a^;N>Wpgt6V1O+=AWqAyGV5Lr|PG=T6JcqOwXwHFBV;%k@+*Kr>OQX zk?E~Ilj#Z7)v7b9>s5P~YX0Xkf4W+9wd&;MqBE*9SBNhELgx3c6g@?C>MGH#mdJE3 zDLQF-xabDe@sXk{zLfbhs%urpN6GZ~SDJT|=o;0jTSYgj_Qr^={95LZ-z_?=I{AR; zk_OFtQ1ocksfR@`SDkoVbmAMC-+NMYo$AyS(WT$Y^yF00V^ybWMe|Kva((oo=ql4M ziLO_joFTewsm}kh=#=TS=%VjsdS#()y_$tUA3!rY}_Oe<|AkS?B*+^hDKugXrR4 zWP1D?(bcMx--^ztPOFYD)A_%X=~b$|rK0OqXH=K{D)Xm)km)Ja@gGGO{U+1XKZzc! zI{vfhTGh#4L@&4bRr|l|^2=oUMAeyJMHerZ>E7?6t5s)~i_WM{tPowkLgx2Zik_l6 zsd~BUjB0anU5C&+Z~Z<(GrQFN8+%*mqbRVVw2F7pbq_44|Q zPN`0*E@~#z)2gdf`=_X%>XhoT0`*I%pKAX!(fs&WHZQGuupLiHOc zdZKDyb))L^1v0&IJ()i>Sae!-W{BvLm`wLC6g^mV{36i{O%E0AuP^h*FBLsebz+og zzHeRnuSRsWYX3UX8Jm8C=<*F@{=|)IV08uqBbh%vTK!ae zw~21mLZ_=vs!rZ6(;HML#)z)iSo7}`U8_1ZR&;z5nV!5`bdBoFJ)#?J`n{sdHvG%_EIuEvANb)b)9POL785< zg-%yJR&_?T*HZHymienxr&QOg_QuQfvMpu)gzA*)wCbX*bowJQ|6tY038ELO&Zzdc z*8GVweWL2jDe9*>F-`rpRlk|)r#dlPbVjvb zC%SAqnctf$dbH|<>V-D_O_}bumid$OL{C(mQq3nf^^WLT)tULC<2%Uw z{sPf8s#B`#RVNn8^s*h*Uv*M-YLQHDP#ynJbVXd|_ZEw;Rh?2D-$|yYK9=bQ+0e-{&$tY5EJ%4W^ffu4t?Ce<`}w^jD(eyU28}L3EAk zRL9%Nbg!FCuU4JxDY{;D{4mjF?PdOy>d~tG za+$tdb^3786&*Ccm*`s6@!q22d&+dbkLViJseYm}s=fZA{k>%VxayQ@U$s{%(-Wu2 z{8g&cr;4suok@r;>!|fRO>|0iMs?BNGCh5|OdqV;J5%&R)rqr2`}?Th0MTPr`)7-8 zP@O(kbVVoiA0oO|b>>3R@qJ}_<|5HGs#DdX8&!Lki7wku=1-_js?J;`(;HO#SBtLb ztn(*DPgI>&U0kO1yGEv0s`f^SPODB_E4pNVnLnjEsX9?3(;HMLuNPg>MdtT!6kV%2 zbCc-!0W#gYS#&~m@>ZQ+wSSw=-&N~-yXYF#$vZ_is`l>|U3s9+uR5(de!omFIY_5J zBzm;zhea<}?L8toaj?vvR9&aqn;_FmeVLwmT=ZDg-V>s|Lv*_8D%Hs+WqQ5p%yXj4 zy6OD2qEo8<|B7C2`UTO6?lOPkMbUMt{pq4hd&qSECDCI|&k*e$D$_Hnt5m06k?HlO z=ZG%rDf4@;iB73bsV+K9rl($)>4Qzr6}`~(o1*=4oqwL_iK>(HMHe5gd5c6>tM)$; zol%|mQgnGQnLn+1wCea*GJT=yr0RHYnLnetN_F}NnZI7Ow{dy)cwW{==8tbGI;Gkx z7F~3NPTx%QVAYAuMK4sH+CsE{q}F$5(GyMYBD(k}nV#HDbhYY?>a^-~iA--*A@e78 z7oAj{QC(-#_mJuFqhT1=Ab~3$QwYR6}vSVca_+Fw@s#B$+i;k7)sr^M)sZMke zU9Z~jD!S}AnLl};=%i}zAkhm|ALEPmiv8?*2wsZyf5AJxBG?GTEjuB$4THAX|9al! z6MAL;mp)pCI(m&kg-*Bcr)|X?meYa%9|YZ?IcSLme^MU&S#fJBQgNR6C$A3W4A0k= zW8Zt*+uRuLh0npz9h{uP;MQkwJ1n?`GDYiYLtDJCUUKaFb1!5<(1xHC(>VcKXeSlQ z=vXkw%yerY6PkLRQX&5KeZ2o+rl9YG5?p!(*d>tb-?*0kL)G8D-}i2Ot^b2lb8xx| z4(a@}5(^HYwj1`Sl=}T&>$$!{x2M*A*5^51E$4Xr5^yH)&q}NcagmN#*Btvk;^6B( ztiLYD>q8Eza5`D;coTcP!=wDs0n}j zKIGz{B3d3{zJSLdD4WS3`)c2p+=}^2bo^X4)_{4s(Yo{7_bKn;_%C3-fDd*4%^iPl zCqJt?F@LZh2gSDE8r`tm`QtkOq0Dc&cQaqWeND{o>-_ztKFPrU3FZrUTIb&)7^x-E z#?St5AoItw|MR>PSYZKub;arY+5M@0Ew}gi$IJGbY~yELZ^YlW!!z+62A{%lgPxh8Js(egAfFyVi1oZ+YJg zwgWfk0Q6yS6h!5;jmp`@&ql{s;g)kEKBvHG5Nrq5o^#McAt+HfGBx*V?Xm9*->Qk6 zEC0nD`yTS(oM7$w5B_7}A#nTcCG_j?4n(!5ETZ3%yZPBh2A4yYvk0H1@Ee44ir447 z2vIqGB693|(}Qz^omb=d41$s1<}~L(zbR}F@l#~Gnxezx0y*Edy(52nOX_(&)lS+o z&S}qH`0Ne)0-NFL?O=cObUlvzU*`*3|MvavPdoly@i`c}h5UP>*Y-GL{`P(GuR8vR z3~mX=m~Dl73gc=CRo z&RS2=ew&t%@s?x12lAc1mk4Gq!KWj10^2XQ;=g6+?hq7P-!`=05!r}qRx7=j_gFXq zT%S|W=Ri)_4*}j_=Di5UfZOg_>hT)GsOzKqLhI4qhuZI&^mlST!RIIV z1KgZ;8`B@KKSbp$jL5OyOSzvM+x{!?83>nvoAWUGF_;RLlhXS^{#&vhXGLuP_B$-| zo&KMJ&upjz>wmhu;BEAW5ESco8`|%;{EknF%;J5Lc=enr3Fw`%V)^A@2%GIk(|60}40I&sm861b%~6{Uv9K4&&PYHN9m$Sgz&R@7OeuW2F}>{Af51-2OiW zeGUZ0`rU^1`#1c;-0FTA%)D2^4dC|6d+0^*1uWJ3No6PJ_kYVf^R?AC?fcpMc1}(s zKHG9rqBG>>pg)C17^?3J#_KR^!b?f$zMq^|&Fj8MFpBCxIRWm%}ve z_dcQRsUnnP$K^~9$rLogP=s6XJl&b)pG3jg@!x*HXg6}umarn zT*8fz;qU}B4wCgSSns>0bbFfEE`NI})a}-Ow`dPL2vU^|c|*M!Yzt0K;cn=?VSljg z$cEN}YV9}s{i8$hwf(yr%k_dI!R@C@(8D1pg}NS!L+eAP=3Z_8w%=7ck{mlv-h|f} zxC`8z$I#OtD4inC$1*kdYUeNey{6NgoR{#L1+Rgdvk1Keg0ikT_B&9)dlUX;%lCM# zfcBgmo%Iphacj?O2R$IA$E)<|`TOCUo$}YaotNzQrRoT={pC7*M#Jskw&&i!AA+*3 z+p+y_)rU^MJ%ZQgusJKtZBH#1a}8ON?E$Wh@VgwY&-aaeg#H?S18;!TyYa02^-&i(uGn^L zzt^=rIkr9ux8pM$XbEmV?T+pQ2SC*NXbk1pam9WItP?p_df;;y^aAHTO2Nr!+rMpS zzZ=$_<*lnvVZL+Va&YT84*fVh2e!NoEqmcZ`Tb+tr~Mw;2~N&y_gkDEfT+=J7lW+d- z{V8#-pPlapr#(O8wE|Xwn^U+W_k$rQQSFhbxmRmXT5}#D$Ikm(;k7-)!ObZ_?*l?5!c?D*rI z-iub{O3B0dx=`C;zkj&hM!9*<-HGdLs0Qn=;H}CO^mGVHy>35m>UQA0FYDiaKd}RT zwqLx*GGD;=;MRM+He63a8?gN%adv(^TiWqKVpkuZ?ROcEA;;G99{B7DcYvF7*Uqx= zy$qw)L*h=Uzs7h;ZJ+(#<8*TD{M)Uq=N$^Yz|A=o9hB1I5`*L za|v7lZq8_QP;O@!l~WgyW4}+?==9rod|rZ&z|Glj7tRZC2KahDD-E63W`*t_m1@7) z?_O@hy$oAFL3^&os|MU0YtJOcN8LB{N91o8wtnpQH2aWa+uO7F%!YZPoE7NxcICPW z(%Ozj-B0}YWc`;!Y;X2Eo&CtM?VvS2J3zd5(r;0E0wVhv*!~LL&-pk}zN#XM(yb4ZE;VSLggka{eU8*87$CjD%~!ZOY$_o;dx zLB_86x_Z59&c@v5D$>~=!)ppm1vlq4^t%w0DZ0PeP{ywLn$+tcf0Un{xV@9J2(Ju$ z0dCH(LB{UlW&Splv1`8C_LbJ04&+$Bt&i6xusOInyP`WnP@;}!GBx*Fq3upw>t{zE zLXK^3Wq2J7-NDT{7JVuNC7hGg>uH&qdmVbbY}fWXxW_r|8GzS$Fc{pNtI*d$P}X%j zu;14`$7#=Pcs&S@fSdCodJY7ohu(J!e~utibFUTJ9{b(i%bfPi!)qZd1~;bxy$ph~ zO5YdMYyZpGHD7JJw%-H3!D-Lmcx|!=+X1*aCFp%1DC^oD`<>wj$SD#FuM1wm`Z*+& z6Re-UniF5kezWb`e!qAcIaY%E+zI^7$j|wo_qpwNkKbZh+dl@f{3UQDxW})t=<)D4 zM4eAYN1RXW_mqpd-)#Ld4WE}`4!Ajs&`aPu2=5=(*4j{x^^5&Zb87uu&N6)dfWN?9 z&%yn|_1lSKRF37@&~ohepLcWGvk6{ppdGmFsX>o{N1%@$_rv$6D~9y4i0sgE?02O< za@zAGKF>lexb2yVo(Dl$*Y?=&RqyMxXFgsTSORX&=IuRi2MCI_=l|N@tv&WT*oQhf zyW`afI)j@N+^0NBbJn#z_WRnEPR>bqoeSrOa)Rrzdo*X5o-dc#c~hFX#;di*ez*Hv za^gDI6L{6ZB5=2Z{X1|zfTN+So{!5z=jBXjySC2{?DxR$BFFaAQ}8(l&I7mKu0~%E zL0Q}NW5-GRo$*Od&h2=mU_7`v)6uWNKgqG*FAqL{vg1KLUZ24daC4TSS3pqgyl+Dp zyXLE{ANyVOC)j_i-~PgDy*S{*)TEI&yN3QlU%<%z`V~w!Cv{>?e3*K!v-gSy{{h} zdjD1TSN`#9b-z3yIqiAlZr4Q*wAdWZqE!IC++&!ey_eKImOwQ zaea@^POuBO>$yMr90-c_hYe-yny)FnZq20p?8MWY_6))64p;55lxI11dHv(Q5zC~KQz?MZ7+ z@Y%9$Z`F8>gd4%_w_5Zpm(bfI-q~yHpwC7lS`auHRej9|YhM=VN{&u}?4{^OOCR1~-)}FNH zd_azstMM8I*MXB$a69?|2#RfIc0WD-l%E~{t5e@cnD+(v3EY0Uvop^W!*m#|_uJz7 zxm4DKmqg3_{ln^;d0KLI+bnn9{S}{PW!zT*H>W5180ZVb^!lqlw0{)dmA{_tyqkGO za*id(_K)-N84`GboAUrVC=W7>+HP+Q?T5CW6I1={vO~yemHi(c_&f)5!Ohuif8L+K zp^(z+l<@NbHNWJy$NDY(tmJ$~j+J5fjDYLG$tj$Gei~}QwpSb4vMFtk|D2y4^}AF5 zmsze3>cR1iwd=yQ9`u0p8B)(i9h$EnS|3(_uU2yQ<{1O)r<3p*05^l1v%>+Nw+HM8 zgY>za8$-`)Of1UZzI@#-5-&*3DNfD>_>6>!;O2Dc%CmJ)32il}I&@vPYQOv(Yfoyr zu=barxX#pgj-1#Zq!2lHGd zTn_bmzN!eFw<<1cIw$?AEWBS%e5vW}*q_5fl-cCi ze)$Tc7Q&W?-O^Ke;rwp}QP=1ko( zJBJs$2Oaz@%ruy+`(;&Vdn*l{Pwc$q&y$=UD!af^59w+tnKmjbC$H;ry6#3e!tmvoqSK)Gr-B& z<1lg{_-X|=NBf<&&Kpk7#rRwY{{^=_J0H$9IUE2{Ih8v#os<4Ra=vtO&co+2miR_Fd?-18IXS`hwk5NdfSa>6+uPuX?Je<<d_~Es>lvot$9(tiY>9MSjlOte^Q2>nEi-!)%*@>NE+jZh6$@$#Lc>@0#u-%FIIbABb4uMJtub;TC zpZX#B?XjHXuafhJlQSEici?>}pl(bGO6+^|FA$XQb}eJqe6^hTZ+>=S@m9I#)mGsZ z>&r7u;PzYa9C#_?x^M99|K2AbN6QbFX%Nkkp(@otzi(nhCSP&3OmC z0D=a<9RDn7Uq*8# zJ2|EJbcO@K-3|^%9|u8+%8{wLSIbHM~ z)OyU>O&>?S=Dhi!Y}YEc9XyZE8}Kc-IhUTwXKZi-MCAP+a>VJV#|2ST|K^JiAe+v2>7!2lb!_^6Csef91Yw)%0bOg)Y4iAIl8(V>1 z?>w#t!TfA!zV)H~!9Jf!>?-x2PY#=Ew(NvYN9YG`&U@%jVJVou4K1f^!`}Aa>~Oh0 zx8m(CIh$^qTOZq;Pd`B^xH*@ghr=yk{x&r8R=WL|w)K(OLvq?XIb-p86dnh6y}ycn z3xZ<)Hk7ezzFJPQo#Y(pQbbPO8 zxm#fjIP0Szg?=1@V*8&B6Y3NE?UR*fn0GoX2CLs@oX%grgnKUV9W?6tTzHMtC#9d` z4*Oelrn}Vd7kuMtywRn6<^`vM`7$ZCRW;ir90Mu+{)NJ;)#r0LUJt9+cB@xfKVR~D zNzU=x>jVZ@<8wXS1a3dvjUEp{vG&_Ar9OilpWyExpJM)JLO#LsdDA0&GU{^!K6ZS6 zm3iNV1^GU)4KL%E13@X)`#bmPb+(LM^VQB*ULR@qBTjvH#%mAg0B*YvK=*{8SbJ@l zP@idz&k@XfJoE+E=K}N<(3FpVgw$uY<1>PJZ-%?US>J`vqhEzL!0KT`ap(QC9fyt- z->>j(r4tvh+%o8Wd7f|Vwkx>T0Iz}VKh<`9|E_FDEfe|Y|6+X(A#t4KjNHL$!2UUm zdzLT|-1^^*egvKd%L!i}S84rI$BXX^j_)j%n-8nN^*!%O_I)U`{27iFnx6%4Vn>$SFo9HXPf8lG}Z^2cZAK^l9d}HaWIsd{+ zu=}5tr{?dcW#{Dgw{5?P(KuN zocb0%kDdvygDr1EPs?cShxi#%zj2OlJ#b~O z>4(gKL$XQFIlj9L=lLZ#0^Irrp9|i{xTj(D^KGHOTdVp?`a4-AzB|Tq>uny(eF96t z@r{*_VE=;i!Rp&OwB82mby>Euyx4m421?GJPR=lVZiMHdIrDOO3`(rcNUkZN8(2Tv zP-bC#ho-lW)F8<@DQ4gX0_9ZWPb|K?jJsZW$Zu|2n;n ziVu;Tu@*u_j=|?7I3Jvx!spRJd6l8n+lDfQ`&94fdG*s2vWAl$+WA*t;?^0<`2Xd?|$7iD& zj*Z~t6dsN459fpJU+K{OtXgf4UoE~p@GVi}OIYq2r~$_}HW57yUWA1a*P(BQ`pK?C zy~`x$B&Yr}@p%_kfRj^r#C4qeVGu;^PbF<-zl~omzK`N-@2Boyxd|{E9N*Yc*Ynu| zoCkKFFZ|roGCiJIAKUw!H}bhQoCJ1%I{dt6 zrCs-HwX9z<*GPR&cItaEKEvP^aB>Q#qG!Ntu>IDC*4i`mzF1-2ia zw5><~Ka#W5>HjuUM(l1InCSVu7e-Ks}^Q~+n%FtWj}-Sp}tDm z5f6Q@T_$v#Nb37J|0ZeAcH|UmH7>{J2ABkH&MUWZe+-s@ZMWgiRhETvtUdm%l2h*F zG{2qm1GEJv_yydYoA2a)20RW??MZ%}-*48Q)IE~3f*jjV=ioCB>cQ=|Pte~$P;CFSp^RPg z)%Mf)y^^#3F1h=Djd&H^#dRaN?fD%21N;TEBL1GBWm$f|#m|!VrSI4ELrz?)Q$CjW zxo{r1Idjnq;1jU(hn)wlCH>yb@3;B7y(Gp-PSVLKyqkN)&=K66+tGK!II#Y*q2<)> zmERuw950!YoU!CsS%}Z)@D(`gry%$~p@Ms4u6o_iJ-yH1KPWy=J3bpR?YsI%mA(>`9LG+fVrX z2^-#$1JscAa=aavmYa$~JhFz+T|A zr|?j81)K=B|Jl%%ZLR0QjQY-Yd{1Gy)8SljeaE1KGM1tF*-)l_8L z!vvOl5?%+_cNKd5ar6zCpAF5oMS~un)pu`vZU64Ta-HEgaC~F`LEj2@gZbIee8;M< z>DAlm6si9}r~bA0%!CiY$tm0~#W@I$1oNMw*R^T=e0{#22U1hT_bSJC0LxtncYy2r zG5Q-=1@)ohv8QEp3pwtmr-|=f__oq%yFAGIW#|HqZ)_xbG>n6&<3ykL^7pG!&5u8K zNY;HNIYpW?6`vPj4!AkrqJM+GA?kXpCbVB!|9j6Ll68;op3B+rA#_UwnxVbB}goa@kc!2Pg#KeYWujl0g*eo}46@$@T_vvs>%zt!UN8oU7o z%&*rsvG36?%Sp|YoNnaAb#lR@JnsVK;I=3D-l#^#HJccnGcD8}>$lWw z$+?XjJ09$c&)%>fxa}E?9tJ^)I{(Sk+^ZcAGIJznDmg_uc@$pvK?>ZQ;6CYm#s$Up z(^9*>)a_cP=3Z?-jn_#|@SP6Uo(x_~p%L7ED|?J`XuYK=C;JuRN3LfVfB5-{#MUQ|x zATY{MOU~JQ=GrshX|_?g0o?YykNymng7wo9`&>_dSD^hXO}8iYvE&5b z#Zau3SpOOBWy99s?hi+yPlljG^_xu1z1nfn`&4pLPJ7PA>wFjjZq5kw%@CBeJ^tGI zNodaVPJ8aa>p^$~+?NpLKYaZn zQ**E5^*%!KbIECN`fWH~x51s@<^*Sn?*9CAPxH(s$uY;hh?RIV3TT*jQ zXd-9yznGKJoT21cxexy*U@sUe=#Tijr7Y) zPQUz&|DRCwTz-G=itY$y5bhW0E$%Vvc{Q!R^-le}v)qwz3^@HAJ0E>H1Z7?ODfz9` zKjYN@8oX|T3E*xoU!Z@4zaT1Sik@ea--+*jrMct8_RsU42MzW*Nh8Fxc}qdi%%6kc7FSTc~=GV*XH@ex}wV= zDE50pDLY^5b8Rv;_iE>Z%ny=th0`y`;Z+I!!0ng2G~-@|QT@{X{ie^?$sZ->RwpNo z&n&0|H^=+0)U%LbRL=N_oOq+;jCXQ&$EPD43vSLI==ERVGaHD?>H2Nc?aBNiIZMeY z)^6>HPd69@Zceiod7lY8K)t^2YiaMBb=lSn@^ftc#D9~V^*ZK0Uns|?FWd@l&Lz{i zeump&n!bN24?T}pe{lYFTfN=~NUW5coylpXby|eaH}E~UIl?}<+RPi47t;XH8m zyVzyukq{KCzYS&Vny;n0-cp(~l$^NEb^~5_z}?`~KlUm5OZX1V--ebjCbZsHzfb;C z+HAXA?mzr3IZu*f?>|Q3b35D%ZcgyL@@tH% zhp6>2D74<~dV@V9Ta|jJJqz*q5w?9fKPR2$xja}3_WVhU(DNsiSLAQUwtZ#Rlbq}K z&h3|1y~48u@HDvX=`fS$zu|DG*Z!Co+F$BI`@ij%i6Y5KIXMIIxezXa0$RHzP-4M( zHp#f4*m|*{j9v59a=Z*63Z%)px`0Nc`pg9KCPoJT`hm~Od zHng1hCi&~#a?&ljWoPNUPj0>MH;eCvg+rmh$qD|x?KH*(#r$n3W7mAO^^w?Ea*lO! zs_+Wd`$eIgt2^+X_aEkXn@G+DPR?z3O@KGS?YCoRbH5aZK;kr652N+@4{J&L{qy_H z+T#~X&OJ`fWPDzL1>oi!HivU4oCQ%i^;_rX*nNTc=8`jooD!|no%l?Eh2Z8K^BT{- z!6lH^??+17?-1y+lUwEI*ysLe@o5A5fSc0~T?LndJvSEqe$ug_{m0f%T62CQ$M(}2e8#|k!OdC!bL%e^7+2grJe>vL=wy*@4s zzNpD5w!eFOOU?^U&O7*g49mdH3I3jC*Z1f*u>Hb@W_{du`P)IIotHIdnUm8SpHty% zaC1IHe+9onRKGQZwzt*o*;m@L>3+HWXXp8RFEyMBZch96xfcNy5S7znRDQqNc97{T zIb+F*YvVt_=QH>c+?*~8STE2MqH^MQ=l7dEzwYlZIiHYIq&cVIGXyRNHz&9*zlU)X zASx#ralM@CA~}ETm+QBu@Oc@&1~=!@5BMAd9t7Ke#_E3P>wWa;rA_x+;vmU6pmQ$g zb9}ymrBFZ{x0H6qg5ObG$+)1Tbvv^AXfn2m*R!M_Gn&(?b1tX(Lhi@HcHp+>Ky)`a z3~YP0p(WJl@!7O(2Z@8FJ*SXk@5?LkIU5Fo+n!PA+aM@W>qn;MUTwRM`;v2+lXEv- zkHFL5wxdA@XxJz`Jc5TrT!N=?brsN zcCZ(??FgQeJdttzA!<9D9?_0;xwPZ9Cfacpe*eGi$f*BQPCJI+I|{Cc0;iwmqcaec zsCLNI+^emRcyDRP+fF-v!0Tsd^>KcGJ%bL)a}1+$`h||qwqCp=B%`9inoUMD$xyb0(2v`{j}N z91oS?=2W3Cf?*Jqvpkez+d)Qi8pyHpzzBS9hTEZluCo1qD*9yzik)X{C}Y=rwc}>$ zXz90=PJ8Cy^$siow>>jx@OO;+8O+~?me68o{&ryP@s5$4O}pg!Z3RAs8P1{L<^=aQ zcVOHuVE#7rw8SHF5}MPNoKl^)JwAs+CAc}ip$k6aek9oUqNhXWn}wnCbg{mlPaiMs z>Eq;d#HSOKK{GG6etMzXuI1mGl-l!VCy0MP{H+{?&k0ZkPCE*N?fF{9-3-=GHne3+ zCdztAs_#(8cO1)2fLd^Uw_)K$j9UWcXG8O?R^N>J);PYuvfQ6g@Oi#(@IGb_#_bK} zXG8Ptr0X|*qVz)=U)v83WVs{YRB-AW8;!mXCV=g4_IGCq{eI9ot*_i9nmajv zqBmH={siW4L(5qfx*uhq7bN>j&arNL@YxskhXN-j_+FbHj0=kS+fc@?`D*R)PLZ5* zoc8p_>m)c8-1dw^KMqsD{B39nEk4L!KmD!}oza}&d*NH@%pc@2gaQp2L^bru0b^V@EKOs4@oSftE8UO>qZBGh4 z0VW5WApH?Ou2w~C*Zyge^OuwJGCm97BXDz?e?`B+wh)ywHguh3+d<-V$=SVYZvE_n z&wg+KxH&(g|AKA4W*^Y^rQ!Qknb3U-PuEZ4Y{}_Mjvc>x<8ve&18zr@2A$D)F8?Ek(?r_sy6|j z=O7Jk&R*ZLZ9sR3>bFuazu)ZoCv%?UOgk`_GYFqcAqj3y&~Gm@ZZ1USRL<0ZT}m{a@8;l+M9 zw)M2_$R8~I(bwsZJMnr5CWG7W!F|s<#=R3vi#R^kMf7`oh~y-loDcE&5`F|XC-{4% zqNTh?gs7axh@6z>JnH1M#%DKZ2X4Owe|vE-ASsP?p~$=@$*{bV%fTcZkJW7t8KW5@H z4?Y7oCwQ)~Wh38n15y1oJ>t0TT`oB@$+1$3&jH{=0VC}=coh0%2#Re_HcYF}0;gXF zFz*n!1RS4Oa9`n?2p@4@^VPPad{&pTF_3{+-Ia z_3(baPptn>-0y{;*mF0lewO_wrQa_jQ**Dj-zKk?oK5}Qc0UZSYvBfP`(+$@5(H&! zx69UgocEHFQ{v~|Pd$y-ba(~aoOjS4Lr|hV50|OA*YTCo-n8cUey%-B@cJY0`#C?S z4SG)qiv7LB|Mfk1_Pf)W;nJS|es=Nf%RzV@3CDudo`NUQFF;Uid$eKZI`O&O&rZ(1 z%wgWe@EJHh&DZ;dzm12W*#2tIS^K)4lQ)RpU4C}9?928n(*gDd*Y70s00@ftt3Te}p)K7{k6ZDZ#kbM%eV^rihTp-df5D1D{7uv{aj^cd<6(NV__R30 z68L*T<~<%x0k?iZzt%ABb}%37*NmTg6wut}|=?0LwiBkAYjispwh=inZ5< ziQB~I7^i+OG4E`c3vT@y&_BR3u;pzi?)=@4_Fv+5@jVS+I}ZKLa-06jy*+SzV^!#( zFbvGkhUPmmbUv};kbkG-3@69VzoYTF2gZTZ53wiEQz0l(=M$NldtJTXYR*`vpI*Rg zF1!s+PV+5)<2nO^Qm@-t3w_Qot^0?6x70iM8UpK|QkLlq-NEgj6Vd(PG_ZcLp`>t+ zGjtu7)aTRFniKq4w)M{-e6EI(;M6z@U3oj5Ucy=6Jx1Cq0loOrgTTx;QT4U7V}J>$_+ASi3w9y=doH0Nh> zZ2i25*CJR2ZhOvH&Uq9r23s#Slyv^yG<09Zw%_D~(w;&YWM`kTF@Fz;*S+Ah=YRhG zd|G{i$BL}J53~FvcrxE7R*QZKg0i;zfz{W4NGiIQlQRpidUzk4`o?}j{|^5oC-t!8 zbaQh4#;e5&KIZ_p|4&5shqEE7J@HrNJTJ9z{w{UA_?cFN9hE&gNSad6sGxDp*($^Hs<9%!%EDds#<+mm`!>aTC3 zvXeWo+`e!qxV~qi&xMP?d@Dk}%XPo=CyMWXoPHV3a>04wdWLSl1m}f^7#EbN{+Fq_ zSL+x5G06!IueRMz!s{7$5uEzRK1P254Pe(@;rohXBhC}?Ns=?c$!WyrclZMesG69E%{et&60hBrh z@$CP&#?zeL|Am~Sp0|>kvxuCMP|m*pLXLf&;Z2tIe9NFTlyk_xkYmpaCpG5}a>_zE zNBj#p_WfPn6Vjd*-966_<@Eg*avJsb0g{@tJvrr}oU{IgoI&>a>XXu*J;|~CH28hC zA!J+}$_aj-?MlW4#g30Ql(B2R+Vx68a}FfO%5c1{gPZbm3WD!3x<4W(qdvzt^&QW= zQ=vBBC;Ps=KElW95FT26Q%_013~+Kj!0R*kDwN}`;#h;a&?R(^oUzg%D9Igj9C-}SP z2N^dRqOPwdhmOY;`gda)&FM}~u~up-J~Ln@6gcg98~q^!WsT#pj9%llLXTgG=cGL+ zIys-=)d1gvn^T2Yp*gl*Y`8{%j#zy>4i5N~K~3a%fBkzoDa{$)L{5u;F~_f!_T1Y< zPOE=0C!;yfHj&fzU(8AVSK9Md6FH^-Vov-8$!TaJr|Z9%lh&NSn#d{t7jqIXN_)0E zG`FAH{&U>FnBz^CoV}XJN&JgBDb4BCM9!dpF~@&N+H)E?R;uy88b;*j6a?S1dlTb= zV#gaBrqpMs<1>bN?}c$8pU2SCpeY}3hSaA9A3J})$h@;*E)=kkoj)4Uzd=ye_IPX8 zziG`G=hXKPyf*lo&ndt;e-sW!-wbzxwbzD{&U7y=(d7+MYS$yC=T3eVoj4L*R07>KmJhu7mf%p6@tQ`^9@l`lUA1FSdQe zgEuS`->LtX`1}L~1$jAz-O)$E$zc5we!n_a>z{gEd@CK_;C=i+mc0N9$kgrQf8IyQ zsLusW_*}XUKJmFypAnAF)hvGxJPOvITk%Mz*Swh*gRQ~V(-`Z|Y;SSBV(olGd>_Nt z-e2y{avfnmaN3!@uilGsL9y>2tJlv}lJoMf|1`$4_kD>sC1;LP|D*9b2~Nq+X&zjM zpQ|~x-`V$0CNw9be&66{*Ly=)<~n!?tUstnY`?;0UN<-brs(rS_Wf*D&pxyA@8{Tc zSn_SDciCaNoJ;Ykf!D!u==a#qv1Z<1&}#i=p0D4do(f$jC$7xzC(FrvAUS6`IZNyLOw>iMZt&tLIc z75HtKm(#ojdNT-$^?RMZ4@=j}_MK9{pB=xgSSC2XZlCX05S(Azsh`!?&R6lzq+T19 z=eC1R%zF@Y&-aNPjXn{AV(Y0!k54JBS9YTFV(rgp&JN^Q>4(=@a4tCgTrdoMEd-@r z*Ry?}c=B_pZ)eA6H1m#w@!4T3Qm%m`%?_i^ia{DQZ#*RZL zU=Ucltsk@IybM~Je|)p!a%zd>TUVT6JN2!17!*lz?*2T@doncRK z>K_|`z7R%2)OK2YPkw*f=d!6r$=Qb-D`W7v7ajp8r|@O;TzCh<{cXz@T_-v5pTxK8 zjy8pRP%QTudTN^s7x5W^Pf>ObzFUWR$HDk~ zpV)MC9W?2q%Z3N5_s?aLbBB{tkJktA5jgdY1<%KR{||E#nlphMI}R+v>rZI5d4B(I ziH^f=VB4i#KYRK+JF7y+wF*7IWHhHv`~N!{uqQqT!_i>td2@cEyB?i^Z=qh7Z>`t= zNqyfsbfIjQjrRLq%cZ~GSO1`2H`t92w~x*Y_?)~gMD^=WW?g6(8)=HD;m z6Kp4bgilg^es_EhW8R~nKUjOILg7{D>){Ttde|^qNnUF7_?lQD?Hsy;P2sawmU|qY z0=J#dqo+eq%+H1?_1TzijA!TI`7!352Oon|zgY11+grD6=Isbk&#Uzb9gl|T_hn>O zN_|_CW82rjne-=Kox!PZ_IsiZVO&sb`?Bj)PuIIvb@jmB7bJrZuqf?iv&jCx9IvC` z*!-M={^%+QiuH#L)9TaB@wtF`uY||J>6gNdw&Xez+JZeVnAG0`%9``CT(4Wwe@Xp< z$HMHmaWu=F3O9k{8{2fNX5N;t8_d#vd^7aDBO||eDoD=i<3>UEZ1f-}CwSj~9A1^+ z_V@qK=l8zm1aGITJ(iRB7ju%DbBoj5D*P{ii}G^{u0W51pxFAfVOo7AI6gNq?-;lb zoc=GIh<*Z|0bAaNS#w^BFIJ=G(%&yN;rriz;M-Pxef3@B_|C>}F1!WKdMucaUIan0 zdfG6dKHuPD>**8b{Q)-GIC+?-YD^;E&F`4cnjhet7K!ZvRhU{Jx9}iuJnRb2|`cG)NP40M7 z68c@&CHnV4@eQPYPdmN`vE1Qs1h~GZqR)jPVD++Lw$i+m>2{Y?U-xn6YL*)T*Mi&b zb7DM~#kioDpA9qW^ELIek7*)wd_zk(2uf5=cB1oQIT_74+sT=S*CO~6-1c16n)fttFGS@mj%v^5(w@tm z{HV)-V1RQr{<>9P9rd zLplFH{h!vH*PNU`@sDlK`)hFfe;0H|=mORryS|F+eZW3;UektE==PLqDeYP8^nW*e z4u>Pa?f=xp{QU^yf@1rzy^r^{6rbN6pEH?v5DWvSzJ)3DWOx?V@X`8B)Z=$XeK$TL zw_nX-xi{cFaC~FI?;U>0xF5j!!Ti2K$pa0s)%JMgxXoas*ed*X8h90Tt5aX$JY2#WQG-8W3B z&zp`;y>%jF1zHe}<`q=uj?JU(=>a*DKd5L+0_XD#+KJTJGRv)X64KwQVz2mcl zdB1}n!L3iTo!IXnDB=3}!2@ZOKk%{jurc#)4?V$M5ASWp-xM*pDA$Tu`juHuTl!c*kc7^S%JDf>YnZU(hRp zal1sX*LppkrFN70UF!I5%5vMn4&eF*pEvr9>kU>f8(RO?=y4`qBEHu-zQ?fKNiYyx z->1%f24J&pXzk` zN$e%QdpW+tS?)Tx6nJ`|#STRkc3G2KyoM>@XSvs@h7LU0ta`_y}& zt=%@v=<;{6yuH8Zz(po{2beklbt2!N2fn_?;!7E${4!G>EJrL7vq9r{b56| zOnm-ye2!+`{%|@t{Ze>0`Vn{vqSjZHt}kzY@!hN<*AHoydjmcI$2a@CFn=;Gwr6gC z4&V1EkJz8nnzJi8RyMSAHKG|T+ed1!Cm0=Z)_fV z5d)k6k8TB26uWjG+SgsM8?UUylt3%I+FQDG8 zFHXv@Z=Zsux9>zRsekjMbARWtb0_WvKzDHJ9~*_f4N`EN`iK9{y2nTPx%Pc7%8- z4?6X&#b*wz0w<@is0;5Ip*z&-cG?*F-R`1F?eF8o_ceU&xG;+4?t!Pk@r@N6z_|_L zVE5IQh0gOWXXkI1cK*Er9 zu7VrD&AD?3zcInMg~Inl`pezz@y*Aj5H)9mlIEn{3z>^d@h-m&e>hSnbMWXU=WId?fZ$KrDm3;;JLiM|2GKva9Cgzn#1PNJW*XQq=g z4xh(iI=DG|eam;l9mHqF5Y?XQ;)wOrUvd^WIVa$A3S0ti&Q$cvFc+fEtM`TOe_MN! zr$|l%Iaa>I=Vw?6PEKKPU#`W$&ActZj)yk1WoK!>Wz=`0V{_Z_wk)?RbOOgWcGRsr zf6ur_A!`3$9I?Onr%C;{Bgc+2Gw^v0-T-$y4!*bH3&sV->TN@-e|Tv7e_C@&oSdb2 zErUP7ZBK8XXAlH+e$eXAYc#Vof3egoIHBI!oF;#_>Id<@&*C;IzB>P3YSpDCV2c`;5ttWPeJWEq+fre%6n7=llK7 zeoU#)TTS>pybeAY_4&c^d4lDq!E|u@ZP6Y)SIM{!z}ABet>2dF_LHcRcJ6juZa@2k z<$i^g;PhK8-i`eaf?~%bd;Z4%Kb{XwoFh30lVhblUY+4!aO>Z2CEwT1xB*bF*9mWi zu4lbVWWC4F72p1j?|CeDFLE>)rONgw{W;eo4n~EX$08hr#hHcnbXj z1jYK-hVg+?ug4spSD5!r_ypYc2A|h$(4FVr!Ri&>&MR&IQQz0_wd>H`S*{}-4~}o_ z9rVZW14JFylRcU~fB5G~{TDkqyYwIj4gxnPfgS{xg4I8+-(!%{=Vn^!`pR||FZOq| z{`r!#-07zg_*@S+gWKQ1_19R&1;ui#pHk|x(eb(C_&DYbwu6cJKCxgsct(BfI?kSR zPV4@k4RKy-^}d6Dfz)?9a;!X$*9@4MpHuLBlJ6PO9NR8zm{y;T_;A^hEgv!Ocd+H5 z`ThG2`eXPFl6s#!6}nGe@}ukzYUTO*c}(gesqY|iY>(O_@Bq&w? zDWT^}OG4|>t^*R6NX~Gl|DVUF4wgb*&SB)h1c-W`Yl{280*$isTcTQW9(CIDH9o(? zrserLBha_N17O!__PeYp{rihqdpEuPdzVYjv*cKL8=qjiT);5AU1k^;l<;<$P@mV` z`ZDiNu-W1H^}QK=4@>|%zM7xaq5Qa}>zlqp>buCP?`QY~+yDQg?QGzznEpRLyRBOh zB2t9wCltv>$n%X-o_;Mt6kUYmp%5j}^&G+?^dy%;$wLuBxQL2m5sDtJgb+4DRQCTq z_k6#*-#d1)+yCdhUhg^g%$)gr&N*}D%-p#%bH61v?O){jf5FiOK|N4?-H+7gVA;;e z!Ctri$-0DR!Z-Ezb2Vap+Ya`AF74+Ur$uLHbo4xHJJ#O~T7fBFtUu`#+y+tYusn1g zKSK7;)HS}m-SN@>{s=lxLl&&hoyYKd3p@c0<+@{u^!tqdPgIZU+dF%$_Ze#1Wd%B` zp~10vK1J?4<`Cv}f~fW$FXu6t>%8tbQ~uLf?*e!UZ21rUFV`Dk2&~rYJ~BS&)@pEe ze))CW4Q}&3zZ;*Q(Q(%^{vbBnHFnUI9G|-Q{vEYF)KBBeaY20Qol>CCuqOdSj#j)j^moH+#a`kpF>RfHz_FyTEHP-e2QKt{T?g>)z{~0 zGjsj+ZsBf(BP8zhx?N29i;m|z7&HN+8*4}U2>35VoiFr?82_{4bDk;xN$B*1xnO*X zb~v#h*c}cAEx*RvE(@>s^+*r*<-fv||7q5n4vWC(#xCi~eX?*D=ynZ{YeAj-{h_k| z+~<96H06I09e1B_hS=;6h3@}k=QGcRuutlKuQS4wcL{mjeOf=}>%@K~YlD+EY`=<+ z@II4_Pb0K;hK^8&vTdC!VGwiI5gudStDxM#r)H{VbLDc?GZ)Wx5Q832)tTR5X(K!%~0PEwPKO4flTOhLC zLiN#p8-Kw2Y}QR{%6~7S^Ef;W#;3^rpVva>Ed|~F8tdBaWPDAG^}0KvtG`FDWWAsp z$2Ty#G57o8(abvm^m*Fw^}S?h+%A^mRpLSK)5-Xpj!u8L7pzawsT`-F8R&WAh~fF| zpV%V5A2&N$#=(cYPj}U!|c|hxV70EKfb`efr^} z=O6C>5(-b__YAN;`hN+nnIE;?hehl!!8q@eGCupF(;m(Y`MgWog%60Me5OW>i^=ic z=Wf$(Ytd=YoqNl`*5?Y+*THR|+egPoX|`Z!s2{YI?Grreea0D|2hf=U&x09%V_$E? z_bTSOp#3epebi55?Qg+j-sd^fZi~=b11)>x*XIY)e?Y_2qxb)*q3>O~Uj~!B&kTHY zJUa@V66gx9^g2HGB(2{=!|kQz*I2)YCPn`P^fmNBXMocJ(_V#BNoT-?$VLjnHWf+k$Q9|B%-5YOLiB$9nwBivG?e&`($7DK5^qS5v}LoC9wVAHJI)KFJy0 zrzbudjzs@BI3eGs@O09>!37;(G!EYKI_?=K4SmTw07gR{X6iWm3F)Qq9q9TR>$;sM z`|X-|+w0zmuJ+SS&*k@g=m z2J6%8Jl_U!;)5f67KZw%`eelCd*jmro&Dh;u-o+*(k0+RRDHC)G*+MZY+s+c-K*N| zB(zS4%fZ&?Wzw(1Y#1v0UHJTVe(1cW(&ruT(*z$43(@%s)`9vo;yK*2p5ytq-u&ha z8EJRDj-HX<{VtU68;Lnycc9U|g!Kl)wP4z*&>b)CWu6P#k2KDTPANKi{7jQ~8oZLP z6I(~R{`uAGXx+lGUf)R0_2o_D6PHX|ptU2k1Z@Wv#d?$O4?`g#@0Cb|#?xR}{&=eI zImo>4eai6B{b4vd55jn`KJIyxx0&}bL>-4(gnV?nrpvs~T6|haeX{8M4n6wh`#f?1 z=dmyY8p`n}9lFo)i8J!|yE3V7>QnEta}O~gYI7muKP14^r>F;M7kU!w_SHDIfJuqe zCo8&L(ADkUhxG=)EnswGi%5S9D?#-%R^6$g@27hHlv?1+KNuf9?i60c{W`D*SReO4 zXxA|BHc)+y)u$}7QRl@c2<7>QlG>^ z?=#8x?1#?ba57k*dq_VB6ClcGM1)Ujk@tDaY@e6WnF*hR^||pu{)e+K`w~R?tPT0- zd0T3+_gQRw_D1JuNP+d)zaQ5w;CP7g>3?v3Kd#*WzwkbFPOs_*ccAkKECB0MdI`@& z!!w{h?LzNGf1+c)Pl=3|iDlkrYkYLS{2iUTm$J>l`t&EAf}yZb&iev6UTJ?T5B2M; zjzeF2pH`+mBhYycUIXiM#btaihLMnv-xuQYKbx5)z8)jwc&@&Bo|E|2`B|M%@kakM_=5^!f>UM6$dWXYpV02@@WrN_H zD|v1k^g7FYxep^Dzn=~}B!53FmhGJV!}}a%%KsudGhi0j^Aq=;)OpNvLC1TI6MuT0 zZs^2wIrtAv@~(z;V9T2tR1geuk}J<0cdIm<)mo#SO($*%Q2L-EmZ<1ut5 z!*gKD8=FpgCb-aF)*mC|Mpk}*k)l>cN!jmH>%7lceA>y#Up&;Dc^5X72f9^ ze7cFxPH61`#bABfk?sI4JR$cdw37Q;6A?cBAd$S$wqL9*b6YNP_jbiS*sz zf<7PBMEXNk&ZBb+%|yqibb%JHet`)uB` zsy^?a^%*P)`RqKHcN2gMPssQ2@bg}|g=V7fbq|WXPfL8_vixAQj)mjF)+f1T5Zo(1 z#d805N$5UsW0Ct9()ODxPEPt;Gx#Z=7u zoMe3FptaEHU7bH3980f+7E6<=Qbz>w>9+o z?K`Avy8TP^Jf*(ZA7JWHhE5i~0=r$-k*;%%-~Rf0m)^&c{fGPRf{ne;P~%e{t){R8 zSf8^v2Qlq^v)Ma_RW=5bI5Yx51PvcEb?1Elh#sL%e@!=((Ti zpZob*$6@mQBhkp0bFpdXdFXrv-+^uCc#7-C;6l0dhaw$M|6zM(w)Q^1nRY$|t>d5@ znEDjWTgZQ&GH(o&iO<2I`zV`8I|og??#9Wg{dYX;JqIs=E&oo}^2`^wke2hL-qK#V znbl0RpQM|4pXSLbpX1OvAFcpX{@B~3KZNC=&x@o&=b0_u$=@F8lib1kbTU5muH&~{ zXa?42Kho`?Geqsj14GvV)F;@{``m7PPD1BA=m*wkGU?}GI%xmYSeq;z;ggAbpRxE9 zOXgYV`~n+YpYJoC^kjGw8p?S`MxL)!pLSF7+bw;8Pp6uDpSSVRac?m?-@;0;^{IaY z&-1|cutM+mlq@#OxDfTdCb!T`)F&%G zTj8VU4SmqM9IggipLD*t-scQ_;<9Wrbecm;uVmmTBRA`Wc^-(dr4k z!20wjJp^1Rk>l$>`OK64l5FXHZoo(T+fcMdzyn}?-X#4#xS;h3Ux&>tG!yLy$=$ur zXnb18@&#xugB4)6PvK4c&I4OP6FD!@^AweCa(n*%Q=HA?UMD0JlLq5k!KS;Fl_4&cnXCgY& z;1#ew+uh8&JfH<6BigMrltWQtU7r+o0D(zk@=N(!3-FSYeK6?B~?eBd?n|8Y!ormFRus&arUI`Tt)ejP( zaYx%Net`FR%G76*Te;>4r-SvWAic?L92Y>JUmPgkzqH-zZJB?bul30uJ%al30oeRzl=SCsEfeLg~G2`mHav+Xc`^M$=3%BOe8N9&V5%==W} z(@rXXC_2Z%IIun+-Hty5cd-A+eZ0k?`+0|+l;3V;7yJDu)4}_+J-cc==!VWYa4}e) zE^~t56XvY|{XQ9fzI1S?KKeZ`-pTuP!bivJRp@MdC*vhppRuGLhqoYorZ4AYiM1b; zhJ3WYrH=MKJxqP(qVoxS4uuHl_pe__SAYvq^~o(X6Rl7381Hk1sZYI9&Jkf(u=Tl* z^uzEx==Y=W@n?KQed7Q1J~!i|;JSfAc^^E(@qg1+bVSh>ESO*JhvUTeQjcJ)5bSI7vXyM(6^u|*zJB2=`+EFsQpqTDkHsbD08y+ z`NH`0Me8a^f%WO|1pkY?fj-%8-sgAIPVV`MRp_nG_gU|I1LLQ9otrkRtO^(FIEREy zz?8R8-~aD&PL|`9#!1ns*Q-jWA?xo5hk@O0mysR%7))xA=gzHoJJMx*{XC*!wTB6k!js;VnBKJP8e#{#H+Fs%P zb-bSUoaJ>JoKv;khq2y0Fb<4vY$h8l!@QZG{ZV5rQ&x3lhW>t-5})1h(c{iMbh7Xp zSf7z2_+1gELR9%@wanihmG_6AQB?j`xYz!Tiz4j<^SPEbM66pT{OHubPJWYavTw#=J;sX9vxTS7R2H5wqu?PT274< zeSCQjHRU~wyhp-+!Isxu_db_-7eQ3NoDRHyC4zGi0hu8ynmuC>m3A#fhm8X`%|S= z^p99g_WR)x`+e#X@3RUY4I4ec^&Z#~Y=3dj<;R)lg4RRh_@!QFr+?=)~ES+j(6aKeh=y=e#wacbL-YajvKdmpKI}n z=M?x)Otd<|v0!~pC4COKpwCAP)$b<}zq3~!Ux#_0yYSI)5n6*G1;(eal=NtDAv|8D zMCb5>s@i`%d7p)8V02;`((i%``u~oqmz!D5q+EW_h~MtZ`;tyn4j_F!+y#2QHT=G}^3eCtQt3~bJAHkY3#M-zse_#&QtIzSfAMAJXZ)?Lf9uIK4qcrQjcn{Pk zJWelPTYY_kG2W+}@d+kz{s3Ep^*Mm_q0j-Me9A)SDV6mRpNsI(a4I^Nz*S&;ivA=W zdxCqeV3u6($;$af@=JeSQ7rpU>S160>(SNmzb)(i0b4zpryD!%DXzQ2ESN0!Cv1nhX(kMtGbLR33x8)%%8-(9nlz0X8^;<9is zT6e*HV14G0{t#TKsZT#SZ%I7keWv51`^(9En2+A)V8_cO^J}WF<7HCx=NtVm(EZkF zPtM;iH_Z=%{g~GtqTY8mCN#dNPyAV5k5$I!G<42_hr#r#Skoz7hlYJ1%4gQe`RA?b zlb-5*w&)`ph3Haru5?;pwoBnnr0)V3^!!@mtmy29j<)*<@;(R;gVBjiCH)$>Q0w-8 z&X@OaQ{K1HdJoFL_~ia?H!D6mZs_%~tmt$%I^UA_SJ>#8y!I_}&;9Sgy!}Dzt8uOp zOgiXs?*(7J{zkVG>ve$>!ECo8_gu@B%o_^f@~Lh&(annPaHD%C>)i(QQCo1ot_g=nFq5FTtPsK;e zsc~9#enUsk8y1uID_8-hJ!AK_;Q9S$dG-nPd`{anR|zH;>UNSDdfg-bqHmW*7gV)N zLv$KJV{omY=UF?Du5EiHM1ODebv$?b*-mIR2ebWR>)X$?9^qKW*_8MkgO7&R=Rk^(&yx)I6Qouq@K z=rp{rs?4f$crA1i(|x^KR-2b(Lppbm9tqWLuZ-x7GdgMVPJkI; z_N$_GqEY|3=>2Mz?5~;Ee0$ABSI5nrSg!@_0cJmn9Z32xa6#|G?=8QNBtJbSH$Ob7 z95*xG=No);e-B)!ZGAH0)7AKlNB=Q+9PD;^ ziga!Dv!Z{V(Vv3ORCpnz|MCXt^D@v}y{|I*u3x>1*6Sht4e3{L(Z3aa-9KidTLvG2 z-9PTxF9;Sf&xM*^FRa`@#OFbLv|lYl>kam~??XOYwB|ix;6l{zlzwT|RQpv%e4aJ! z^(*>op#tpouK#@Pw|D$azdh!edTfPGGiU*3JdB+{`V2T1bX?Y0OP-22-wS4VpC$Nc zaOY!}pmjNz?XuqQJqgh%;u@cxPY+@JJK-U)+2K7ewq~BgN&~Juhx$tU3WZiVfA`+r;Bb%bbA?HEpNd~wJ&d(=%z(CWpuT? zn}l?0Qr=~vn-Sfy=<2w(HF`~;S-x)UK+-N8Lagnoac%*V)uO9u?azt1emg#E%HJ8C zE^s2)e%76I5?oMyjZ>mC6CEA5&LQuG&<~7GY#{0D!G)Uc7yA1`Mtl~Bd~QYWZZQ3> z(q}C5qkI}%nZKW_Pw>8PmtR9Zu0D^z|EfL-@oCWS@9p;F|IjBTKE?QGe|ir6SKt${ z?e@nmL9qGD+(!yg?KW(2e!FRZ%9QzbJJR^!%)F=Ld_c;$A zJ+C_&t>fXOkdOPm-jjK?@k!|S9`PAse9lGdBDe%>ecb=HT(yBdS@9WT+U+{DZh_mu zZXdlaIGXuU+b16C*Ol$|p>MZWjL*a9JPA|4*5{h3LGTLmT+sboT9g)ww3y1MYr7OzSWrbQnGFZnDQ6SWBvkgLG?5aKJx8Q zhj(=7{;<(>o;iVLV03ctd)|+EF6i%v!9RQt)OJXV&sO+oKXuCTll1%WDU^v$*r&IAPiZL28_Mr*>BZjX7ks+mb38sj zpz{Yb$mG}O0MhN@D2VczCO%EX=R$doCZ6>^MO-7%U9l%R=fNPb?e-YyC*fI$`rcJ< zYJNXxCeKMHzwka=<3mWf$!v5SbHIiB-Nfy%gpB0h*5}X7TTZ^8;Afk^a*bS;ApM5) z_od$NKgMqe*Ek(TuNyzVT9ACHWkCR+B&TjW5sfCjUNf za*s6}2ChV|{*9^65u`O}ed5dg`lp-qkCydMuEF{#S^s>q{%NdtE}S1)|02>F)Ia#v z`(I(!A56ZXa9e2oJF8hgCF@^r)*mbDKVF0NgYUe5sagLiS^uRPte=wg$C~wDmG$4L z!TS7BO|D6vFze4{z0Y7#X#FopYtZ&f$@(vu^~+`biW;mRtnmJ`%=&d^c>gVlZU3p( zU)KNBtlwDH-=zlY2S0fKug&@`W&L(FSU)A}|LWIIx%PR7!NqYf>${NK|8t*s&w}I+ zF3ZhGx#jEd*{BD3E#DDVT+uY~R&D&&D5I9!a{JABJ-I9MtqrVp?5RP9>{>@}l zCMADs^6Pm|4 zJwk>eYQ0|TchRP4fr2o+its&-d}t&HS|fV&mZ1rcjI%Y_#CqypF|DYEw1hM zr}sI~_>_px>Fe=nSi}01%X8H6HQwhK<8zky^j(inx`sX}ZMU`Fr-$+BkN&lAW60-L z(xbqIcn#Yv&~{treJ(OS5259Jrhx4S)+b#9`jo0q%=>I@e0qt`fc5wk*Rb6hYP;3-J}r&U zVDY(gJwB6b=u@gb^}Np^#%H+rJhmR6(i*l~KW(@A-sc44^Mv@kwjQ5`HLOp$`fTid z&NDtU#OKrX_>|Vrr=PalCf;YT@mVN7Kd;9pS;KZqXnh)ZpSz9E@8YxR?C5bPTSK3W z`fTcbCK#VB(Rbrci}m;%O0(^Cf&^^o!8H;dGn*3SGKgr}@OFleEYmYer+@DZ(F~cSKnNJ&d7c&RgH`W zO8-fS{#^74DL2vU3_IuRyG21#@-O!JbMsn~&(X@{uPcR3N&X*9{<=!RZm;&F z(~`f!l&3TE-S@SVh+WY9?sIx8-#(28xRfuyUI%!xn*15bzgIQ+U#KR3R`PeQCjaZz zz3t7L58|9WT zY2wSDA%8=eH)Ia?>%cAG!u>MeMG49OnaS^-!*PtRCVx`$|4>c-hpNe+lKce&tIG2j z`5cc|lRqu_n^cqknQHQ9B!6)=`CqCge^&B$swV#%)#MMF`u6N;@@xCNQ%(N3#)m7%{&%h`A6si;`nyH zeU_N~cfQAcb#M>3VDo2o@cGNhul@7>_c>O;XmDXhc{tH~di{0+%plv{;+ zkI45dJa6+$d6JSpZt{OfzJ-tl+aDT#LaL1~&;F)7+cV!0cgqR3Kg1>ff632~oC|I& zckFHR%d({8Pn!HEkk4^aHThGL|1$FH{^iQ<=qdSmZAWE@@9oP!*yv9n-xQb%u35H* z#{BQpG}3Q^3sLu<v9Z-sl4)^^f3A?r6`ecgX_f7_S*racPVk#@^m(DgM=icTwZ zbU!(W{EkCII_+hCbvkL$ImpyUzn}D>fVMoBkao+e)5(a=2}Y+j?UI%Cdz*GyUw`aC zom{Bt_S60t-`8)yEB|Gmr1;#nf$fo!^&j5A_0zKciyOFpM%Mp$1J}>W`rnxKH>6($ z`}ytlo6)IFzlzKHvBA0SlAF|K{e-N))dsGgl=YjlzK%;r(RbbV`I7woG?7?_+vl2+ z;?w(I_Q{CPjsLPwyq#~ihc>X?6SDp@8@PT_)_-dQ*H6j%3t7KdwtHW;?LfFHwB4^E zeLc9)qg&0+12S?QIXJ+#Q#n4mzYRspoiE=R^7-J@Ah=t6YI>fg=K%@vsdIIek9$rw zsvqCKfj(*R*&ZJ~Ul@bdICvE7{xXsDQ{X~vkBeFHX;aJk)O4JxY_|jb_UVjIi(E;A z;91H%9bN-lpEpR)1Q+zYM`Ky_Z;_r4rp2clJ_*S+2QBw3%Euv}Q-0$;FSYckyr1+S zU!U{w=_Wpl(E0|x5BdB=dKI{!_0U*W{ae&l?kCNN&merXAN+wh}Ug)^{xb`E~?Soycv@{3~V4e##-G9nTI_L7I#pkJi z*(W%}*JpA|oe{UFi4V{W|%@X_(+6Uyw~A^4@KkGrn&HR+X7pQ!Q1m!fK_ z-^ViI^OC90&OZf#V>Oy~ziG?7+V0xjeMEUfK@JSx&>$A+X+Zc4*?-=8V?YO!4z94v%c`np;yvd4B zy;N1Z>3Q0dXxjSJ_JQr$PpLl2Q)6w|6 zk5-!tdHy!!W@OjWg; z-hVOxW2dU;Y1fdhZF>br`Su!N^lLH>)U+OY97u}KOZX6S(?4hv$2w`72Xl-3B-PKC zYc4tUdhytA`MwCxfa@=5pEb6K^bg=d_&wK&i1#|_{}HDz@jlVk?+w!Lr&-Z&j=uK8I_Nfpt-$TSf0%8eEOg>00x2E9_r)Py@`1)=y`(1xtY~W zw7&DtEJXQaB7CyqGZh~l$HU`=_JcRj-_Y}h#1+0iOH6&-JumN}Sq3gVnw$FiMAgG* zsha9`Ns9g&^fk;w_j6bZuDwLR=x5ReD|k;hXg}89FXOZQ^F_t-UY@Mz?tHzf(oTgz z(1>*#gA0%QMa->c{}|xwy(jDIxYv~Rj(|?!R(i#+pWBYti)Kyh-(TKSoEhkSI^v_- zQGIUtANZ8W_?H^wea^ur?#msx_aVQ9$Lwl+HuQbS*{i(I)u!Dl(69dk*P9^RZbvcC zh1#}T;%e_R+_anebon3nXuGAa@jlNQpPSLY3+{zFl>N0_4SfIqhw3`bDj73!T4N`&JegB!ai%5SMXD`Pq(P|VBO$- zn%q#;ueU&_8N|W$18uj?q`QI(QT53!G!t#NtoXDsK4+rU7cPTveO_kX>k#GBE%aQz z`owSY^%;RrJ1NK4=rk_pJ^`>k$FJnSPvHv4%KtRBy~h6@k(KwOPYC&>kPOOY<(X6opXMe4V~rxBvysm?buL#w7(@Md7rcKiHpxN zbXLP!us(OL<{nCz1X25GDm3o&()YDI<$Wd@pE7j5hVQ`o4ElrfGPn<-d?ti^w7;b% zd!ILq&&%k%1+&3!A6MOuf7Wh%8!Y>A>RInI-}oGZR$sUbY<-?wQxLoeA3=FUKUfy} zUQt<}Y2GJxQ`PTlt=6(H!XaRNo+UjCK7*)syCJlnruF}%UiLn_nc0-a6Q6$D#A zxZMUY&xI(T+(I*n%m0R_U-3SN;-lwpSEDryO2O9W8Pc!9+b~(i8;w;u8S2+V^}Om; z?{lH?c@LdM@C8_(Mt?Ex!ET`X8mmwLkdJg2JF28u74|wp;lBvsQ=NO?@&Sd7sPi(SEQy zI)}rNVB4)1>3-mX`h>TSG)ZMtBKhpk6zChgx16GDA@YAmG`Vu7_hSrFT+hgS>V2NTN5gsO^o2oSe2Q)+JqjKH)z?_pjo;~y=jr)gcLut;|4(MU415Mo zcb;D0ha=|6bYoz5MeVy>1o%-23c4v})YE5uJNsGFYGDjS7SR z!T`wh^?K!UUXlIM`>YCGzex6$`eeP&#rSA_#-KA5rh(haTA#(Fe*_omo#EFH|9^LG zp_yoXf~DT)Hhgru|BhCjSYc2Xtj|uQi@^omU-UXw5OKXvzxQXw=V9ZsKU$rk1Z=xq zL;8N02o2@`&gTsA^~%cjnH<_L)hDye*XJeUGX{72VXalwJ(f5wVzx6)#Z}C1`akxJat)t;&u>D{l=^Nl~(EqufEd3#~(C^pCziX;Yt{(OCz<#`!)?Nbd}-LC2-=emp;7yomqgeWr*{68U}6IR;JyTc0~g zkB6x+L(bRBKq< z19$c;$A!Y5NozmUIQ5HP|2MO~`~RCQcyN3x&~hMCxC7~^|4qt>PT{Rp{kkRj4}tbz z+wDBkSHLw8{+&qMVnt~CXur;^^5s1cAMMvSp>rRM0_*cO=}%xWMD>GyvVGK7w@>z0 z@6*@#e231T@E2I0VqQ*`fTJPmJZnURPw>0{Wg-e7$mCjBD34{13+$)0_* z7CjedLO$AV+11|X6;q#u=zIg;f%OS^x!ESLB}COHxGLXQ+b#Kr_xZv2G)1Qcv;ymM z0_ij00?_x&mdbSnt<>^RebguMr}wFQo8}Ax_y0UspminKetRA1sQ)KRiB2P&A~>V9FDl!u;u?Q`_H(Q)_&^4>3N8`T6%H z>UrRsc+A~EpZHqubCPM7Ptp1Uz5-XDtZN9WwwCk@TevyAZcmR-a^9NV|H$0@v(VA~ z^<(m`fO2sC;p<$EAa>A}g+V7M0c}@}eHPlbwEBLRJ;3|iV%p^bbZ&;>;Cz;g&)1|Y zpiv{vo%MR@MftjGBaTDagT2pOQmqEN_n1zHmF(`aHP}$1hj|Q?K>yQ!3w+G7FB$tvzcW zAFI`TIlcxbc%Lq}SJmf&CWXOOa5Gq+S)`Z48c4}`Wcl#??Xgv8oGX=n9h~HS&cjFd z_qt6vX2SMhefA@LFdPn1`+JL!kM@I%_*{=qJ*lj_uizN8x`6dr-+cw~IljFb&dsmi zENQpo$-X|X86Wq5yjSCKZOCUfY4?A;3y8HJ==Z*a_}mc7-#(Q-r+A-bX8ROvTNrE& zO~KaZ8Pc!9r!ZNrAC}8@((T?ZG#+H+eSX>Q-lyIjRqYmRR~T##jlue~AiWP92s++q ztUd>awvQf%Qa!v+OXJfXoet0mtdDA4&U|gR@Of!Tgimm~_c_A&xce~%qm>Hz)Z~7Q zUJ*WN@oB?;s{Kv>&vq0(F6emRK1bEVEwe$}Do8otkEHcDC+iLjZT~VE2NGv`pZ)RC z?Y|8=|AAe=`nc;Q`!nxQh^o)9kdM|UBRo>)>$8OPPf!8zzOo%c{{ufFbiCGfi}&(AFW@sv3bo}9g~9Hy4_KcE zNPh_x&{>W*sp;ak#E+ZHLq3(qw+p<_SNLeyddI?`8SDt=cwM*~>Ak@PZ7+=zqVpFz zdL7~b@|HkXu;pFq((%GzSC|oT9Jv(UK|27&b%PkJ)E4EjF} zC35{TDaVzmq3x{q(WLu%pXT^zzkL&(1@Jvsp9VV>22Efmi0ZeKBlh>~CEh22kA{8F zITYH1ZU5s*_W&2P-8D{J>UB;u?Q%AG-S?!6iEVkWA$>cH0R3Ny@b3k)BHAT>nfDoF ze8!>k6g&ggXAbFw@GWTjPY8V*fBLY0wjmz3x~X7rCh_YCL*wjPs7Pls6$<Z*vT|I}4PP`kzdn`Q=Wg%Q+W53X=Lk3k ztj{^5`@xm4TK2o}b@V17pUUH;_#A3{u0^L5hJ!h-#Kx0;8eE9#Z(1*nwLYnPe0@$f zKF_1&jytat+xocU&d1ElLe&1*DpVi!Ne=fu7a5=L(TVNBbw#i~y-D|n!4OrS`BD4N zectDKd|F6lN2Bu$%mC}tt`)z(!s(#>U`41OEL)l14^n#H$_VfCq^Zw!=nRJuV11q< z{Sv$mQT0hgv|DPV_j$wk%tmJ+tN`otpFR1F0}h0!?bGhT{QBtj$&T_qALFCpXmn13 z9$Y4w!6z;YXHmXE6!8OM-QRNO5u_JM*;6%q zuY{gQWW}c)K03ZHMe8T{8LZE*&ZD)PQ~U4L$p?J9onUb3c5XAeGVgi44eQ_ zj#9`|L6IJ zwD>$|+U;h_TnhJtZ8v8&j(HOxs@>8N?G~hceV#KuQ_!*RG0}egD)VQ93sF9~g=V71 z-<0^g^Dp}Z5Bd5mHQOirT%>NFGU~FS&qb!h=Py&A&(T{3-+=Zv*RQ`L{VTXo+jh%} z&o;xWuCJ^`tNvbv!KPq+wjkXcT!^~9l3QpddYvFK&bM0|d~`hcH|moXpQHa}pJ2SN z&sqPnPf~oY#;2jQ>%TD`WW;B*@oB}j-X9JE?FSSgb{OfS!G+q6Z^=h|yG_FSnz z3(-0q&IG5r*3XaKMEY)Up{DQ6nJ34o)T7?#T~nV?Xgvhu!TLN!`bDUXPs#EA{30tp zpW>t6$KF8eL-+)&Ps3uaS3zxjQu4f1VuG*Fm-w{EDG;NTfDT}NRymJ0we#sG=X=>n z-e;xpX@pjDXaVlHP`Q0b-wh8!)b{BgIuBEy%#+@y!M#=EfqQ4~476r~3kB{b4*Hv$ z)OuVK{nqH~c6kTg$LjMQd1B|F`U^-e6VICZ==YcOQ@$R@8=vpd`W@DQ^=Y_wVXz0- z`snXRxtY~WDt#t;YAGA6^XRtokk{$~#ER*X;o%OnIH6Cu3o*yTtdY@bI(d$_+ zpfzM4XzRDXw%eimbIlYczzw3`O@6OT$nTY9x8`3jDVFkN-ta!1?yK^7tR44O$oI3NQKV->Iq3Pm#=34h zxsH~Y<#mS`-E9uyS~TnjPPc*Rb|HN++z6_tvFaZDzLftRuY0f29m9I#;8Ac}b#t#< zIFa-;a6$DnPKwS;=xG0cjlA!|`{2sAh3sDq4`y6~-5{#}ca8Yo7R>SGU2c5ZqLY9Q zV0{LWz6tJzD4*UDKB@P-Ph(zwujdc$J=PDR^)R^5Nb2K0N9ns|Ht6|dTJ(#}%k>{Y z_c?eGoP+2W&Lh1HT*%0AV5;`ZxxSo-p`*v^U&!0|5Wcg5YY#1FKhneCVJMd0*HiM` zTuz+Htk8LNiTI^I@IHO;(d|1OodvKGtWUc`IljUrP$IwUG?4u@CHL!% zrb)ZUY2(|`83&WV`g}xs349BBpJP()%SemQVBNk_4{iU%C*G&bw7HzPW&(b4{LKI;#J!A1v{*lncm2N!DEzbpI80$<)E@zMVBAX<;YM9}g& zpXW)x4z=;o<4626@6!Vx-A`wswG5Vn^{JQO_b6~d$1RO>Gpm_se+d?PpMLnnCEreH zwT8XH`W#OBIB+5AJVhibqw#VcnHHaG@X_tl6|G*-7i@n@lYRnTfd=yXQE$1)%H=JBzm>= znIGYkT;hEi;nPkEbr1UE;OUUh3eu~g{^4AMllIcxx85NieSRYSmG>EKeD+2s0bRiQTu=H=NJCV+ zO$+&?<-U;g*WTxCeDr(QYv{ZWpM&*j(2?;BT0-gRzI~QUz0zO!^Wb_f=C@m-hoqN# zpU?3rmX3TRIw!+fV0}iCegvL}4zjZY`4eKD@_h~<-4RZK`5~XI_;h|LfBO{6bG4}-z0Yp==y=c{ zooitj*!nz4`bC%p;p0GD`t^#?_u^@KAJR|W=Rkb)__+X`Z{TOJK09~jH)KdaRKFe( zs*mociE{7rUwky2j!thl=$Jg8qOm2^^Ca$d?#A&*w(qnD^1s(Dn;_`}JLTlwFy#+l z_jl*NoX5rfKiBWuZ`)j-B=(;7WU>*NwUReJ^633pM>dR5|{2_T^t<%6|n~*T7J4vwEz38_bGf1w){&-e-AFyw*6B_d!IUEs@iE4S_Mh& zJp-qDg0$0rNbd=Iy3unr9aG$l`Xzb=y7fR)P zATIh}qObdd>K|H-{&=}=^H2J^eG{VJ@PR7*_UM*CS8z4Z@((3F99)RH4=cCOOw=cN zhHs~K_~>?c0Iers3Rs_CNLPRhdR-=bKasJ>ebn>yOi%CA&G^(mm+u(R6s%82(#L}f zx?kvdRBmQ96ZOd^z0V-iZl|Kv8!iO5Uue6Pk{%5YLzK@P89&rg+bwmb_j%6vOhIQF zybQKJvq{eb7ovPrUt{&jiqFTU-4>y>9M*uXPm}ZbJqX%B)bm|U?#|yI_4{t-EMK4P z##W6d9nk3tJ;3_hO!^)e3sLn+gnWu+JP3MupT5TD1$1V@M__$|-i%kU4Mh30Naxo_ zeUj&RpF8l;&=#GZa2^<+qB}^Bf=592PmOimtn`D_xnB1dqx&T5y#OzR+3t1bkX`~V zs9sjCC&y*nO`PZT>hY3W-T%I3o!!poSu`-^jEyAy2+V+b@_S7)iM5=)L+xIm@?38q?;%m2RiXW2x?GpbT;hFB$4AG-1Ukn;SFk?U zkiHd$L)5rc@9O;RTe)9c>U~BUpE2l6fEU2}xa%fgFz-iDpLU`1w9-(!Rr*}!eLj+Q zJGv+c)}gcQh5Vib*5_-|YhcTZxXvKYL66Yu`SQD4yO(`^vT{5aFYT5d=zUtJwT1n4 z>m$%Q60~3a({=XXO0RQbH9AMvLMJIY1JQ{~k^am2=fDuK_1@=V&Lg1@OqTEE#i8@- zW})q<_0C@7%lkAw+Fx!!XBgZGT5pOFyPx#K;6l`RkXvXbx*ZckywCgTs)ZBLngSUx z^(p#*^m6zebidVD*X||bPBP_nm!hlXkM-rZ7JeVm_kFwLjr(5h*4>QmH|^hlO9C)Vw$u}T+9KTV77S?KC^-GlWGghRoWzdPykz=d#o zt8O^fewiHV%Rd00xMaE%t?S@!Fy)UeBE1sUK|>i|;?iEKpAH=lbw5kp>V4k8r-fv0 zdMV>P>;|?z-AMNa7mDTi){@Y3t|Czx>3g9P!@SRXrridhbvxVzwm#EIm%&2N>&$^% z|5M=(p>adoEqlB7`3WBln{X{?8Cu_f3%WnJ&$^v84({;l|6$huj`e0OcYB|>@hR-j`7|^I zr^;obA$v*1Ea$7}r_k`bS@@p%cYciB-=Nz8CACe02L{#(AGL_{4JxLGU74bD#{YPrWO7o(^27sgI6_!6V*h^Kn)6*#WIx zpaoc;wxkaO7xcM?@NqD=&`h*GDe>76pSUdVj8+#o0j$p%q|XNzYU)#2pGSRtit$P0 z6oTMVv~Gdh!TQ`bi0{4NLT^29|A&5X>=55y(v!T;;ilbQKx-x}fjVgF{I(VB2luYdF?{3pH)G%HMgXd7n1;XlRYr0gwPwpQ6)9 zpAY>(kDD6ny7lhy{VVaJ*F6_qJ@2}j^=^UN!Ipm<>6gHTsO_Qp8teH(;wA5MIX-b& z_y$^YpbSj;W6MdehJqn{UzTw*y#HSq8lQE)Oup=WZp25odqZ@#g&n}wXK&Jnf(sWW z<@gmkACjV0M*9Aj#B}d-m+?6YtrOuCus#=&z7kwW$$4b)Kb&t@`n=+O##G~T)Bn=v zRqr#=Y@adckAtVcZlBqt=fM()I*%$1?JxR#a8`VtH$E%SSqnib-={t4GvG2v$oX(O zbYI~7(Dxzj2kF;+edge!qM{s8Oq(+#|P;YRMAfuxK(N$J-a>DNV_^ZWG^ zdi`vk_Ze&2Z8ka!;482`C)~ub21Y=c?4QZde%kM68DFL0vO3-_@IKGtqvzA_pz{U% z1=eT$&0MpFmC#V`W_P z0k|+(^k>L>T9R^KQEs7`=y;I)%KK#T(Qph}UEvf^A9r1`JLz-51wB4%oDrSEM^z;V zROg~v=)}MF?`y66?HowpN zG$pn^hmbCTZV=^D7U7d_2-mfz0W!L#HD$k9>skbFbk~De@1iPA|zmjd>@=8_erM2XHMumP0yb)yLg`g#-|%P zz2QQzJ`+e!huM&o^QTgYwFj&YwVV2+cJn^B;iDmo&NuKKnEqDyBk4cD1sx|f&Wg@x zqvQTZAQ;2*Qeetkv;Ps0@jlbSmv20}+E2GfuQ{{;Q@&U$())u8QOEV%LNn3l-IFc7 z&vT~y3A8%F(co0yD#)!^_+Qeeg9}=JjkBWjy3uj>BlRNx1>o9Yrq?N|$^A$v`JR>B z-IwnZqk9>8*T5~J`+?|=B0Ui%J7hf2I9F&U!$mhMx@(Q@@P-AscO$$U(tV%wXYj>( zbSG$e_weQ2bwbsCvYho+!&-2yC*_TGet_>8;6l{*&D=sW(f%8>_CD>6&&6mBgu!5a zZY4bmT&V5!v-n=#=QMoudf-E7O@R-gAsw-b^=Ko_-5%1JDe%9sZU)byXi_blyMB+XY50>~oiN{O)yu@V^XC?kq;(EV$ z{U#FcD)B#UngaTc>pu0s#aI3G%I}NaO4$nj6^-}rJo-CtlO@crSdxodRJ3q$Vw)4U zadCW`wz;@$e8qT|PBk9W*u^EyhBV9Nn=oL4i-QTRa&fBel)Aa}BYWg@f8OhtyW~ZD9kX3Q zP_o@%rn%6&AZXX8YI$b6Us$qsy9!;t?RMK11UqcIBhy^iY6$H)xyi3hd^%mo|LcP4 zPv&9gcR|xZ5&vBbm1)*H2rAP&%)J|EI?KAh+4WnsZdDKzw>pEV3&m`Wqe1hxFTSss zf1NCTkZCSV+>^IK?=^8RrY=n0k33VA{>f;_3-_6uN zN!}qQzk5i%GwAwB$~6Quonbqz22B@FJdu{@IkBg-N4oKMl_kx_o4v7a3Px z-SJiWs0-nAxV+)zYkt8GRPVdO@9Etewb`o;|54ZGHKzF?-RM^yuUOq^9n*f3UYitN zzO>Fy^u|=HU)bONXjLJ5U6n>^;(PR@vWW|rE}pnVdR5i(pxORx*@K!L#q_vlU34o~ zX2?GN8(T6n=?9$4C;jm^|DfT6v}ShVUnnOZA0k`5a`hm&&4u)oi?`{=^wMoElU`G` zym-&^_T*nD_w2`X$eu%(=7(bbp|2ol9~{Z_%;4P0cGFxh1UJ_yD?Go^CA80HO+S-f zs7r(3#wIthJ)7**dZ)(0=;ARt>QrTjZ4~2Q6=R#%-8)!XZ>j86Rf|)tN4Dl)LtFpC zG}!B7>19>Rw~>!}oVZqx4>G^4#G6Q5u-0dgB+=%sT~I_o^_Z4%shwqJh01`^(A#1|4+@yLILr|!}6D> zwpqkJk=^E7rsdoG;XXI5u)TOo{=XEQW+UQ5<+IjrGU@MRUODj}q2+N}`~Yz4A4cr3 z<;!f$f7pVX_dW4%@>%tR<-9Wp-13>kpUCIRQr~@htjF3y;3nDxc3F z?kS)1@`n@jh;6~Gzdi9D^0}D!F!>x_B`?i*aGZ<@ClL3Q&qIhETA#diOd`P-_&dPm zOA`kl(woaTRuOlEe_B7wSo5=t>8pr;mCtL4E9A4W``gEY$$VRtV`d5Q3GzAk8E5z> z|A4c%|6}hx;G?Lz|NpzY$tGKpEI~+TccnuTHlf#qZbM^11r>q_*a?We5U?Q@uvauZ zYN~}IR!UGQ76b*w#~M(vVFa;3Ap3uxnLDxx1o83tw*T*$yw3TY+`T)qJ3Djd+|zCk zMm_15502DwAvj6P2OKn_p$Lt44kYit3oO%e1^B#{Bf1|Tmbh%{1xVh%6kM<6_rS20 z4|r2#1JAExAbI}@;LTc|13sqZ$nFQo$u>sJsAOj{YqKQBBm0t5;DO{T;Kj+6@I!6+ z=QCS|q*oz$o|Z2LCu{jo?=NALEQ93zmEdMAizfc1mJjv*Vy{gtg5>?x;7?lK1BSJH z$oHeK-Kll92f;_QTme3-&rhpBYp%Kg zd7*AU)cX&d-}u5QjO@X1JNUrxFk_T&dJkFZX~y^2(az*+5`BSY0h>z7t_yu>A739A zu2d7k6aM7=`SC;el-2RC!H%En05+(<@b_k^>j{(*o&ya(|$AAXVA3qj-wBvb{XT(z64`Q>^Jd9Qb@QpZ^Dc z$~CswlAJwFN?J!hKQgK6E~|7!kD^ZAqC#B*?ePg83A{=!}Q`B!uB=V0UaTc6v) z{B8R9x{hMw{*C`{e0-&!zlFOG@A!@1Z+-7#{W%&R&-y=J3)&28_)ny%@&8u;#@IqP zBxu9wn$Y^H#LAG^?!bi=^9fs5>Io;ZQ{6T<1P$Lm^yXx)INdnlO_kokGt@~ zv&W6UAaM4CiIb;J_@m9;#BQQ)K)<{>stfb(;`CWOaXM#QkugHmWQDWPMN1z;%gnCt zVp*dO*vb6Ro)GrRP#C@=C!E79Dz`qDtDx&?UD1`plezz=gy%Im3aqldWpnVLo#nqT z;}-uMzfC>he+*vke-^&f|F++!_WJiCH?hTenUTlG`QV9hL*T>Wj)ET(cLMyBxbg6b zans>VYze~?7(o&)gilGhAO2v%Quy+Ox8d(3Y=ZwY;UoCLx7wCFn9&plX9jKR#^5Y? zOeh#iRY!(8az=WE`oOo9{%Gjx2it=)6hn_-L~qq?#R!ge{NBglyD!>@PluW z^AFKAYg#Bn%l@mQkaho9$Fc5TOAof{tRDPR5cH*AX#D;{tp{86L=JdAS6r;tbKGDL zE%yS4YPkTsP|F9rpK<#^W-`Wc+hFN~L@olSX}K62+*bE#w1X1gDjzdU-#VXDZSd_u z-s=m)=cd2R5tpT}fUB&wSy+Lxva$@u08ybJzeOW^xk=cV!c z6}D_L9F5=40s0}?S1}mY@(%3J;e`D*=mz_UxLV`)BygQJ+tYjx`80d{dps(*r!{h$ zJ?-~6REIqs4{{aX8NG&)XG8RN@E@aphG*3Ez`oe4t{;3rU49+0t966nL+XaXhu57D zX?;|$+g97i8nL|rf7A9he5Y*}yx4y;W5!(n{qPch8GNz-HO7)%{$0oiZq|5jy_T=9 zTWcO#Y(0;397^LoG=9JJ+_LVU61_jG4$9%a-?|U2_gnRf{_OoV*75Z7uh9BFn;Xts zt^HWv+xi~X{MlMZ+FDQDTA$i_pJI*`t>;;>pc|60zyo&I?LEO>TJ8ttLDq59QY;dX z9KQ&>M$5(EEG^FkAJp;)?gbgw*xzAS>Au3eLb2H znfPKoBKHlk=ZI^(@rYcUXj3;qa{O7~Y)HQUt>EpteGWKJ%a4H-T9)Ih3mE4hd4B;o zO3P<}`GAsJg0e5)N;>e_^aOcz0K7J-T`svs?*}u$6cX5 zkL#XxYMeKa9Xit2CG==`^7_ZZkA>xkN*$@%t7x>~SMW$B2mAr7wb*iOYEZT}^rkH? zl)(4T2>Iay>xZBP*uyd5XmxgYyng?A>U=(X7u(VHRNJ}sdG_vVk$snApzYMC)1#>A)B*{)$wa-c_V%uEgRzh3I8Pi zbNHdREao<6MK6z5M+}O0Ci?>J*k*wioS&rZROSbLvioM+RDO1P=o4EgR1zvuIrX`m zrPJ%j*Lzf4I8L9XrjPM7@unw7+YB#Iy7N=#N^GfHV>jC3lRbfbG2Vb!6gwGq$HKrl z$P*3gUATUCc#ql>uKUydQw0CdHoHy!9Cn9L6z-@PXLOV!I>zpbiH>!+W2~R1=`X=6 z(fU>Ed|JPkHGW#-ku|Td#ziZx?~pq`$o{SI*xFCNo~KyHvBocJJ*dCBf9vxfFplf_ zRK8^&95nopyDrSIsR@vrmr3BcT0S4VL(6l)JGFc__<)v6zzQulb&!0XXp#u{3snD1?3?-CEw9+Le>`hp_uR^r200ZAW;HyH~VpNHQ!2pMt{`|rTM zt$3SA|5BtateSm)uJ>QazNhQ`AIZK4|H=L%;~gUXt0g?cAJ@2ofz6>{EX zJ{&xZ^S|-~qCKEg`qzOiHk)#H@B}SS25-@F1^Aklchus0f(~_lioLgSb=~2e3%|=- z4zKhshA;8H1YhcX9lqMT7XGGp9sGUo2k_6lHD2O*y70my-im z2Rf)*1Bpl8Z2LRUnl|bm>N@qfdXjHBC)(q@M%5d!ML)TAx$q{scDjF6yFGdF!|Wd? zl>}DB&JU~zpskhf-S_&)^Xj9*4--hYg{RC{;cbU})>t#6KfdGF=JUJSvLk(O{%?(| z6!tSthV^{N*Yz3?JVR!S^?b4BnI)D!tH)t$y#HhW`uJ8ITx7B$+%LhGx>v#1 zxZi-k^4SW&QCg1N zzs=+DFvIeA;Rzleyt$_Xyptyc&-HYLclSu-O+U{N_;Alr@MAqA;3Jt85D()y3qIB} z9zM}?IXrSZi*vr3XW@B#xHaHfNP0Yw${gSVuA>5F=og|-%tI3tokH{p`7Zq;bcrF~ z^0bB;?tTA}tntCRe=WVrx?e3l&KfVQaY5<(+p4=|)y=c^JkxVM-{?lqZ1^3Xx$wI@ z_rf3aJOqEl^QedQt2~c;qSOraIm0n5esz4YawiW??ybsFd!)~?U7a2sn%z7n)SY`|Ug%Ny z-cUWfMTxicx9Ig1+bWV&QRSzV7pYy9KUZSU3l}xI3--tPTF14{OR@g`)p{OpotJ8- z8RvU|KCQ<^D{sg;Pu6~|II%)&{9HD~=u&+~zJdAk2b%v+9%N#*iTU4a{N2Qw-GhzS z6*`nt``KKe7m~Ss9N1j9w*XseIT`G(<(^b3Ez2W`b1Kd4V1JP@y4t=HUSt0fKGboQqr1w?ka^4%84qW)R*z(? zK%Nqq9*9?S1CIo_&V$o~+*577#r}9r=CzsJkEQdlgcp_lUN%eZE<3YoyyL8@u~p_d zGcTtDxMMPw%p0R_LQg%`ITCMsk@G~?7W+xAQ+U!YNR{~I4e9Tt+tjA?8u-@qZ{R?nW;(wAlGx|4bUh!t2EH+N3;c^%iAgA^ zTZs*GV_pA!$ouBN@7lKpzGL4$cv1Z{KE-AAd(F>clR0^`(-{*J8|!kp-5!tE8y6QJ zpOE15HEWib*qrSMwiawH*^=0j*;3e2+0yiuuD1-mwbGlv(H3a59q@xRZ0N`nvYWbA z^-WkF-#_7zmSbav1+EM9Qg;Mgt*^Fwh%)l4^V(n9p3I^4U$+mcZ`=Qfd_%_vIx4mVO27N2h%vWbsq#Ag<9Rq=Xb`~M%Ynz!$_|4Xdl{usmmg7K=+=M1VY zN;IW>_!(*pyii@u7rusBg-y*@W$+5@hh!FWM# z7yus_I2k@NFa|z1IF@liwY{{xP2JNz+!;B0dNw0m$iW>M8w$Wfp#l5i*X8XSTJN+C zs~>jY-N`2^}9)Qc)gy=q^@`1GFrbNE+Abo&qXAMLDgVh_`DspAGmg1XVM z%-<`0g@2`=h+6-8_^1BQ;Xn9)gzxj$!*#TFS<5n;3X}!mx0KC>pHX#wRf4*pYEj+r zg2l$2JRqDOW`&jT7h%3bqpbsHtt)4&Pr{1$ehCkAf20Ol1&HqpT+3Z@dmxs(#NE0h zcgeZ!r*UVjYQK%U-v7yyAcSzP7JtC9} z&j{u1J91r8efRoSs%QOR?vLU1qqtYjs6PuiHrzMdRhf)Z#v?ZoKMTp3Jrz7n z%d^2-wY(f$q2-^zU0QDUKDHA`-a8sRL(6x7bF};__?nh~1%K0WCu|9wA$ji@aIBW^ z0`Jzcd`9aRx7_RJNF&=f`b7FjtdgzdCbMV$ATvUs_`V0s7qp`qEq4M#TFwQ#YPmbuTg&~xAzB^|9;M}D z!4X<60LAVW!*OMfFt`<&APR|bf42;2fM2#!TN zxg}WGX0v@TzH1YPU)KI^Mx=e2cjeq0b$8CaIo$oZ9hvJMm3spG#N4s);@n%{ z3v*Y%L*?Det*hX`uTbQ;1pVbw$K~*=9M{69GXh1cn;f&q;=jc)o0i)gcOcJk%twCQ zu?4=v5r((R=#;?>G-DimqM>Q6$WZ=)Hk-c%<5RLf10L`Xg&*Y~0Wa{M1|Q`g>!&V` z|61f?|8wx?{jbAU`!~Wr@P7>d)EMV}^8bwdt1;TO3r?uYn|#j9FdZg(j&!1eo}dQOolt7Z^nR(i5cf*%*nVbV{)6Z=a0VN>z&i7lqpYeX5_w(K#`u>UUmwXgcb7W21nyA`9ZR^?&wOwm_)%K}9 zs`i-L<7x|PPp&<^c69BTwPR`vYsc4KPG@jX zD&)0^AHY9MlzTq0c?)=Q^U?6LjC-WG`Gd&CS@&h3wPuyV%d?(=FUWcx{$kd0cy-ol z_}Z*@;2W|&fPa|v8QfOo_&EL*@G;WA33fU*{kI^WU&NEJ8=z= zDJLMCc~JG_K!qV`52|dQjd|*p=wqT=IsNGNo6rO^l`X~|gS{-KXY2sgJGOsplo}9w zj;oz*g6kOHSI%R7XE#rBOlp2EXZ7Ni-ILa+9!ZYmb;^}IB&DxyXi9nNcw0qk6?2!- zX=kJ{BTX9%@0;F_`O0-h=5fD3{{S=Cz|rvR?0(rqXoSK~?3)%}no!CUj;!V=b(xWy z{7(6L#-A<~Ybzd9Z&aLBd5;=nWI*kx+*xT;-&dVfKk1}X>rX>>vW4UM=Kk=w@F2dK zxtZ~wh0gQ%W;>j_;ngv3@XaQ=CNs)zbNvXP=$_1MbDR4|_(acS53=V+xaof}?b{RM zCdbikczg=tN5ylE7(UiOLPtj8eBaSNu2A2Da5LA)j1nGZWI1d|`6sje;)v{pg0xYb zj|FKj!SjvWz=HHqoSQ&tN51_AGuyPnRe@||7VfCnjcn$BnOTBn6e~UxW6ru73yw8T zZMWB=4NhbJ>Ljl%-}$xr%DIj2{d3GOeD6Imsj&goCbk2==oHtm`1hk$$M5y^uy0Np zoO~hno-5MdwOyHhEuZDkb6<15J2|UMcD0HQ<%BX-u3;bQ8=4n7TRj@u8yZ8@oM|Qc z{fRH4c0aN237*cS(@QVWv*e^QKcikz*{rf;^?TWF)TfatIf7u4?-}3(0@(;QVJlHm9|2FtfHhmIy{10zC|Mq4-{su-se~ zxP}pDcHlO6axg#GK@AKJ;n{p_aBgs@x-)nW@x1thZwmg5 z{7W!=BzJ1-U~7)p`e9}^kF;Kl{7LIA@E6*yZ0lCPw+*)?zQ0{{`x9*|+rQo(zeM}5 z;5*uf;i}`zj#y?oZiau-u?}9}G296ap!1NKwlaSVD7#pLyr43vT@& z&zj=0=9SFs_1pKuKhE=gms@l4q)+oUINv(=#;ZQhEA8`vie6ch7r)`&RyixS zx8+=X?eG{`vm5d7F+X{w22TyS$HbN6xut+V^=QOSb&ukpbKD z?u%`AQC{>9c^CeYSM}i9AM!3a|Ln!9XVvD7bgsX(X6TQ3=1JJ0vB4=Z{&`y6>bTwU z4@W3^ZuF3P^Q&+~>S&fCn}(L2<8wD&ac?cO`R72fB(tGsV`Klkpy zu+=PXXx!0p#c?;pEs9$j_kP^wxa;F@jK4MhiTKj^Rq<=$k4ktTVOheugw?*I6HiMV zh2FL>aYf?F#LbD#nisc>OS&j&N|HZiZ0eqj)BU6UXZpwZm-tutKk@(KpA)#RbC=Aq zneDR5vYyR)A!|j}nymF%o3lR8dMG=e!Ea8EKlh!Aa7Fv7E>%72`q$;v4XPVjcXIut z`b+D-4j*`C8nguX&sSAhDbv8%Q%8=JIbBq@u3a6p+3#+1v`p#jQ`6Vj9(wRWTk=`c zZ1k}$YTnm&%w274iOrgcs$uJW#}{hd+i$DevR_ubPyO?jd8+Nvcd1)u&En-^m9b`u znly2u8kTgH;{A&K(w?v8e9=pBEcN)U*}SilVxP1J)Y>WOtgV(z-xg}?RY#~Bf0Zb8 zpBi#yoO(Uvr7u5`+pQ8RTx#&uGP#UZdEYzLKbAT<4r-3m$$O*KtW8nuGm6)vRPQ^u z=O;Tj9;PvegMCmxX%h9$&96wGhFfG#YGnTOL^J^_S1dBGRC2uYAUPo$z<+8vGPk(k z2xd8u(Fe40LL>8kBXdn9m#sG>{cDJ0_*Ta}>Iq|fJX%>1kxDUo?y zzi=*lat;Ua-d^AkNb)8gxY&&Gj5(f|%8!Txg=GH++X~S%uY-)&Yq51eB1eOMEeF9P zwcG}54~gZZBbck(yMaBm+#Bo*8Q%{a4#^FDG&n-H9}k`Y$+1oZPtx)!;AxQTe-t8ZBQ37DKY18Q?9t{Z{Z{EzbuZ*YcBKg_f(p zSG0Vvc$c8c#6O;mh1bhGIgdO1I>*fp7xSIhqG@xcITKXFd5=4WUn%DInC;AdLa{wn zj!_F{46`36v!BuNzeJr8ADi&Bic3i3dOpT?ELZP1JrnxA<+W;i%OAL=x+nGEYTA_a z0sNyRdvXWmNRH;dj7@gIholVU`YMl@A)TdXNO@dSP0f%7W*?XBQO9SWkj=Rb*+b|J zMpdV{KjutWcN)x@)>J&8)>gd1+~F)^&h&ZZj>=|gXXW=*dsIRFN$3`*=$Vt3xnz7e zm04t3*w0*bT=*Qr^Dstja7=Z)>v+#0@%B3$X=y zZNzV0i+6;`;J_X54S`SKTLNDNqSUs)_kn1&J@6wf_FzmfTDgPG(Xv_uQ-V<{HJE|i zCfEVFV=xn4D=XL~$ZD*?9NN1Ed%^n!^WZ~+N5k(8J_vs#_!xYC@E`Cef=|NBf)%{0 zGWay|g5W~<^T8M3OM~m+8-nk`HwNFQ&j-Pekv|Q78H`b11!G&cwz*n+(BGbGy+pLQ z)*D))URGZ*BW!TWVjn-HsgH z&e@K0(r!>YtW@pBBVW|+V)&}|tI_?o;UBVL`F;Sc??e1U_|iM>gO4MkmMWd~{lc5n zfbf7n^g46?dZ3l?&@)=ohIrt-*0d^aGpvf{?AEj`nsZ#!!Z^{eFdl5CD>lc-nXYMn zG&6)ED{M5J`%0$j;mm!D0@JuoE^T1JG_#Iw;g>2rhy^nyAJGTUZ=YP9{G_`=jpT-%V0lgERnXj%LKle9b&d|1oRgD+|M6>u3OW2X2A zUeoQX!1Y@G4s^V4?!Oh-Q_ClT7ijq=@G&jF3~tnNEf}Ny07rs-wR|c#Sq=B0k>#*FL=ae^E0#r)3n?JJYLHM;7BbOfwQzc8=Rx%O7K-JzYe~k<+nhI(>x8u zpf%VyUQ_C2Y=Ck&Pg1`|>VvFBj?_zbpr8Drb(B6H^fO3)lgNDM#=47D6X5UaE~2x@ zu|#hXo#h|=BYMjSNZLn(R(%%HV^%@Z{_oOb=A+M8^~gl08LV}hDWK>zlyWz88_74j z0wrMzXyu(9O4sR)t|OmQbe{V!wyBd*7$Wtao6&h@A42cpt>zZ>H{ydg5f=@~=jaBG z(DJ$93@twbJ_^Zw^ceUgB)Uy0SfS-g@F__4^9;B|%NxLNwH(F$5)Db87|^ZdIPeH9 zw*=F*+zafj<-XtmE$4$nv^)$v29lY{v0#C2zYx4p%O&7TTHXZypygQZyP&=Y`++01 zTm;^t<#MoE%Ui)cT2AMl>Zb3nQ^AY1JQpn2@|&R4=IFtFX9Jsx!vh=ys)a8pNDy2qf3sQ1E_8qTO~dU-%i4{e-x0 zdgyy7vQ|Z8JeS0hS}~*-AzN|%hZ9dKxtu*9Io5XOaX&&LZ}?_^4XVhP$D{a-kAb95 z!_ADGDCCu^iIlJrEAbNi6=EcqX&F|ymvpScw_FR`jVOg_j_Vw5q7-h%FBt9gI%8BC zzK1B4PlnJu>cpMnnyDtZ^5Q>=dOzVqu8cb0_bqosM{3sgWCv$II(cLIJ5gKGzfF%- z-=%No{MM%Lg8!2K8+=c?3OF6MfG0rIz0NKwLY`*msKthkT4Kb5t6*DnjP}8f@Jy|9 zjzB&^`%rI1o*Qh(*q7ht71dChwDb$*!OiH4l2Bdf45BIL=G>$1%y}$_>n`UDc);+&PS0JR%gj6X^sb}SsIK9z zygDL0f?vRh)|h2PYlO;s;~mMaSYI*!kI0Py`!=4Kx6fDqu4-1Ff{q{3n!eZ)&#k`z z9wvW{6~otu`f{k6WN7R)k8 z`d5Pos|%CQxMRf>UWm@sR?ShV$tHduX^*T=7g@_Lverpt-IT)k{d4mSuF`gT z3_B4#Ma!!|tNyFh51IhUv9>hhUWY{P!YO7w?Xs%%^FI?(~ZGxmvWbR}! z&(`}OX|H(?&lx0g;YNN7NaQu&aDE_>r)=jAg+zWDd{)Z~!RNGW`@yENAnDTu?5|}~ zkChjac5ACX;y6=mVdCi(=D!veE;rj}NuUIqg=)3gp05j3{DGUy_JR@_9kEquESYwK z@qb{X*>0iLKEaGKQ5NR!()G=K`NsQB%0J3L)#(4?cTY6ht3Q+xm}^O6!7#JFb)m)& z=bUc5UZYWcXZ~;D&nwL1o%5nTZh?8c@_6(6>{x5ITj$QgYW;elZm=+4pI0kx$wK2p z{5LS`^Zo5ZF$UQ6I1s6eOC3zn$G_p{6rDT|3UIK<*k7shE4uj<+9iAASACyKHo#xe z(O==7TdME7NPRt@`_Hm9PD8#FlJ6~c$F*7(yW_`@T&ACbR_$N0KlX>De`DSK1g%Fz z>h4loaW!-v{a2z}MA{$+qgTj&B5Nf_+9RbtwAds$MbypPA4k3wIS;+!EZ&l%m7c_4{f)rLnGW)rHL^S=3B;pNIpZ8+kfNrBekVuo>$I?ITehwRa^7D|6EJv?jd~rBQI{bOLPY-=k0Ce%`S&KQw?y7?r^<(xx24g;g%Y%Z@Awg@8WH@ z-P1!kJOey^Rla99xim+4j`cXyabzNS$hTR+$h5LS*3H|rZ1&i^os`|{@Dj&mUwgLk0U4fU0Oag zvXOs^+a>)I^0;!RCv^5br80dvzG&6U*VpGz{d}kTQq^g`vwa>l-gge8;UwQh@augy zz;E{52A|`5h*ux>J%apv((PntD$X!z;yG5e#xo=WW zOJ&8`)ba3hQZGt%sf$ym(jJx8JuOG|P3xb=nw@C_iFX;CHUvI1ZGM_xm8O*;SEhZP z)?a;>wjH@P?WeRTwJWVndX8$F-kGbcTY7i+7Bu>nI!~{4d7E;y_44BKQEEo{bLCyt zlJeJRImxK)etpGr6*+22#mg1Z>XnM+6%MtcqPl_zqRLPupSiLdd_?8dmD%dr%I_;L zR<)Hs((+5?7ge?D%c^Zv*m0}Ag@0GI9bU?u29KZ-`#m%2_Gpjoj_7!2u}W}$=3KA7 zb?$Q>q3WH##{91KxQaZN*>-t;=NI4OneM$&oe+0rTqk8qaPW&XPiR4f(v}HH$f*f_ zc(;UJv@A~$4RMXG#G#I~IjY=u?ZA8buaTjn%&l^yI8#QzaICYYd(3z{>V*}=Z**5JKCx4N%M zYr5FcpFN1}d>8GibqtnrZ)-pN$krX;om*cGzqa*5@aI~84By&%|D5R&BTq&dcJvnw zJNm0_f5Tp`4C{DNyGhu^?`gjRuFN$oI(O;J7}I$ed_?EQGp(;OzstmGkbPn{*5w0g zh?_I8s8C`kUNvX#6{mWHWbQSV%%YDXO=x52KMeVx4DXOLT%ldEJB8|OosInB2aWppdqa~;FS+!Z z(rZf@r%N9x%~117ca)y2c9yC#;xi-W_GVPv>*Y1&>1s>)POi1i71@krCs!=4C{)!I zUsbeKS65!kb+^J;72?;*GpZ&KK`a?(=T%(*-)^ic(5fy_Z+8TZDtBfshc(atB0Qu? z#mjubjE}ZrqCXQ|&6aIreL7nYcyHTq_%XIC;8)tNh0n0fv{A3db`$c=wp-w{Da%go zs_jnr-L`w+_t_qRKVq8)e~g?YG*nwDJ~LWD!z48HGE~%I{1dDZ0$PeqUK7 zysGS(GJLdU&%vKBTTaWXWv|0mm93%Wjj~_LGIiwpp)b&bU7!C`SLQmKL#=OcHU3P? zuZMjd7U5~PtIHhIxw;OPKXKr7_#W5ZM#mS!^2|DIr6 zko=rrBD`S)K&K#UJO{IA4+Xoz2WYSV^}zv3{U5wa&CHS|>T}ge)##j(Fr%o=)`c;u ztF0%zkL@VYPkH1^&a@ZWi4U<)K%Qtn7k-}oLSCJ0 zpMpHqekpsnmi$tOnrXkD_M7du!SAAWnnyiqAL=MmQ^*;ztIHi%Gu~cfLhI_GUHn6v{99+)g{W&>R!g!hg;2W5ej$Pf%O@U-_fd@xdE{J@g7) z<1!~?MyZLJ7cyF2l6e`U=#0!Skhf>n!gpn=EHX7Bs&5V~y@*kCM(M-w)@5B754)C4 zhF?{74SYJ8Lw0pr*_~z4>h7|87$@&9tDt2GxkTi_l&z)x&9Yw^IZv)Cs>)DPjP;C~ z${f<;>ZXQq2jUOq8E^PR#UCp2KfuHBiylsF!e8-`O3cE)>LZmH2P-xq($CpAPQmhd zHjY!U{GW~E6f9q8<2VJ&FWNXxLE;nS9KHiuF_fy7SsNtn|B2%>&qHJ!AE)JyEvQ;^ zp4zJR@J__>*~!=LLqwk$%a^atB(q$yw4LgC^#XlX5Z|}LezRkA^hVnm(PJ46Zi%jr z?x|jjULEaFyNn8~E~lHhkJlLoPjj|%I+WjezVldhf%76-to$cg_vN>k-Eea?I4c6M z$mLP{T$j18#5R4o_h#D--k;-&Y$wEzj`yfD;-eBORJ0KpctpaD2~*UDhziTc_)cKv zQs*mdKEZzIh`|q&K4LDTjEKRQWVd1e70a)=?qEr3DRY@}V+EAaX@$&U%=HQTrtgm) zG*^_{nBFol*pU*wv{<=KAi;y=Z#%#%gCp zSt@%jD!(&3TE%3?W|NJO9ZzM*gzT2c$=NCJwCq;2__I3^o!FU#8_rmEZ+O4#Jov!u z!Q^xgF`^dnj)tDK*^LbN{`fwZH;7=or1ZK{kNU}2(Q;Zu9OLihdzky|EzhpVB@b+D zMM$kQR$VjKTQk?g`pj4n&&mn&)weyVS$#`9ohkL9`Xn{f$gMxR{y179;~vM>k28Ft z=hw5!GCtA!@QFIY_?4*wN(=}2WOkK6RHR2oMFztC!s$9TQrG_H7qts<#m)p5K-tI( z!9|eV<1c_OYB>`h!ca)+^$i1OLj8~zgG(UkzXFt42a(?aGx0NwLCylRA!*MAyJ}ft zAZnm0+P8pPb-SHev6UMwbprDsdGA2*&+?lkxA|s%+-F9 zzF;@ z|7@%bR?SSQlX(v$@4Zi~53TT(@XxQ{iIefyQ@83Q&|1$VGA?AoyW}oH^4`d}5dJ-2 zv&L8KltfCKwJ`c3=P5I;L+XQ#C9)%(8YuHs8%EkH;$_USR$@G?cL ziHsco_l>&)_MLpt$P*c5$Jd`*AFa+e;!kXPlyx)8dcz6u)NmTyuOm|WBj<(BV5~ih zsvhXwO|G-j^!!R@R=tdw)zOEXS>0~Ciy73twg;IDJ!E^Bc~QgpRVDkWVwT04-4U~_ zmu<_KYb|H4g{6}Dm7~G@Y6tTxV&wJwN@iBw?7f)<9c+GeH|_V@pM@VdFPiIk%8{;~ zK8$(MUPmaZo60%l?5Hq$7I$Y;vm=$!nQ_LdY4DJYJ;ogAzE<-Xa~?a4Ig(kQA##p% zV3qm>x?;l%ewjPH%6#cHUATe3tSk&sSNsGt&EYI5zkLbAGLOKO5K0!8~Wlw6{8l=PaMA&CC=&rh)%# zF70;)O;4EV13S>;WqP(Evw#oG|NVFRx6IhWzwhNz2h@hL{9Y1sc)8*6vZ_UOtXqD< zBBNT=UZcv}+4bk3Q%^ARm(4o6ky*^97sAYCu8D{<+CbtmT{Kcd@9 zzztA{{_lc&b^GP`d#`|GKWp9Wllju+UZvjWx%&wu?OQ-=E!%z<&Hp}Ejdj> zDK{`zfux-SsCIfD(h)pI%jbg^YWaHb1})zPR%rPd@Ea|w_n2ow#<4)PQR2&SM1rS6 z#<4!czV=U3?)ee1`H-|<1WwcPW#IK%z7f1h%O`B%8M+-mJCoh)A9&XesjtWW!OoEE zCj{QDaO>X}k_s{>IM8za^K0C(UOBB_nzc%ze>BTTOju#Q~Cdu_u+r;J%;+jxc36o z9u+-1`gYbtlNHfqJv1j7_^q6AF+L)ZM#L=;&BFQK~d#@O3j zvUb7UE?KYOB_fetcS+2qtWvOSIfF>=XGL<(8`0 zm$_%KR=`qL2iU-04J!l4x&XV~UXRqCZ%&WUR!`m?6XNY-+Zm0Tp#`f}FOSjq|-65IJ1 z>t<|Yy$r<~jBRBWtsRs@pn`~i{?@VPio*v1w4s25r3#U z;*pjmEq`yRl8#6UP^Tb2>Exusq)U>DlRiz7JZ`BdsgmQ8C68OyIhIw97bO3Ztcd-T zHQe+08R$Rl;V`Clm#hoq-;p}hzUq{if1EOi&G+BmZh&r-;hqGRz?fI#JWhmM~QGLz{gsQHQ)m(IsQZiM<3pc z5Z;NRz!dVt9|_1jPU>8%;H^Q)%#ysU!Zw$5zO3`E%-xx?mSI*_C~H#ID2uz z$vP>!ID1#N>hgXUBRVj2U+6(r^^7LpYDdoA$5hE}Pe^Rvh9^3g=Hr1-%-f|pBXKC@ zl4F&RKccvNRrx#AW~(Vb885^&6~)wM`>dizWq##|N~z6uCQ(=)SN>Wl6$7PSpi~PC z5QkMn6qZzNlXWCy6$x2GLe^Q6buXpHqs;j;m^*E(%iAaQvZY$K)XG+5Zw0WI6-ljZ zR-BOaCSKHPX=sAEC&1@?sp#09S69<(c;QStj&=V|!8MmfjA zi<}=gC#uaxt?w<)FKPMO`3?LBXS0|##0%!dki%%i3$~0+LSIaaZ4GZ5+aBIAHWR)n z_H+0bvERaX#5%AL^dSbDNREi;>yfV0XgS+89zH`yV!w{uFcNz!p0+PsHg_v!H>%_h zXi)Y3IJDFg-9>J{n&Q6H9i_~bLY6mJ1>|k|Y&F*Z*yG-dY_2vjputKK$9d2qjg=(M zHr9}s$vxdqtvE;&xAJyWHY19AK!eqrj`L#gH&$;t+gP`0hK}xzTs!A&`j~OuTa8t7 zl#cF>T+!8x?mjz?2<^BTajn!$V{NMS2dq0~MtbMOcZ+wZ?u-w_$Hp&=KSwm z@k`zcE^@Yk8;me5_&r;hPM2vq|g~h0@RUL}T zLAJ}VL0kpNt2VB{rq)VG;5F&fh8TV;FIv_+e+n}8%$XNIqsYC$p;~V2bF}=7su}$u z>E9mA)w1{=#qTKX#h~~fMHc^~_#H(SpW}Khi|?@;B<(%H0g$BfeGY!3+aqf*i=VM6 z-{Nt+Ci^**Z_)B64#qzyK1Jy-ens&YiYz|ECE7nIzC!U4O8Y0^r&<=Dq4))*Js+%s z#MdT%!X>&rgKM=DBz?puD84|E#UFSuKcKAN(GN2A35qXJe4649+^pNB(n+Kr(8g7s zK_8ZmRBlM#+Z`1DpvZl}0a`v0JVVQ~!TYr=KEud0gT;3!@4X8w)3W#ypVx8@_sHR_ z%QH~y`|M{hC~NeH{vGLmY`kWl_#mbKE_?yvgB1A${Ey;`l=Beji6d(T zDJ?aOGOf86Kqn-9V!>oBAI`d_!@tFTv6I>hT!=Z~(U9z?06b62Mc^%3=B1`L>>pNs zVx+Axa$Xo|KM~uBWi#1=&&JAYmK--(H%LB5%$$6JtQ*ES8O4c z4Wtm+%K25B{@;k}I#_&_*xn*@ng7UN-tq6T=SUuOq&+9BuQP(r|CVj%KXb~%n^Q*G zL?tu#kn1TL>+4(}bqi6Wcm9bM+*tqpJVO8d&iMmcaI=_Dj9=w6$eP)OM!YYkWo(K{ zGID1cYQ$M+!K0YV5-p-v$T2nIelF37B@^+)19ah~uH`PfTG3!VzIF86>@qdtdRH2{ zglG~?uLjjvFJ4M6Bl~Qi9m^VdmUb-b;+fiUKe8KHVXA?SynnT|rgdalUu-jTU(u1H z&~_W@$op3~jnt8sdY60oR86ch8L27vjq4}bjd79s@(5Z^i)*YeH?>;pfm-wM_~X&8 z7REn^9=*iSn%5euCm)!XG$kT0DN>tWO`hch@+|)qJ^CyoYblXAxMqqfGr;@}AIvjJzjH%NG558#8jzuY00BSgTC!Uth}1 zfr?yT%3N8>%xs#TRg*PNZOIB}$y!sgexkY7)a25sXywz4{3cU3-%+}g7JIp~JW6@W zTbC!RHin*_$&C7xKQcI1p|jT*Sx({db`|Ya`--dz(b-Rin>zbqBaid1>+CBk(I3&= zJN==#Ge=inREg$pWk{*|t#(^|0&ywqOS@JgLDbveeaAtu)4ub&MG;m_?gohMl{-pL?J?T8VWmn(8RWy2)PFE67ET88hj* z)V-2Euj(;Fyh7{TTixuWs`k8x}KSaXkYWGX@!BhS<$wnNgqZ@v8CI&HSnw z`xx~r7!_DWz?;w5aNxSf)~K-5OUAW#wKqn+ZLBwIjR7|9b#n|DXp8|PxbIu&dGeca z@5RNcje4G(6Mu&4X3UBY=l-6Oa9sk|SCjX5mT!{E_Jx>j<@$QU&3wfE#vOlp#LU^6 zE#FA4^-au~W7Is~ShuR|7hyAOzg2wA7N}aV*4z>*xJHh}aW^KWP*%Kmbt|_kTNZZ0N{+CZZ9TfY5 z$P(9V)n#jJTd-=hMcNjmUYpn#q;Aa&Fw)LY&Hu8`H$bb7TVtDp*czmd*c-&wFdtcB zoUQt9kv0ceS6Ax28U4Yg><`x3O^xjj6M2us-%bJ#wsw=mK1-cA+5Z?&>=9BeNaCEW znsJTo5?1}V#&!v@N63D}CL#6YL>60w)RhxiY!OynxkK3^ta@`2n{3%4r1qTHBko{7 z5}zDtmynutvVVzBKA2siE2F}}>=MIi7u$psem@C}v{6V+JK1Mr8--*cNc-QlQAlk( z*^k&K#5OS)`Bu=1k#20GkUDzOKhj3gR876Zv0cd8g<`)T48mALbsqMMr>J2gb_|KJ zUULMs1;Kx{2H&9fxK<(g%<3aXP)Ovy;DuVg6ubeFRn;B_AJgsg!DqEBHWeo%@BOQ` zln}8Ghf@dekJ^8>hU-xOZy3L9j7?$_?aBA=4MvV%Gx%T5%VO|(El1XvY&@2A)?-r^ zXpL))$Fk>ntvmaC0bH*8M~-D;JMF?)RY;!@m;=dY5Id^WsuX)!V_WJMw2KYyOE7Yb zv*~dya*WHTO~$Nt^lxg+>c!ZU2gz}z&gBp-%Qz-uSTgO4!54M=%isz~awMujsfQ__ zQ^vPN*j0a&{-9-hU5dO++gl^+Wk!y7T^Zl{=rOK8D77?YpOH4%r)gUN$@sevwCuAo zHp;j-k@i-gUyqMRf^D_j9<;{IE{vN!wGB72HfN;WR>n*jBjr180wc%Ak7Zn>-54iR zsb`8DX}6W}u@@wLBJH+~$H!B3pHX1sSb3jrmvzUjaWiCSP3As(A@_%5|1y5c*eMn0 z?glM8Zzb{qNct=S7i)P5_*d<}kz=cjqq5S*o#4HYT!%82$~bx^2m2Y6adhvojDz68 zYLv=&Dt6y|-a8kx?7uRG%DDNG9ycewOLjlw=DDCXZXQm((*HkM7R&b7T^>%R$x(Zy))#ILF4q!Q;lREqh;^(pe_t}XB#uAT6`u4uQ5 zHNg*eb@Ner{qm{qBh)4CY3Q*xx^IWiao-8Q+g%Q?bT5D}axaE2A)14u6U)(D)ws7H z?{-Hs?{s>+SfeDSgUU;u4)9K%5Ion@72cgV556g}9e!f|#xip)^o*lrisyPyqPmet z4|ELAT=-o?d~m;d9)dsOd6b?K{Sl=k{v%3N5CcLaAWE1Loig*ytymuVD*n6XwRWiM|A>ZMh3%|=-4zKhshA$yngzrV9NKn;y zw;=B%UW7X{&Wk=DALoN7#`S^sk2{_UJEz2*iaa)M9Q>-d>F^tgDPbk6xP|b=aj(E7 zzQmzc5@W&$5+B0yl^fp`o*zFHJ|li6{D%0O;;GvbKO6bB_{ZT-#+T7j9=`y2QT$@K z#G$aC_}7so5{2t3AwMBs4NMrGz&Ju&3KdBbZi6ddC!V-@z5*XrgnT2BNBho#kMm9N zkrnT|*cZzhIYqQw>XYa69X{1;sHC4^hG7K|Fhg5GzA_@(u8t zlgr@}H{(Oyz*^}Nq*f*+2P}a?mC>W0QFRgv) z4D}23Py>mTLGujFr;_nMLVJ)UZpNvcIbCwlZgTE`m*lK~@5l+mRksx*;K%QM3|?|X ziA}X6x`un?iQnMrNe|XQU#TD7skAfv;?k1RTs6P+E95z4zm=V<>dI`);2q`B@R)Kp z+*^JmJiq)B_{{Rf@Sn+W!3&Ac;d-uE1h1+168?3? zkMKPe^>9_$p_08-4uTJke{!7snVfdu3Sb- zHBmlx^>O7V$TgMU!G9v+CqdZ{xlU+x)z&JGO9T+VI59v($Pxua3vobP4@3f?@6`G0 z>?%;#p^h_C*8|?Gt{;3rT|Vst>juMz)D43VuUkm_#=8FdxT1&{V)P(pi1WX%4qjA0 z4XeXt5;deIh9`&lUg3H05@LwZ?1&;FHkLRdqMV5&V%-K}iTET$ayAwqZ-hRC>LA7Qu{{)m#zRt9R!BL~wRz^{LnEO=XcDAixxb)Ts29{v zQy%yzWYwOoLH-4j`qODHbKMAeK1!WhA$c;s07)HcsXhH34mde(~hi`Z<6A*qWiYxc@~#>y8FyN#^TZLQBOYjcaeW;i74 zY+Gw=7a$9XtwzXNV_W7uVxuX7WNmH5{A3(d46T7SK(bz1v7W0)jEKaAC`R=mPysXw zDum<-Pz=2YRYPw;iZMMEvTQOTWXXk4jNnp-w*-=Wl`!OF+;(a5f)eK>^NnGUmCI6s zTn1G_GT)FG5wXE2#(9}L6hKm+S9~?ULyFN`>Z;0mZIb^Yb$aJOG9M5fUuAGzLwz8z zi&(iag~$&;)_QI==G&@97bJ6!Zy?Dr846jk6>6gyS5XK`OohZ#NIe{>g=5vjDMgkw zLS(HES?6OIB9VEB6~D@$y3I8=HC^S_6Fm$r>ETLIuz$XbdDZmH&u=_<{XGQgfya)E<(x-v((K z4xR#?2Au;Z;z6)RuG%2l!QRD8d4-9rVC&txtnIVKAr$uFsfB)7zhZI_%9$s@614zLQSPpQtN$oB2_ zf?ef9886yZ0Gj^}IpR>w_q_f)?R&)9;ZVmk$GV~IW=%X~6`$DHW-!|Y;gBQzeb@dS;O z5ivGN-IGoH8nT(IA1HN-`L9vWM8s3||EFm@U8AhUDcfih)EOGj)F?ITWs^EKvW+!C z6>1!(@obIbHJ+n!f=00i$~MUab*{$qG@h^V0*x1Hyh!848YgQk(l|xqRE?KtoTl+o zjhAVZ^?+o%!UT1t#;Y`5t??R-*J`{@<8+P18fR#nsquP^H)y<3<4qcG);LS!EgENQ zyjA0E8gJKlhsHS?=W4uD<6Ro>)_9M`do|vt@qUdDXnauPLmD5}_=v`N8Xwj8n8p%~ z^ELiME<+)3`+A^BP~! z_@c&_G`_6y6^%EFzNPVPjq5bN zqj9~)4I1Co_@2g%8aHWtU*iWFH*5S*<3BZir14{opJ@D4<7XN_*I1)*i^i=QztH%l z#;-JP)A+T15rrp}N|{(~qECg7iY|eGL-J-Wn~sOI}t`Iv8!W9ihjllJ=lJ1o>@b#SwO?Z3-f zy*cTVq-Z5Moy?T~ww<~xH9BpKa{dKt^|k37m&{M*UF3e^OGsY`?4P21 zduf>xm>!5%bIB}a{u*p*ed_(ysipoD)tU zv8G=@WbqBSAv>}M><&qLPf&aYB8%TZd+(En9vFd2hbQ^hFr^K^A|6$i<-eBt*9S5QZFwPX{vk@FcH*M7DenMxO-M zK!!xN{17hW9NLEJcJWEPu4T(FA^jabVtgQxuLqyivgMmF`ZVJjhD06$ijP8mBk@yA z)$QW1xE_k5{RVK6ZeIz$uH}!wPawGl#HY~=l6^J@J8M~d95-os7C0M{{-IU| zJS{&4mTOu3BA;nFy1D5Sk^NhK5#w02cYs9h1ctPn3wG6Vcd)mX`-9>$X-$$o}|$7p#hD83VE7yrq#T7Df|rDgG{h%ZIvw==+JAnE@h__3D7x6%cYcJZ-@ zPoE8zwpG-^SGr?PQ`#ey5G_7f035u^q z`is9N782PFW@|YgoC@XAehDZ(9HT!PjS~_%7IbOZ1BSFb3>1G(Dt*R*6Lk9|@LVmQ z58k3>@%xCs=O}i%1^fw;{fqBM1^7P5HcDM7I1shCIad{TTAOrvFD|@d1s2 zM7I1tMxP5f|B%SzLGk~HZ25qUK9f!VkH`hc;^$d_Yy-vLWAvG2`g{!ecGK@;$O}y0 zkI0t)M`X(fB(miPGWstyeL+S$viO5UwtPY&TYe#Oh$vJ6Qx8L-Q80Sj+M?|)KBqCdW5|J%miP2yCOAML2UVJ8| zEcd8+tpAJpi50(Kd|&hwiCqxcieE6ku5e_gl9N3R+DCwh*=yG)0SaifvWb2tAFW^B0!l-L*PBk?a=v@CT) zL@&yq{eOjCwCVqi+9A~+n7_sU)S6IM?2lXzJ<&fU{zv4)(nY`Jnu4Ui#Q#Wq&ypyv zAMigq>VLP6%8$^*cJh~n>&{!7n>5Rw9$WJMoITIoab{r9vgz^n&S(~W!&eVJGH%f& z<##>hKWWdFk*m_rY0rGtrM&8sjw|x|&UbdK%xgCKgT8ltaPrT!F{|1Uq zmCtuB`S8vgwtjZu%&kY=zkAq}CwiX#j% z`l-{eSaAMr7v0gl;>0msvz9G8;j#P9yz$4_MKhak>t1|C=F_c*FI_yb^R1udy!~vj z;H|#LUG~(-P@t~mt^HS|b!xNxn9uJ{x}e`TFMaZK+_V25dv6{OW!J}#Uo8qPq=kx_ zq|zp-G_58fX%newk+GF6WXWhVMQB5XrhV*VrzDY@CYhO~nWeuxCJ$+5TJ#O6J zA^W0yX78jg$d0(W!vD7&J++Bup*{D*auEBd)NH%1+pS&_9eO|HXH zbIPR0^RBO&y~NriF2(+$w2z~0mf-3I(eb-Y<(CKDA2y|6Ws~zD!M<6JQ>1nDKdEln zX?J$eKzc!q)fV3wPeMO8e;c?^QX=n;-13%b?wmVnHuLgy417E6&!2ACdzSZ6X_BzZ zuJy+Lh{Mdee%p1Vquqmj*g0cyNzL>Ia7U-to))^x%fytKi@9PsYt#%8#EuT`gTWYKW58NkRLy zDXWKMzIeI!)Qfd>JCoX*2Rn@qP?g;jkZfpv<@<|S4UY}NQ#D34?yV`?p}bg9aqeA5 ziR5bubEh32^fgXj+A@1jLEgnj^1q$qB~vS^i?U`(9bzB3eP!9Y=TQLChY72cb(;?v!mVv!eYnStBnuG)&p>^3L6# zsUF=4jhjxHpGoydmD223RuXqjUd68M_O~k)N~Z?65AzOrq?D**uj(qXW{Q(eS?Rm| zKQx-9SN_=jZoS7tJ8z5P=1W>JPtJ9$xU5{UPgkX@Uqg<}i2H1Jqm}k2$~U)o_7DFO z8^^XkK2qBIxz6VKr&j24jVm_i*>j5~4}EUGqV3G)yZjT)w|wv3n-y4?H^N@Cxh3}b z7mZPs9S0U^DSqr9ek0hpC`Ic<(YNZs8{S2EpAg=*>AoB&!?^MEvGR^Ul|*Jk*uq3N*j%!wEc)uGbm@w26O^mpxXzE*bIUfdxH zX1(%T_YKSaGz%rdOGl61+y8CcHsg20Vh1euE6~}#ZJ75(lewxpHa^So4gM|d$!s{o zshDu#g`AHIf6?7_=N&E5g(r4(2g*kU%H_|Vv`o6|9d|aP+tsxA!jLO>=I?rcFu+UE z-^-?x!&(2}X=a#j< zV$Pp)(&YY{o0hj0xF4JvI>xDAS4&*#)$pZLyw8qL$$D9E-!pdfPQAjDt&=^JFE>4& zFt+*llg=S#^6vXigoK?vuxsM(X3mddO;fp1EuE`xjbnV^OnYt*X-NMx2$jf6zsP30=?MXp}rLV^w$!GP%fW{k&u9 z6R$Agk{!n;=r;-UUYPHIz>fj}xPNr=68KA@}WlG+9F1hUCzAeS+ zrk-+3k2)4u4PA3;-=>x$DmUfj3&W*;9V#)M6C7(3z9+o)<)Om02TfNlSn}gp{~=OC zMsG6xoxEq9LBEFw9=wUJpL%*z=hg92VV75=UtDle_L_4_V@96En#TjmEc@jO%JWVs zs_Ygim6&QOR@3Rw@fN-xEbaIt50`o3Jr=iws+q@xJAbD?zTZgqVA*xtLDjVUET1kYtN@g>xw_V+3_MP zzH;_ntL(b(m)lwMPTwer3ti`VI=lJG{0FlZaZ-5RCO>(V?ajL%uK4D$iuY2-<>r+K zzGJ?!#;^VnH>>V=MX~ZjcU8r?i!3hPs#s{6aPp|V<~a?^Lys08olcT2oWFPeNr^A-$@M`TxhKlz?T3w3X%Uc3f`D*fKr7FmuggEoXY<)0veC*L;~}+{TjH zX?hWZEDsDSn!L%wyZelGMXLPT{3YWg@6DQSV&#>7&fuz&S!MyPpw+|GZrQ}T%dJOU z4x}C4wEWu)e+%Dp0W0GsZ@6fFwej@z1v9#K)328YH^0R?C9LL7%>DY~NZzY~wa-p7 z?s&gC{N)FI>4>E#b<6cr4dYcpcRJHoog6(RX^YgQT9xOCOZJ@_G`6++^o!^99O=ra zwe^qXBTLHpBEPj0Cp}qPa&6}wrPBkXpM8&=xZ4(^<*wQ{)7sgm$j`0ZRk#BC`l5OI z60N+l*X8*>K};iTudK~isS=Mz^3q*VX|1~$r$-&#Ta;sR`$~~#iMk0xziRELyn7ca z&b^(OaO9w!;kMzt#EdyuA-!gre7NGVy7m#0FQS(Sehn)7bh*GXT4~Q1gTNpI^=yAV zHJx9-{WJ!y57>H9ZTY^@&6f?X{+h0J?9Hb(M&^@e5%aUFr1Wo)f?PionEj^|o)PWbi4EaTke_ib&|GyDz9G88@wyGAa4 zq@cZGf~$#(x9f)Ur#iWkKdzpAT3^z%-pX)tcJiWo2DkJ&bYFW%SsYSvNT~6?6`*k{ z^Q65?jA?Ob?waFP)*4!KVjTx<81e1M!L+OK*}s1eKVU4KA8z6je#zYTxu%&}<1Dv9 z*~i@dbo>1p={s=Yt;zHe`m;V5HHNPE$&Gn9Flv_X=xrUmn24Vnmv}wxQvOimx{iDC zf&TktBagKm&HN}VD`hRe|E=0=7;{&A1b^yVmTaq5Xpxb#*J?eFProMS z)dx40WOdJrZfiN&l>YnKC7EBJ%qy-50__{sqO5-BA2mMcm|5^B#WgQtfAOzn2P|#I zOWS7uSTDIFdT7|)L9>@n+8Av<=CXzKmy!*u9rZI#+t$l;j?e8ZYRiqNIlgV`r`%WP zL~p++3f;HqO%D~_+PBz#N6jAYWah|E=Wk?vw;miij;Zp*Nn?fq-d-8lZ!Nd5kNR`;F9ZxdFQvuO!gyAOU^ zLD!n~bJ*HApEbd2Dg-T>)4gLZT^aGZ+lU3Zxzu&UO0ag@`mAZL`%L|vbC2#1 zKh*9dlC2O8wp(m6HS^4=W9vgtYMMxQ93ObRDOokWZR*=BHJ_#;w*=jp^)=Tc;!~=d zuAG&_9-kbt#Od({J^Q5mvpNgq8Cj0SQiWOX`ypqQ-?t2~=Xs2(?@VfG)(y~%H*0)w%s*u7)!Wsh(mpEm zFRU4H$=Ll@NB=bcv0+oMi2`OJP_;C0OCw!MtuleL8b8TA?0vR_BX#ORHT#At`FPn{SuIPrXGzUt6ZyRhKj)?1zP&{Mi$`|QmvKWh)05~ERQU$u+AEsVQr?`-wXDvYqG41^a~Pufc6cIv z+hP67Tg;441Wz8k_4LN7y!I>Gyk{?LNbqddPfoE85IN}1trO`eD{!ZcuX)+c9B);4 zHDJ8`XqkJWcF7Z3bCj1I)^mCLu)3^ObN0yunJl{^rK;iEJ@ct9fZVe-yNP1nC&t*8-Piqh&3X7r&%r)oq1qX=RJ&r0GOrYO{H5XKD7DY0;kzjzqO6yxN@^yht~3LTX86v9n)rNfYPm z&y{Ot-6%eCy8pUZPwy#VbAOK7*ZW#3Vs^z;$I615U z^ZtC(@7JOECM8zkJ3aId3(wqo>UQGDt3Opz=5G>{{=|8y~hl zOY#ft&|cu_5^8t$fzc9oohPI2UOabHUS_GpE%#|B&W2zY_uQvj*2HpWmOg9;kLR;)3_05tt9L3)N44DzH6L2Gs-+9{gA_FRr%dFSolccoURMQUoqd1Ty(J??39S8eU~H|rkU4GwuP zEB$>R}?l`Cv6nyH-)%!j^#xhkqq!zqXNxSWoGU#)Zwd%;>X=}7cs=axp ztEO|yPwPjazoC;<(VbKJm5WA4*#>s}j#DWd()}@c{5t<_!*yJ5-mPfKF8=+#MqNEb zh~dOiK%pMm!tj}Jfsz=vvg!qIC}KxBZ7ZU}n42gnV_2Tp#3UPlA6MZ&|6 zZ1fry7;V4&t*Mph^&#+wISGy$Y+v+R8-}HAk=7bxgI?>xu&|b*;_*4?wIqz^Gm2rp zajOq_F!7TgH8$vWloNVQ3|lNi`#LSK5WVii@R14@u@`9_fz1u;huqez92^)1<;Yj- zcMp8>_%nKqYF()E5naYXC;0jft^LYP=b8M(hgZn8~mE;{rB}C0=W)F9_RqcVS6s#?!X5pqg=Y znZc(-i2)MR^5XH=(n=+sT;4PG(aOA(TcP-CQ{j`bqjgR@nhq3e90srbaZb$Qgx8+@ zQaA4CJ<}T)MoU~s8&ct@el^Tu&H^F$@|GgyuTyn(U-gf=vTPD~eQ<@>%v9&l=OHVH zOPrpbj4?)-?W-NSbnSuije6~0s0-lajE|(3RT!@F^_p27y=q1K-jBO1BaW%O*lm^`6m(&u!}@5((xEYX zN>+5dOZ(bwJ@{>j;hK`t$Vtcd5C0^(cTK0|h+N>2qr>cGjy0Oyk^CscM!E9yq=+D$ zeb=HzUoS1n>i_YSQ&VADh4HFV&CmTM?Q*9$52^nhWF0(9+oH0cuJT3ssna%G`*!&D zt+K`Iw4cXuuC%o)Kf3-Z#@g?=um6j^#48#-^v+H;q>rr1B) zYkzNPMRZB`>WS=}{cXC7*6X#MJQ0-Zr8sTOmxP;z@7hngpWnQ=x@2!v%X#^TyNWHX zM$4M>OIHT0Z_KV;(`w0&i&;CZ>p}V4aLX3EHn-)m1r32B#V!>y-JQWYGvxw|f4#k- zS+}S){ki+?G3lXu`FCnqI;Q!tR%@Sqcry35UZctJI|hrDn(oTf1+BQ7&9#h=x3Be& zj7%D-bo1%#mcvU!L-R((KUsH?Y4tXI>86r;r3pWqPw<>sw+^2!Tr+*8S=5vz{KWiI zbn90scdvdKd24vvYPlDk$-ciw*DhSicF?e0;28ht=j>7UW}g_iDRi(`ZqDk^9|sn_ zP`jNlsPVw#oo@49c6C(y1@8Y)8L_uzS(Yl#_E&X7+J%I6-=W1e!(Wrp4EA~r+U^{$Bzq;eB@2vs&FQwpYs+Yt<7Pn1sRdP zPCIW-?Z38VYDv7*&R_4Jq)BX_%RI7S6We@9-nN}7oJo&TmnE57+CEDIRh8w(@$Yp_060mtp=qb=U)aS={la6 zF;UgLAl6hTEBl>a>K^-0Mu=px^UX_>V5XwzXYvP4=tSnEA_( zZj2lEc(8MV!c~XRrl)qwV5_h&|yC zXAORK?_1&yMU(h`oS{;M-#hXj&2fFvqPcYcDnRDT~z|@cisq!%ETf>#@3-XD6Q+lJoG=_Org*eJ6~nwDCxA2++87^s}bT z=a{K4hOP{$9IVl8H91+Qf7{cH!40dk-|KiyoVc&W&U}G)w3NkV2ih3357E!~4{!I6 zlsUCO*N}tJBFY*3iJR>v2XZJl*wamCyZ}ZOw+_nYRUgw?f+>tgTr0z%S#Swdd z1i$uQw#d!gJ<}BYw_cl{EZi^u@zkoPx8)ia-;lmCzZ>l8b9ZDQbJU@nk6n$4D+2NZrzBNfcigIY z^a%;FJ?wqEbLEs%i)!ZQ zT#Cy2I$&qr?jONwZG+`Ur^i5~Y?PT*K8uG5TGhSF&z0??UHD-Kf z*zcDm1Ka}-96ERJ(y=q)ss+o-b9Ibdt9P)I`+rzac>QOLRj1uZf62x1iRLN&?zLSh z{gt7s5O+dy%-H>kIZ5^pb(c-sa&=SUiS5_85iS?=zOV6Re}B6vLGyy8RBZWZ zF=^xNw)l80EeVWOEfiF2R16E(*<*ceNbZ+spMSMaxse)KZ(wz8<%g~82e+<OS<+pJ@DCes$3?r;_cG#9bm_Jo|X2+3HPaZ&Ho^=a7or}_Ko zS((wBcCBD0U!5!XDRJP!AUoUA#(NvpY6eUcWxs2lsPlG(@@M%kKmBv3?n_i`m{zf^ zEUvY7&eC|dlxJ0w-|ju}$=AfLV#$!_tJnMN-aOmy`(`(H3u}o-$7;;2`z44}(;S}4 zW!=rA#~5Ya?N_Ne@6DrQm9~zeK~G)h%bV-<7c^hKF}1($_Q<0_{Y-yU_HUo&!%EQ} zx#6F(*v64MzME1yHrdo+G`Z%zIWj6!^NTV^0oU<@AiG>)0k(0$*fpT%eD>k zyk;Z$K7xHfVDxmI&8!Df%tuF0ye`^&(K$xf{OH03L)CtqNgu-4$BOnZJeaB-_UO)~ z1(Cx`&xuOxe%F|uJN_d+XXQG%2N~bJC4L(%5Pj^}{Kdfe^BcFOd>Vh(^|hx{`zwnPLq}RUE4GHW@Mk9IZZ51n@!{n1yr<>Ig3oHo zSI%4>vgeIj@xnm{F}D{EtSw4E-I;$O^Zr9W#SsnR%F>Lp+{;S5Q5R~;Q>D+Wi62^; zes{o>{Hkc(KF~p>w?7BP$ z%L83QUfx^!Az^)7zfHo9RZF*Z4u94*WKz{$=_B)-I}@zgI~w1)$BgnDwk~W%%pwJ^ z&>Qb|7(ac%H{?mljnIEJ;UG_OK3`Y%nZ`i9cgrd*X!7?12%Q!q#rLGH|{bcy)7XAWa{*rt||#W zVYJ-Rh=k`%_R17n_nEV2`D}@nZJSu?`g8hli|I=)U%LK%x81jqM*|O}oyq*N+FRS~ zYrlt|x#6xCCuznyE2@n2*sHy7j#i;;zc}w_rzW>lmJfSo+%^1n9K%3kAYJq8pr{7R zQKpZtR+PS6E|Iq~RloS{!L4Zr@}wn#1AK1<*H#}H|I#UJoM@`I;@Gs$2Mbi^o@uO) zl)cm*VL8!!j^ZzuL*FbX7MI^|KDBiBq9vAhN?v|m8q?3<^T?`W!T}O@EBY14`%12G zJg=}mrb@?m_L`%2uEZETU7dY(($nG3KZt6>XCB*lMfY;^fScNn>w~fibeDWFIvW4x z+)9gcOD4M8Et8i{`Cu`oI-`6sTY9(L!=YD(UJmQJB>Ul^%E?`vnO)P~`t{R2WNsJq zy=69s_5DX`b>oWAmp^>cTx}QeM6T?e8?DN+jOo#D8s1E{I-ozK=K5hvllkukpSGx; zwd~@!;xlGD@7VQwxjLmwmR-aMTd}Xh-Tq-e;~g)rNEdqL4{VIhoNhV(&5hf~b)IBj z>(sT}H2v!mix)K2gb+sJDo^=?vGYC^WXep}s5I3tDvA$iSuJ>ew>);Mm#^El?t7a* z+w5>Y)w+6=`b7SSx!q39YTmA==Gg5R`*Uhp{Ne70#=qv~-!jd45opTvHreTQi+^x= z=9F(5rC;3CB0nxLt1la0tm<@K>w&u5;wLwbY%j5V%JDo_60?8j8Xe9=3ys`65^pMZ zwGrv+UAS*o;sFQ z-7d#=p1Yint!n1X@s%FDp+V}%f{ffw0dtyp*0d-278YyYXh(m&%s!u?SV8AxAIdH% zYW%>>-JJd2QhJqeR&BxnM%|=)ZV3*;pG8as_9*T^L(`_#{EsV#PT(w*DIEH`ztMi9 zkj(d+0;jMfp8YBb^?t7qlW9wv@kK2oZ`CjFgDSMwhK(!0hb&6-Uamb{_GFCP$+9y> zjiSUlt&u{dRYw#zs;x?op6v0WRz`tY&keJz|55c$e_vBfla$Psz;2zLb1v@=s2*9r z(YmN?maEqD1xvj9U4P2l8GYDmuxLZcngP;vM_wK6=$w|EJh1DGxs0~2+K7{uH-CJ( zSo6^H`=WDY)Am;+-ce>J9Wh#{;3i3blv-u*;^ycf!_J&j4%Cz5BbO&(r7l94YmZy8mw5YL>Ag z$LZ_h`mhJD*Q8!f-A=ce%sQERd}qPU%B!^luDa-H&!V>~&HDcHsh+o8PWWJl*zxbu z&en{*dQ3q@!u6!oqjPV^TX-1p9>z@AleeL@FoRwbzIgO*$qvVI7(*^ z!}{W9EeT^aBQrytB_$#LLB9oUfq5TpPxY`GExj@;ZvOI5-^RXFpU*DXx$eEx%_d=9 zs0(f6vK3gXz7yE6<x$*?PtVGBio#42SXr60tfX zvK}G_q5vXR59=XvAY$)fIYbUb0Ypp&KK}!32ay9&01;~->jm#f z;QV1Z2ciJAYl7n`!FEvQKor3F3!sdBgyTYFz_8Q zfhd58$wFRQVLONdh*%pehsc2_fQYrjdWal|0*KfrSPxNvWHjz)vYrEF0V*E>`9g@= zK@>p5zQE^0t5_#9LY5$l5OA#xxJ5cY%m z0iVNw$bpFcg8d<45@dT0lm)0<5W5^Am?9hp_QM82 z86pRw03tRR*28`rhyoK^(Uez_;jgY4e^^WkVztx8D$&)A{$a;YsP z$G@Ke|M~Titd}K4tgDlhM?u+DhipF=%9sUN&)P(;(?pW2mxuMU$C0uklvP)e@;oR9 z<&f(c4CSKxq)dEI2q+W4^#ut@KZE2HiY%bWJSbxw`oxoMf=Iqle-5f|AnR#HU5=M5q2 z&0qmSRL|H()?bGMBSiJsQL-MqQc3(EMD+|+a{bF-0YX&&pOCka)K78kXr1Kxhri-jpn?K_t`COzA2&vB#JSW>B{YFS_ zCr%bOKK7<}&rRv${>k={|BOD4&pJce>29dF2szi(IR4e)bCEqE zqzsRV>(A(={)_9+>SccpY=`s{A$6YOWa0lve;K{xk2aOuXY$`azF%Hw_4nn}{l_YM zXD4FU5Az^uJ*SuUFK+*^HgaAP@WBYF6CrgR zak9Ai8}@SlczxABG5llQB!4LHKuBGOxcResIe&5e8NJ*;as36ov|n-ko%=X{PA~hj zhLUPllYoDts_P&R0@@kiS4k9bX*( zyk7Drw!b7fFO-iUq>fLMCfniP?SlUxWb`urbHwEDm`3IXs77hgz!I) zOtuifeU^qD5DI#0|No=)3wvq5fdO5y8jQ;duWTFW}%=o?SFK+*6 zV(vev&lT67*W2~Ob||kyNF7Ikv18teNbO_&`YQUn(a4Qrn4>tNPfV^*_pA1ijQBas1Kx$Um!({=>PC{TY3n zKc|o52lcW)wukg{=}^HC()N+%j<6gdRS(7OAFr3=vtXP@_hSgDU|Gn&= zQqem1F!NS3dFi`!gp6MH7dJkmm-##6+uz$ib)Mqn_P*+G6FEM*A3@0J<@|Yl+&@7d@4p0n)PHgN z$Liz$b9&id)W`i3H-BC)#~0UM(8vCqUdBH`AN5Dv{7d0;QM^D%wIktwsXx>_kR?UN zDfIW;2x+QhIr@8Kgw*~*$TQ085K`wUPG*Qm`$eC-Ar$s<{X8-LySb0qsZ{(s3Ib$nSd{LzMy^GAOVf{@x@xQcA& z0xJ-5)X4HVupA-v^F@Iv+3qZChmc`Tmal>32%*>m0x|X@=wtlZ*{G59P90#GeVgJQ`6iJ@7UlYwddnYNKk|zRgL>JYBPRa9 zW&aCM^+&dk@du-mJln&O5VFMZN9CXKndBL*8zHTucl>ku`1fy&W#s%F;QSE^#LS=S zU!37SAzl&w3-MwKIDPD|(8v9w^|3#%kMqX{ko=?fJrRnbi}?TW{!;gv)D!giEW*FE z`8R@~kNFcvo1DKh90MU^7Fn(a%MteY7g$akM7Bfz5uvy#Q~e)j9ohdd?0`_XnJm|b z^~De5Ftm5{r}7U z&LjJq!~O_)#$@?QSdI{_1I-_M-#b5p+M{(KnJec0Kmg-18V@1rhfuYT_NU&*{|3Q|V)p1P8h)nUE)3{sv1<~0K29#4^VDgAd) z>d#b>&qL?@^A!0CMSe_~eK!ihSY&IX`iqoBy+a|Nq`Usy({3kn0%%Dd}Ju{Z_0RsDbJ6g z=!-sOy{&M5D4wjN^uJB%PovbwQO3X3O0Ea_hhLQE>rkFIgYvvX&18RMpRSbWWm5db z4$69}Df20(*slgOIb1~&XaKDiM zK<(c`y+?iqt)o>;`BI8sN9_ku{6AXvC^6+}&_5%8j@r+r_+3;!krMw9PwHaI)!Iq@ zLGcZ>pZtX^NAC+FUNyy(9}to4(f3B7_Pn2DIr`oiv=2AMlxJaojX$WpJB&l9E}J=xG z?a}@YqvUhjDf1mZm26Lg16C`MGSVj{O1z5wM%p8q_iD=bwN+E{C(lvj^N?Mbb&>s% zo$sf_v+dM;nvyR&ekS`P{tYPdz%k@_$gU<*N<{jdBfQu3h(6#n!n@!f*L*J;ZB^r!F6G>4Q}`W5dEQjY z^X@=9K=#3*%+HUqzcVTNcb~E!mniK6D9_Uv_SgNmOsQW-$uHF?_dTlWWPju@x+#7l zSevY$1NC2p;s*^Vsdtke#u9a`Rt{V30Ohw%sTtw!muFHeq# z{Le0!kD&aeU=mr6;<7Dee$}+U)}N!SUzTFO)c$*6Ttjhi2Ic%aGx!e=|h|GcH_ z_ZAAjMwInrQ=Yen(*6oX|FbDFwv1f=OlXhKDEyz$BI{?v`g;^U94Y?s7)8GVDE?v^ zWq+zE`g)1d{uw1ct%7+9%4;+!_AU+cMHEjC!F&zncSe-<)OeggvCpZL`B+f&8Pf6x zpaa(*CI9^P4+H-&@DBt3Fz^op|1j_m1OG7a4+H-&@DBt3Fz^op|1j_m1OG7a{~-o+ zzMz{U3{!1az-XoDrunavw6}I~w04-Mp=RaafY)qsv30Z7vvsgWzpr$1baisD-h#{K zwr+Y(F6-PK+-#j4tT$NLSzEff61~V8V_V1Fs2mh;wsmoHH+R_RZtdcUw}P^si#7gq zD6MdCaI(Z}jXiALENwP9ZL)E(Hn$>5++Cfm9j$r_j2*14o$;2|ZunHpEgY;j+3vA+ zA=+BInK;^*J6btdTj{bbt)1O$ogBeB+=yz>!_dXa(%RM4(8bmXEYVZj$;s7?e3tG$ zYe)Q7{JFX=E?|L9R`>*Q8Lob%n~Q@!@o;=FBWqXpJ=Q(b!VJNqz#`qPtyVhi0mR@# z8@rjixf9&1buzbFYir?R?&7%uf9juPoK$=i@=;(cH)}RAlU09TX6)(eX1!;%<1Q!A z540g=9a|T$4^HIc@lrP{a<2H(f&BMV(`A#jke3y^cG)@tUe=kr+QWW$%?c|k7r+`U z(RJKs>*D0N2k>R=<^nd`l~@571M-BJ!?*bF8|$)d(N=(m>bN^Q*jk#qS@%qMCD?p7 z>%VNTE}IyItoeg=QeN%!2j_-PE(CjI4X(sE;iN=tGQs~!2PfA*#sdr7OtAMSwLv?r z3G4>{(S~RQ(E;L7h-V@4Af`affmjBy8e%KNp`Xa-Plc!fQ5)hmh;|VDA#x$|A>M&l z3Q-90JH$bs$#GO5E{A9c(GKE4h@lW8A*Mqtg(!sB2~iUI8U=_`|KxiJ0{{8v|2+eS zk{IDc`I3BDz5<`dSLLho>3jxXpKr)#@>zTvzB8ZA=kWdcL3}Qs$LI4?_!)cwKc8R9 zui^{&4g7Y#h>yie#>&Pj#L{9_W7T8nv5Z*#Si@LmEGyO~7IT)ww86?4F@`a$80Q#H zOi&CjCM8A?QyL?TX^+9c$TTo21B}Q5qjA7UJTQs?j35M0$6~P{NldyQhB2d9QO;4^ zC|*=bR8^EPsy#{}nij1d&5UM6J4bV)dC@7+Rnfxe_GpC|T8w%OlNgUnj8;XAg|ASZ zSeG-gniOIU?Rco7VW4W=s*p%3+SYd2?tU??uPCbqp$BJ`~}7HE8aPt8_$bRiLZ(m#<#~SB+wGn6PO9C1m^^90xuyYp(;U`(4L@>NJ~^t zWG1o_ofElx&k?E}6G_#WUp zfb);Dk8_VR&jR|7Yd^00G@$t`p!YnW^+KTYG@$V;U|&37TS8!0xTfRwgxeBsN4SQw zVx0-?#&sLlY+SE#t;Tg4*Jxayac#zR8P{Z7k8v%=br{!RTz_%x#dR0gTwHH)t;KZ~ z*H~O%acvbQV**KRC}fDLr?{5lI*MzkFiaFi3#S9kWCOj-09q*ur$x|#MzVoEW&kEc zfC)Naf(@9+08EGg6Li1?oA3lxfC~lS1(<*fF5sdHaG?OKp9#3&0xqfm7r50k0T;Oc z!hIHQ?YM8kEgiRW+{$qq$1NPUZ``_Z+r}*$w`<(0aht|18n2P`Th0*jQ5R3I#h9Vv(` z1s;tCEQ%h*i3$RmBm@>Eief|?0!_j#DkB<;k&RIxEQ(FUsw%>w*hGA)A}oplBOEU_ zBUTWbAB)A|nxqOei5mFBt?c zOrTXbCklWOoR2DCSvVJ5U{#`ItX&eDPw>D5o<9R{Pz60c&Os3L_4IH?xFPiNqHrui z7W(&$2thGUW@lp&0&q9`m{7RJ+zXhC!-jHGNLYF80{g-%3jUQZSv z0ufpk#D3hj;JV=txF{vGqk-@-xPIsZK7t4h;S;__1aw3aaAHW zja*;}`91yt&l1V?a*2$PT(ts`{gG?u5_Ul{pa41G0=vlX@e()_To7?Gz}}ZaP82}o zp(p4k7(#ZqAOdA1yRWeVCLKg{8xYeuJ<$t`kc`0DXA;>a8+c_t@X7)Z-$~ERh}0)CPA-gM!pH_B|JHsuwMlt*Uuol6O+h{M1hawQRHkkvpzuxmD8*Ek?zbHUD$*_&=766XUZ;cFC#Q*0G^a%D+j!GLov;g>UbOyZ2n z1`(JKVz7Y7-x}aamEPk!f`A3^drqq&a57K@Of!18CNn!>L_?1k!MSF_ERPpSdiGLa z5jfj8)9S?8!3LZjI6ZtQWA|el} zB6!RIF%IVp@ud#@hCax4Sn)Q5zGr|O@DFWQ1@Vpn;vLRn5Xc6RM{fu5PBKvzoHkSm z|H1~`@`?Nq_v;Nn`*Gh+hq}*6@`rZ_8A>3s>3C=1sBKOt@UW*0% zJ{O+l{_tC>z(yDm`aNeCK}3Gf`9%_B=J=kmf#?70j$yz)n9w?SQT!+-@LKG@_^bwC z4OomMumbHi!089mFJk;?|JNxc=jbD`ms8auqx+(zA=~D>v zxIafTHavq0!0Dq3<{^^crh*2uIy@J#0XEEm`8GO}2!S2bh!Y75oYj$!=7TfI-}z}e zIGq}T+YK9VQ^ra3@3|wQW-2xy7ymntEdp903$#KNXa&m5oq_KbkT*#@DQqBN?UKM_ z(}1MYFDS-J%JIEvP&kz1?S2Kv)1d??+kyB$SQkVnafQ&gT za3jhFccT2BTdoFhlY>P|f()0;pY*|<4hv*Z$kXt_?T!GR7XF>L;li9MpZJ`jq36`A zN_cz70j_D!F>P?WLb2OWf_8Vh7E`-z4brNAjbHE zGc!+2oKc4-=l@$>O#%5uJ~%guh_ehPkiv8T*JOsvim>U4-+XYV)>rLeMCtcLcYlzL z{lDBrCcNGJ^UnS2dE&pdQh#ti!~4@oqXGZSrc?^cz(3jJN&a8ktPRY$NZZW-C+*U| zoJdqb_QeR-@3}Gd2X~-6kU3|-o8ty>8;Zg6H-1*p2O0E#+D*(*8WVzP<748{Lzc+$ z@R8`mScb%CHXu*H;|M+?ml!jJ7&V``u@-`pYdeuQND`-4Ji_4P;~9h@kwe&k6BC;_ zGX)W+CS0#F2+b-b^1}w=6oo}f61TUwe^Mtrls<9e%>t)hXX4!JPn>*tAb(6DZgcX9 zGZyZz+KF2PN#aJFMtChc$UO9;Fu@Q^0q8b2Tu7Y6WQo%O1Kc*?J_SD=;Adt5xH%UR z9z~Y$Ck(=yI1^b5kMJaTbZaMW%4o!S%#b)GaC-eICkA{36P%s7Aa+#|w-02#N%{wU z;%>->I6;#c3YmTWpZ2a6W_I+vzN!i=ZKUvz}{szd~Ckz*>)c*AZIGRcZ|PYWQEi*3WH-`%Q+pRfyXFW)mWA8RAwUZsaqQ7(NjZ@h;ga(GYh{ zCq^@g&xGRrDb(3LVpIU$yA03+m^}?s7kIzf%Q8!t^`z7}ci}YN-{PAE5}|ngEP#Bfdt) zeMDu|Qc5o9y(_vez%<^V13B{#s5CM)&ie~`@rsHIpcQU3>2q!E6Z*0hjvu9#1k$Cp z(p(Ry#1s0oMWE~H>eK;UeL`Qi=X4RISkcC~VIe zxdDRO2|pdh-Z&XAQmSsh48+^EVr>Uurdo*UB3^#`A;6VsBdnAQ)t@jOT3s2&UtOiU zL{MF}xHRR`(@&pK2QK`H<4fHXQO%@iyxvZ(_*%+iBR)I;PtVW*!~dhrGl)%*DaV)$ zWK(-_sR}%~6Yid*e}qzUQ_PCJkZL8K-2bsmjPh$2@SXDi(!@xGt*8T6x;*phIswHv zAQ)=(DQaUcZdK{h(Ti7ose?cG=BU2Z!KB+jD7`xUpx^HQ`8;U8)WMfJn1AECFLm&x z4p0aE*RBU5|AG(xkb8kHxQ%Y0UcIEcK0~bt;P*;_zzf_=F5r*>_+tXxT}ZKL1(mkJg#n{KZNqp<;K$KqPsx-xI+KfD8i}k6cu<)0~KUKj03Rpop@~l zPTPUil9i7?hPqPa#>Y>(9+S5tUcE>+MtGh}0kHJj$ zrud(w^$)s0#dcFXnsaNArov1(WFj>;8x`S6-WJ{@cDgYY(C0eoa}(62SndeklNw}V z(xouKC241V#@ZAUx*0vsOjO~euKR;ZZ#E1%I1p%L&JbX4qF^`m0H!R05FD~k%%688}LsE_*z?&1rselt|PM5>NaH#cF@=N$S-#`sb%`4GBxtUD03Ee+RwF&LsRzS1q z?E32KoRg+7rKT}2uEV79y8HprZcSerp$A4%XQ&B!p4i%Tl{)v%7~*l&vPUQdk*Neb z^TKiBTuqsdI-i*E{3CgS(q^r;$g<*L$!!;tIX);rwAHu5d(f0x=sIv=`1G zX5sd8M7!+R&u+M_ww=v&{%x!SI}3UD}N7Nr7>;I*Zs$< z{s1+wH6?I_12%L&MMgqZ{T8?JqiKMxJasoHXrZ|sn3WF7?B&6q$gGr@K+MV2^uEY^ zMa;?l2Ei`i3_5_bS5V1@ce{Yvn4dpy`+)ZW-w8W;i2P;o-VO13OYGoGxyYjxL6f0- zp)}>IGcQUA-HTg*(}z7VVfs9GL<5~`lJ|tM-^y9Uj$j5_DBxFYfZMOQV^jG=nS)7g zqRqq9S$cwV=k{ZQuGqn$aFYM{p)X>e1!wLAZr=tvW(N(E8f<{sv(wv#W&fVx@w!R9 zjO|**EcDVXC)^OIxo&k6I_VxX+8c+&u0GFO;3oAf(kwbaH)l`udg~BMpG>reOTBg& zpyJ4#fF1vx7fa>D_ zTuP(@eSBsPNcEPPS~y&qZ&8M(L6bc z?rVGb);pmfC!gE~aX-jWRY8*&**(&aSFBHc-Q&<1R~Dk59io3i^gBd< zw#!N^r+R^_&=U&HLihKmf1;mMUiC_~-(o-aLZXj2^n^@Y>rDVy1gAZj3K0q{juYKlW$->8Sz+JFpAwm5Y$^!TCC?|=7Gcm;lfS*~ymM9NDrGLX4{~%u zjVaWL54e43EbKiTdQ}#-c8xoj>z7#w><;JA=t)_4#G|}kc|=Mb-DA?tib|=Vx4=eM z^+GB>Z~`Cbu#IQCQpLDX?ae>k1D9U0jT!w^Z{8Sx-lh80-;-ej93Eb9Ou$6ZC${l( zAB4sP3S^+uRer(^I$k$%`)UjCGoo6qC{(I+tv<2=j#5Uaw=4{(4p=KBp?cftQlUB9mCp4_VRbKSwY!`X6pU{+HT zt=#rLQLaDZMrB+N+NtG(zA%5sdBWJ1V7QzqEqK;dm!UumHm7D#32eivo`7v)z3Sg#tCn)BajMMVT%0Kj#`Lp&)Qe8e z_EZS-q}e`dt8UB{kn6=(tDVZ(PCvj#v;C-@dU?P#iTNOx+P*6GTXU>)v$mM;tZgUP zW42Be#lH&O->RThduIel+JLG$}^+Fi7!**U9UIn z-uCMSD4*N)HL|>X&x!sz`WGQf#@|PuvG*#^5`C%*$CYQ@S=J-R`qWI1g=b2z-X7fQ zifZ2&zRytc70`VHWno&;JulaLZBOTY9bE|-nV-4^WaH}pm)n{N_b3jzjd2{Diyk$n_13qH9 zbL!Cla{V>u&Vp>3&%rjG&jRO93hkjZr-)}*A!d69Y`K3>*u1{U`p+Mb{T*TM#Bv|! z&rM2C22_6l$8Ak@;Cv6{O3IM|Vj6O*r2`^pJ)T`1HG%rI2R70<>G)WBU^cDu&aK)f zcC|C-f!EkBrv3Ptf6v0@N&k67Hxn`uU=HoflXMiW=Nuxoxns-{=)RJ>by7b(qRe|P zoH*A0nPK&z`MyGPT^AoZ^ zyED(%(G<85iVwGOBDH~Apw>Jh#&PnkK69->FDe&~%YHbSSK}dLdnGjEH@5g3o4crU4dV+hQm->H&{!i?)#ZJ!cmvzqeCUs$4C*xbQv8{CF zTdlDEMf!gXtiKoMI$bPO{GeAmHS>u-|U45XeifKD1q~P^Rmr9Zp??5 zOZ91&d&?B+H)tGC5xZgYbaP=YX1lwj(0(|ZYT$k1PWPF27k_nm?u3&z!@U<$)BX?d zs6Jct#L*nOt-U>APwcQA_EH==bD~Z5YCDDIKy1Xhbk&=%5Q;-)-m_Bb=OE1?HsAj7 zLH%b>?9>z0gWj`bAqO_%Ztjr>_v=7A!w>MSMBBJrHD^D6Sofu3 ze_3@-&v3oM(23vPe$Ke3#sfHW82bpmpN;f2)_SGbPpJ36?p(!3u3RIOW(SRD3tfTp zrorszv|+3{Z4QVuG3fAg-STnf<>k{;fA^p-cbGLZnQi#u{t|JHFlTbjnMN+zMb+`> z=k3N_uuo~)vd5o9{soZ#U0HUx?55B&4~Bbssr$tJ+_gtUnz(bayYB8?&b3r{`NX$& znCy&kEhYIZzU3ZXnjWO)lu*@rdl_^E_uAOY>ukOAcCRkIo_$?V<(_jbn>L1uytj+W zWH@t=?b@K0m%W;!hR?WXx%kD!is}w1rUjDu24b zB6!ww)MfdK9c9Lh&X~S4em!OfOkUcruZ2J$WTM5Br=aImJ9%+`VpW%6u6EdIA+SY( zJvLyACFtP_O5u$6=ozMFhZ{wRIx2wH1|YQrD6JA#iBT~n@bUEX5Zzc{1`fD@CO}`6 zw7uC_cn*!VhOWn2;KXAc9H8n|&{qerj~jX~dBs0`??pnrp8xSHZ`d)cgz*)* zc|@z`!7t{7V_nQbTnW%_p)Egv{h{yD7xx#MZ};uO&YN)83GA*`fN{6Fs}X12q$YV4 zkMnK(jGJ=vpxtq!6zI4PEbk%>JHkCVh0aj|Q?-cU6}nvrS2?%%f2VFrR89*7bw%YY zSoUZ)0&bA#9i?tzb4TNHONZT6>N|gke)C$TzOtsW7dgK-;Bnc5PlEd*0(Q+!pY!)I zr?*zz)JI$?J6s4DPwwf>gND?u`cVkPnu)(1fmqLQs0>m?^eg|V&w+FN3r45qptSc9Mc0*%?%^* zD)wQNbc1fkj-`U(C)-(?^ar=}{zZ2IB2{kb1N6HV-Q3F?LGHZKratN|e1mG9>}^FT ze@cPqGxqnZShDJO@5R1Yx$^+l#x3IG|GY`&?*mhi@^=)x)b5fk<|0`_2=yYYwiz-NMe;PX&vr;pg`4q6^3jAzg6f*zO2QB!8K z;-?BzyOoZ5!>g50*U7zd!A#t*^&7Y*QoGoDHI=U?Zn~7EdZ*&A1l@Ws^Q>X7OK}H1 z_3}DQHJgYJh_5R1Z%xp*W4I^wKv*Xr*$eV9L)lA^jkl`O#uTLrH%sQ> zy58#dxL7g^7wk{wAOUkOpr{gEjc{ubSuysndtqxjc4Iy*P9k;F^8TqT&dG*S12gFh>O2oQ1kKzVsBtxvL2d5V2PrQ2MPIjZ2R+kEAP!6VCBjz2@ z*{s`G@Q!2Xu4Hc!fAZxDIOgsa3O?W$8o?%J%p{L#cEWD8I7Mf_0!UsFt?r@nfm_V- zFJ?eE71V7itK18*`MFMZr<@=R=_Sd;B@)NBKlk>{_Cp)-cbo>O{nzob^Y! za^3La_%{Nxr>pOt-m*_GF30~8q0@7qtr}=|1RGm4Sxz|4qU$dsAyiKJE3_a^`VIU) zxsYZd4=#7=Xq?H-FYc%K@8+u80#S?%n{Vy5$Q@XND{~?co3KhFxoKEG+*Lti|1q&Evjt{2Sx>MPx@eINJi#{x`o!6w@8pl8e7_ zDgM0}yfTHdP+$@?(iJYMQhq9L7$xPmXgL<>nHM@p#%Sm_^GZ}PY zz3Rs5pyh@@V=>rvA_w2jTr>xvhEmri&%itFsf+v_zQS&rp`m`6b0gnns=MIZyf;E~ zXU*7Qtw3ZSciT|T{EalqR9BN+{dV_Kj1J&=rXd6s( zdd_2X%N||QqfgKu&`@&l*Ba=>fjyXM5_C@w>wS8TRFRSrwDMqOYD)39?q3bf#_|Vb=-c9{XCFH@ z)o=fiX*co!570Yi(Ed zCTOZ5W;`=hV5T>i Date: Tue, 13 Jun 2023 02:48:48 +0200 Subject: [PATCH 45/52] x-pack/winlogbeat/module/sysmon: handle empty sysmon DNS answer data (#35207) --- CHANGELOG.next.asciidoc | 1 + .../module/sysmon/ingest/sysmon.yml | 19 +- .../sysmon-no-evtx.evtx.golden.json | 47 +++++ .../ingest/sysmon-10.2-dns.golden.json | 166 +----------------- .../ingest/sysmon-11-filedelete.golden.json | 3 - .../sysmon-11-filedeletedetected.golden.json | 2 - .../ingest/sysmon-11-registry.golden.json | 5 - .../ingest/sysmon-12-loadimage.golden.json | 1 - .../sysmon-12-processcreate.golden.json | 1 - .../sysmon-13-clipboardchange.golden.json | 1 - .../sysmon-13-processtampering.golden.json | 1 - .../testdata/ingest/sysmon-9.01.golden.json | 32 ---- .../ingest/sysmon-no-evtx.golden.json | 104 +++++++++++ x-pack/winlogbeat/module/testing.go | 2 +- 14 files changed, 171 insertions(+), 214 deletions(-) create mode 100644 x-pack/winlogbeat/module/sysmon/test/testdata/collection/sysmon-no-evtx.evtx.golden.json create mode 100644 x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-no-evtx.golden.json diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 43f5914bd8d8..3a136d87c1dc 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -357,6 +357,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 *Winlogbeat* - Set `host.os.type` and `host.os.family` to "windows" if not already set. {pull}35435[35435] +- Handle empty DNS answer data in QueryResults for the Sysmon Pipeline {pull}35207[35207] *Elastic Log Driver* diff --git a/x-pack/winlogbeat/module/sysmon/ingest/sysmon.yml b/x-pack/winlogbeat/module/sysmon/ingest/sysmon.yml index 8468c29e87d7..6cd70ee7bd56 100644 --- a/x-pack/winlogbeat/module/sysmon/ingest/sysmon.yml +++ b/x-pack/winlogbeat/module/sysmon/ingest/sysmon.yml @@ -782,15 +782,20 @@ processors: if (answer.startsWith("type:")) { def parts = /\s+/.split(answer); - if (parts.length != 3) { + if (parts.length < 2) { throw new Exception("unexpected QueryResult format"); } - - answers.add([ - "type": params[parts[1]], - "data": parts[2] - ]); - relatedHosts.add(parts[2]); + if (parts.length == 3) { + answers.add([ + "type": params[parts[1]], + "data": parts[2] + ]); + relatedHosts.add(parts[2]); + } else { + answers.add([ + "type": params[parts[1]] + ]); + } } else { answer = answer.replace("::ffff:", ""); ips.add(answer); diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/collection/sysmon-no-evtx.evtx.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/collection/sysmon-no-evtx.evtx.golden.json new file mode 100644 index 000000000000..32626231386b --- /dev/null +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/collection/sysmon-no-evtx.evtx.golden.json @@ -0,0 +1,47 @@ +[ + { + "event": { + "code": "22", + "kind": "event", + "provider": "Microsoft-Windows-Sysmon" + }, + "host": { + "name": "internal.network.org" + }, + "log": { + "level": "information" + }, + "winlog": { + "channel": "Microsoft-Windows-Sysmon/Operational", + "computer_name": "internal.network.org", + "event_data": { + "Image": "C:\\Windows\\System32\\lsass.exe", + "ProcessGuid": "{00000000-0000-0000-0000-000000000000}", + "ProcessId": "500", + "QueryName": "some.other.domain.com", + "QueryResults": "type: 33 ;type: 33 ;1:2:3::3;1.2.3.3;", + "QueryStatus": "0", + "RuleName": "-", + "User": "NT AUTHORITY\\SYSTEM", + "UtcTime": "2000-01-01T00:00:00.000" + }, + "event_id": "22", + "level": "information", + "opcode": "Info", + "process": { + "pid": 1000, + "thread": { + "id": 2000 + } + }, + "provider_guid": "{00000000-0000-0000-0000-000000000000}", + "provider_name": "Microsoft-Windows-Sysmon", + "record_id": 1111, + "time_created": "2000-01-01T00:00:00Z", + "user": { + "identifier": "A-0-0-00" + }, + "version": 5 + } + } +] diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-10.2-dns.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-10.2-dns.golden.json index 57fddb0e275d..be32a76383ef 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-10.2-dns.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-10.2-dns.golden.json @@ -34,7 +34,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773701Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -136,7 +135,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773734900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -239,7 +237,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773751300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -346,7 +343,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773860300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -449,7 +445,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773878300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -539,8 +534,9 @@ ], "question": { "name": "confiant-integrations.global.ssl.fastly.net", - "registered_domain": "confiant-integrations.global.ssl.fastly.net", - "top_level_domain": "global.ssl.fastly.net" + "registered_domain": "global.ssl.fastly.net", + "subdomain": "confiant-integrations", + "top_level_domain": "ssl.fastly.net" }, "resolved_ip": [ "151.101.1.194", @@ -557,7 +553,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773931300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -656,7 +651,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773947600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -762,7 +756,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.773963700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -857,7 +850,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774007200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -965,7 +957,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774062200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1109,7 +1100,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774078900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1215,7 +1205,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774112400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1316,7 +1305,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774166300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1423,7 +1411,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774267400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1518,7 +1505,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774283800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1624,7 +1610,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774312Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1727,7 +1712,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774330300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1829,7 +1813,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774385800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1958,7 +1941,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774419200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2053,8 +2035,9 @@ ], "question": { "name": "clarium.freetls.fastly.net", - "registered_domain": "clarium.freetls.fastly.net", - "top_level_domain": "freetls.fastly.net" + "registered_domain": "freetls.fastly.net", + "subdomain": "clarium", + "top_level_domain": "fastly.net" }, "resolved_ip": [ "151.101.194.79", @@ -2071,7 +2054,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774434800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2226,7 +2208,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774450Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2378,7 +2359,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774489600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2533,7 +2513,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774523Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2654,7 +2633,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774562600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2805,7 +2783,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774578600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2966,7 +2943,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774592900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3074,7 +3050,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774604100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3216,7 +3191,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774616600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3326,7 +3300,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774629200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3469,7 +3442,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774645300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3575,7 +3547,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774658100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3672,7 +3643,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774732100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3808,7 +3778,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774764Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -3941,7 +3910,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774798100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4044,7 +4012,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774809600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4176,7 +4143,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774843200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4330,7 +4296,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774880100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4488,7 +4453,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774892300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4595,7 +4559,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774905800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4742,7 +4705,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774932Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4893,7 +4855,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774942600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -4999,7 +4960,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774956100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5092,7 +5052,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774966100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5201,7 +5160,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.774991400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5341,7 +5299,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775006900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5490,7 +5447,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775021800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5604,7 +5560,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775036700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5754,7 +5709,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775051600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5870,7 +5824,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775066300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -5998,7 +5951,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775081Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6105,7 +6057,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775096200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6203,7 +6154,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775111500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6287,7 +6237,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775148400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6367,7 +6316,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775184200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6505,7 +6453,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775246500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6620,7 +6567,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775264600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6719,7 +6665,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775280100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6861,7 +6806,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775295Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -6976,7 +6920,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775309500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7120,7 +7063,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775324500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7226,7 +7168,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775338700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7338,7 +7279,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775353200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7453,7 +7393,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775367700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7554,7 +7493,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775383700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7696,7 +7634,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775398800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -7852,7 +7789,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775413200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8010,7 +7946,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775427900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8162,7 +8097,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775442300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8277,7 +8211,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775456800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8391,7 +8324,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775472Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8491,7 +8423,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775486500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8633,7 +8564,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775501200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8794,7 +8724,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775515700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -8946,7 +8875,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775530400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9056,7 +8984,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775570Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9204,7 +9131,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775583800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9315,7 +9241,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775615300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9463,7 +9388,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775648500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9615,7 +9539,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775770600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9744,7 +9667,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775788300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -9897,7 +9819,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775820400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10029,7 +9950,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775851100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10127,7 +10047,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775888700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10268,7 +10187,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775899100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10389,7 +10307,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775953700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10484,7 +10401,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.775968900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10625,7 +10541,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776019500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10777,7 +10692,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776052500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -10908,7 +10822,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776093500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11055,7 +10968,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776107700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11195,7 +11107,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776118400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11333,7 +11244,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776133300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11492,7 +11402,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776144300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11646,7 +11555,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776158800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11791,7 +11699,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776170Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -11941,7 +11848,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776180100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12092,7 +11998,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776194800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12202,7 +12107,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776209300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12343,7 +12247,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776223400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12453,7 +12356,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776242400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12566,7 +12468,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776257400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12671,7 +12572,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776271800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12774,7 +12674,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776286200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12876,7 +12775,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776300500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -12979,7 +12877,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776314800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13077,7 +12974,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776329Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13183,7 +13079,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776343200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13286,7 +13181,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776357400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13392,7 +13286,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776371400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13495,7 +13388,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776385700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13597,7 +13489,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776400100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13699,7 +13590,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776414600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13848,7 +13738,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776428700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -13970,7 +13859,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776443200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14076,7 +13964,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776457400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14220,7 +14107,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776471400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14322,7 +14208,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776485800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14422,7 +14307,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776500100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14570,7 +14454,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776514300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14677,7 +14560,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776528600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14778,7 +14660,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776542700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -14924,7 +14805,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776556700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15085,7 +14965,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776570600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15197,7 +15076,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776586800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15345,7 +15223,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776601200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15503,7 +15380,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776616500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15656,7 +15532,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776672300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15803,7 +15678,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776839200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -15959,7 +15833,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776888800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -16321,7 +16194,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -16534,7 +16406,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776929800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -16644,7 +16515,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776944Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -16749,7 +16619,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776960900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -16835,7 +16704,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776975700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -16932,7 +16800,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.776990100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17081,7 +16948,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777004300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17239,7 +17105,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777018400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17350,7 +17215,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777032700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17493,7 +17357,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777046600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17644,7 +17507,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777060700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17794,7 +17656,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777079700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -17933,7 +17794,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777088100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18041,7 +17901,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777094600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18143,7 +18002,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777102400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18286,7 +18144,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777108200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18408,7 +18265,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777117700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18560,7 +18416,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777144300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18667,7 +18522,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777156200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18768,7 +18622,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777163100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18866,7 +18719,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.777205500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -18950,7 +18802,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.778350300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -19027,7 +18878,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.778386300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -19104,7 +18954,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.778398900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -19205,7 +19054,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.778411100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -19304,7 +19152,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.778423200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -19435,7 +19282,6 @@ "network" ], "code": "22", - "ingested": "2022-06-08T05:43:58.778435Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedelete.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedelete.golden.json index fd3bd910927d..b9a4dad64b7c 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedelete.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedelete.golden.json @@ -9,7 +9,6 @@ "file" ], "code": "23", - "ingested": "2022-06-08T05:43:59.441187600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -95,7 +94,6 @@ "file" ], "code": "23", - "ingested": "2022-06-08T05:43:59.441228100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -177,7 +175,6 @@ "file" ], "code": "23", - "ingested": "2022-06-08T05:43:59.441237800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedeletedetected.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedeletedetected.golden.json index 7c3de49ee67e..e058bfb168df 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedeletedetected.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-filedeletedetected.golden.json @@ -9,7 +9,6 @@ "file" ], "code": "26", - "ingested": "2022-06-08T05:43:59.469107800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -90,7 +89,6 @@ "file" ], "code": "26", - "ingested": "2022-06-08T05:43:59.469128600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-registry.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-registry.golden.json index 3202da160c89..82c66715fdc1 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-registry.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-11-registry.golden.json @@ -10,7 +10,6 @@ "registry" ], "code": "13", - "ingested": "2022-06-08T05:43:59.481703200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -83,7 +82,6 @@ "registry" ], "code": "13", - "ingested": "2022-06-08T05:43:59.481743400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -156,7 +154,6 @@ "registry" ], "code": "13", - "ingested": "2022-06-08T05:43:59.481754200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -229,7 +226,6 @@ "registry" ], "code": "13", - "ingested": "2022-06-08T05:43:59.481765Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -302,7 +298,6 @@ "registry" ], "code": "13", - "ingested": "2022-06-08T05:43:59.481866400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-loadimage.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-loadimage.golden.json index 3bec5596d5c1..f03df6a6dfde 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-loadimage.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-loadimage.golden.json @@ -9,7 +9,6 @@ "process" ], "code": "7", - "ingested": "2022-06-08T05:43:59.511582Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-processcreate.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-processcreate.golden.json index 7768f215d471..7747ccf46eba 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-processcreate.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-12-processcreate.golden.json @@ -9,7 +9,6 @@ "process" ], "code": "1", - "ingested": "2022-06-08T05:43:59.519128600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-clipboardchange.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-clipboardchange.golden.json index b8bf9c88b0db..a8e3c1c18b76 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-clipboardchange.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-clipboardchange.golden.json @@ -6,7 +6,6 @@ }, "event": { "code": "24", - "ingested": "2022-06-08T05:43:59.529777700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-processtampering.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-processtampering.golden.json index 039fa1ab72ae..8ff7aca6af2c 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-processtampering.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-13-processtampering.golden.json @@ -9,7 +9,6 @@ "process" ], "code": "25", - "ingested": "2022-06-08T05:43:59.536869500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-9.01.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-9.01.golden.json index b7f7a5b55955..67e22fa17534 100644 --- a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-9.01.golden.json +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-9.01.golden.json @@ -9,7 +9,6 @@ "configuration" ], "code": "16", - "ingested": "2022-06-08T05:43:59.545036400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -60,7 +59,6 @@ "process" ], "code": "4", - "ingested": "2022-06-08T05:43:59.545055Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -116,7 +114,6 @@ "process" ], "code": "1", - "ingested": "2022-06-08T05:43:59.545067Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -219,7 +216,6 @@ "process" ], "code": "1", - "ingested": "2022-06-08T05:43:59.545078400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -325,7 +321,6 @@ "process" ], "code": "5", - "ingested": "2022-06-08T05:43:59.545089900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -382,7 +377,6 @@ "process" ], "code": "5", - "ingested": "2022-06-08T05:43:59.545101100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -439,7 +433,6 @@ "process" ], "code": "1", - "ingested": "2022-06-08T05:43:59.545112500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -549,7 +542,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545123700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -634,7 +626,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545135100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -720,7 +711,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545143100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -806,7 +796,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545149Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -892,7 +881,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545153600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -978,7 +966,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545160600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1062,7 +1049,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545170500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1148,7 +1134,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545180100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1233,7 +1218,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545191700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1317,7 +1301,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545202500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1401,7 +1384,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545207800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1486,7 +1468,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545212500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1571,7 +1552,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545217900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1656,7 +1636,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545228Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1741,7 +1720,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545239300Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1826,7 +1804,6 @@ "network" ], "code": "3", - "ingested": "2022-06-08T05:43:59.545244900Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1907,7 +1884,6 @@ "process" ], "code": "5", - "ingested": "2022-06-08T05:43:59.545253700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -1964,7 +1940,6 @@ "process" ], "code": "5", - "ingested": "2022-06-08T05:43:59.545265200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2021,7 +1996,6 @@ "file" ], "code": "2", - "ingested": "2022-06-08T05:43:59.545276400Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2088,7 +2062,6 @@ "file" ], "code": "2", - "ingested": "2022-06-08T05:43:59.545287700Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2155,7 +2128,6 @@ "file" ], "code": "2", - "ingested": "2022-06-08T05:43:59.545299200Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2222,7 +2194,6 @@ "file" ], "code": "2", - "ingested": "2022-06-08T05:43:59.545310500Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2289,7 +2260,6 @@ "process" ], "code": "5", - "ingested": "2022-06-08T05:43:59.545321800Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2346,7 +2316,6 @@ "file" ], "code": "2", - "ingested": "2022-06-08T05:43:59.545333100Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", @@ -2413,7 +2382,6 @@ "file" ], "code": "2", - "ingested": "2022-06-08T05:43:59.545344600Z", "kind": "event", "module": "sysmon", "provider": "Microsoft-Windows-Sysmon", diff --git a/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-no-evtx.golden.json b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-no-evtx.golden.json new file mode 100644 index 000000000000..93a011fed42b --- /dev/null +++ b/x-pack/winlogbeat/module/sysmon/test/testdata/ingest/sysmon-no-evtx.golden.json @@ -0,0 +1,104 @@ +[ + { + "dns": { + "answers": [ + { + "type": "SRV" + }, + { + "type": "SRV" + }, + { + "data": "1:2:3::3", + "type": "AAAA" + }, + { + "data": "1.2.3.3", + "type": "A" + } + ], + "question": { + "name": "some.other.domain.com", + "registered_domain": "domain.com", + "subdomain": "some.other", + "top_level_domain": "com" + }, + "resolved_ip": [ + "1:2:3::3", + "1.2.3.3" + ] + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "category": [ + "network" + ], + "code": "22", + "kind": "event", + "module": "sysmon", + "provider": "Microsoft-Windows-Sysmon", + "type": [ + "connection", + "protocol", + "info" + ] + }, + "host": { + "name": "internal.network.org" + }, + "log": { + "level": "information" + }, + "network": { + "protocol": "dns" + }, + "process": { + "executable": "C:\\Windows\\System32\\lsass.exe", + "name": "lsass.exe", + "pid": 500 + }, + "related": { + "hosts": [ + "some.other.domain.com" + ], + "ip": [ + "1:2:3::3", + "1.2.3.3" + ], + "user": [ + "SYSTEM" + ] + }, + "sysmon": { + "dns": { + "status": "SUCCESS" + } + }, + "user": { + "domain": "NT AUTHORITY", + "id": "A-0-0-00", + "name": "SYSTEM" + }, + "winlog": { + "channel": "Microsoft-Windows-Sysmon/Operational", + "computer_name": "internal.network.org", + "event_id": "22", + "opcode": "Info", + "process": { + "pid": 1000, + "thread": { + "id": 2000 + } + }, + "provider_guid": "{00000000-0000-0000-0000-000000000000}", + "provider_name": "Microsoft-Windows-Sysmon", + "record_id": "1111", + "user": { + "identifier": "A-0-0-00" + }, + "version": 5 + } + } +] \ No newline at end of file diff --git a/x-pack/winlogbeat/module/testing.go b/x-pack/winlogbeat/module/testing.go index 69490fa3f91c..8e402c030902 100644 --- a/x-pack/winlogbeat/module/testing.go +++ b/x-pack/winlogbeat/module/testing.go @@ -50,7 +50,7 @@ func WithFieldFilter(filter []string) Option { } // TestIngestPipeline tests the partial pipeline by reading events from the .json files -// and processing them the ingest pipeline. Then it compares the results against +// and processing them through the ingest pipeline. Then it compares the results against // a saved golden file. Use -update to regenerate the golden files. func TestIngestPipeline(t *testing.T, pipeline, json string, opts ...Option) { var p params From 4af3e606c68403b8beafe5f4e0906be3ddcfdf87 Mon Sep 17 00:00:00 2001 From: Anderson Queiroz Date: Tue, 13 Jun 2023 03:14:31 +0200 Subject: [PATCH 46/52] Fix Docs links (#35744) * Revert "add doc-site-branch to version.asciidoc and settings.go (#35693)" This reverts commit 25adc03b601e4016e2e0dd674c2e447bb702ba4c. * revert to use 'master' on Docs links --- dev-tools/mage/settings.go | 9 ++++----- filebeat/modules.d/apache.yml.disabled | 2 +- filebeat/modules.d/auditd.yml.disabled | 2 +- filebeat/modules.d/elasticsearch.yml.disabled | 2 +- filebeat/modules.d/haproxy.yml.disabled | 2 +- filebeat/modules.d/icinga.yml.disabled | 2 +- filebeat/modules.d/iis.yml.disabled | 2 +- filebeat/modules.d/kafka.yml.disabled | 2 +- filebeat/modules.d/kibana.yml.disabled | 2 +- filebeat/modules.d/logstash.yml.disabled | 2 +- filebeat/modules.d/mongodb.yml.disabled | 2 +- filebeat/modules.d/mysql.yml.disabled | 2 +- filebeat/modules.d/nats.yml.disabled | 2 +- filebeat/modules.d/nginx.yml.disabled | 2 +- filebeat/modules.d/osquery.yml.disabled | 2 +- filebeat/modules.d/pensando.yml.disabled | 2 +- filebeat/modules.d/postgresql.yml.disabled | 2 +- filebeat/modules.d/redis.yml.disabled | 2 +- filebeat/modules.d/santa.yml.disabled | 2 +- filebeat/modules.d/system.yml.disabled | 2 +- filebeat/modules.d/traefik.yml.disabled | 2 +- libbeat/docs/version.asciidoc | 5 +---- metricbeat/modules.d/aerospike.yml.disabled | 2 +- metricbeat/modules.d/apache.yml.disabled | 2 +- metricbeat/modules.d/beat-xpack.yml.disabled | 2 +- metricbeat/modules.d/beat.yml.disabled | 2 +- metricbeat/modules.d/ceph-mgr.yml.disabled | 2 +- metricbeat/modules.d/ceph.yml.disabled | 2 +- metricbeat/modules.d/consul.yml.disabled | 2 +- metricbeat/modules.d/couchbase.yml.disabled | 2 +- metricbeat/modules.d/couchdb.yml.disabled | 2 +- metricbeat/modules.d/docker.yml.disabled | 2 +- metricbeat/modules.d/dropwizard.yml.disabled | 2 +- metricbeat/modules.d/elasticsearch-xpack.yml.disabled | 2 +- metricbeat/modules.d/elasticsearch.yml.disabled | 2 +- metricbeat/modules.d/envoyproxy.yml.disabled | 2 +- metricbeat/modules.d/etcd.yml.disabled | 2 +- metricbeat/modules.d/golang.yml.disabled | 2 +- metricbeat/modules.d/graphite.yml.disabled | 2 +- metricbeat/modules.d/haproxy.yml.disabled | 2 +- metricbeat/modules.d/http.yml.disabled | 2 +- metricbeat/modules.d/jolokia.yml.disabled | 2 +- metricbeat/modules.d/kafka.yml.disabled | 2 +- metricbeat/modules.d/kibana-xpack.yml.disabled | 2 +- metricbeat/modules.d/kibana.yml.disabled | 2 +- metricbeat/modules.d/kubernetes.yml.disabled | 2 +- metricbeat/modules.d/kvm.yml.disabled | 2 +- metricbeat/modules.d/linux.yml.disabled | 2 +- metricbeat/modules.d/logstash-xpack.yml.disabled | 2 +- metricbeat/modules.d/logstash.yml.disabled | 2 +- metricbeat/modules.d/memcached.yml.disabled | 2 +- metricbeat/modules.d/mongodb.yml.disabled | 2 +- metricbeat/modules.d/munin.yml.disabled | 2 +- metricbeat/modules.d/mysql.yml.disabled | 2 +- metricbeat/modules.d/nats.yml.disabled | 2 +- metricbeat/modules.d/nginx.yml.disabled | 2 +- metricbeat/modules.d/openmetrics.yml.disabled | 2 +- metricbeat/modules.d/php_fpm.yml.disabled | 2 +- metricbeat/modules.d/postgresql.yml.disabled | 2 +- metricbeat/modules.d/prometheus.yml.disabled | 2 +- metricbeat/modules.d/rabbitmq.yml.disabled | 2 +- metricbeat/modules.d/redis.yml.disabled | 2 +- metricbeat/modules.d/system.yml | 2 +- metricbeat/modules.d/traefik.yml.disabled | 2 +- metricbeat/modules.d/uwsgi.yml.disabled | 2 +- metricbeat/modules.d/vsphere.yml.disabled | 2 +- metricbeat/modules.d/windows.yml.disabled | 2 +- metricbeat/modules.d/zookeeper.yml.disabled | 2 +- x-pack/filebeat/modules.d/activemq.yml.disabled | 2 +- x-pack/filebeat/modules.d/aws.yml.disabled | 2 +- x-pack/filebeat/modules.d/awsfargate.yml.disabled | 2 +- x-pack/filebeat/modules.d/azure.yml.disabled | 2 +- x-pack/filebeat/modules.d/barracuda.yml.disabled | 2 +- x-pack/filebeat/modules.d/bluecoat.yml.disabled | 2 +- x-pack/filebeat/modules.d/cef.yml.disabled | 2 +- x-pack/filebeat/modules.d/checkpoint.yml.disabled | 2 +- x-pack/filebeat/modules.d/cisco.yml.disabled | 2 +- x-pack/filebeat/modules.d/coredns.yml.disabled | 2 +- x-pack/filebeat/modules.d/crowdstrike.yml.disabled | 2 +- x-pack/filebeat/modules.d/cyberarkpas.yml.disabled | 2 +- x-pack/filebeat/modules.d/cylance.yml.disabled | 2 +- x-pack/filebeat/modules.d/envoyproxy.yml.disabled | 2 +- x-pack/filebeat/modules.d/f5.yml.disabled | 2 +- x-pack/filebeat/modules.d/fortinet.yml.disabled | 2 +- x-pack/filebeat/modules.d/gcp.yml.disabled | 2 +- x-pack/filebeat/modules.d/google_workspace.yml.disabled | 2 +- x-pack/filebeat/modules.d/ibmmq.yml.disabled | 2 +- x-pack/filebeat/modules.d/imperva.yml.disabled | 2 +- x-pack/filebeat/modules.d/infoblox.yml.disabled | 2 +- x-pack/filebeat/modules.d/iptables.yml.disabled | 2 +- x-pack/filebeat/modules.d/juniper.yml.disabled | 2 +- x-pack/filebeat/modules.d/microsoft.yml.disabled | 2 +- x-pack/filebeat/modules.d/misp.yml.disabled | 2 +- x-pack/filebeat/modules.d/mssql.yml.disabled | 2 +- x-pack/filebeat/modules.d/mysqlenterprise.yml.disabled | 2 +- x-pack/filebeat/modules.d/netflow.yml.disabled | 2 +- x-pack/filebeat/modules.d/netscout.yml.disabled | 2 +- x-pack/filebeat/modules.d/o365.yml.disabled | 2 +- x-pack/filebeat/modules.d/okta.yml.disabled | 2 +- x-pack/filebeat/modules.d/oracle.yml.disabled | 2 +- x-pack/filebeat/modules.d/panw.yml.disabled | 2 +- x-pack/filebeat/modules.d/proofpoint.yml.disabled | 2 +- x-pack/filebeat/modules.d/rabbitmq.yml.disabled | 2 +- x-pack/filebeat/modules.d/radware.yml.disabled | 2 +- x-pack/filebeat/modules.d/salesforce.yml.disabled | 2 +- x-pack/filebeat/modules.d/snort.yml.disabled | 2 +- x-pack/filebeat/modules.d/snyk.yml.disabled | 2 +- x-pack/filebeat/modules.d/sonicwall.yml.disabled | 2 +- x-pack/filebeat/modules.d/sophos.yml.disabled | 2 +- x-pack/filebeat/modules.d/squid.yml.disabled | 2 +- x-pack/filebeat/modules.d/suricata.yml.disabled | 2 +- x-pack/filebeat/modules.d/threatintel.yml.disabled | 2 +- x-pack/filebeat/modules.d/tomcat.yml.disabled | 2 +- x-pack/filebeat/modules.d/zeek.yml.disabled | 2 +- x-pack/filebeat/modules.d/zookeeper.yml.disabled | 2 +- x-pack/filebeat/modules.d/zoom.yml.disabled | 2 +- x-pack/filebeat/modules.d/zscaler.yml.disabled | 2 +- x-pack/metricbeat/modules.d/activemq.yml.disabled | 2 +- x-pack/metricbeat/modules.d/airflow.yml.disabled | 2 +- x-pack/metricbeat/modules.d/aws.yml.disabled | 2 +- x-pack/metricbeat/modules.d/awsfargate.yml.disabled | 2 +- x-pack/metricbeat/modules.d/azure.yml.disabled | 2 +- x-pack/metricbeat/modules.d/cloudfoundry.yml.disabled | 2 +- x-pack/metricbeat/modules.d/cockroachdb.yml.disabled | 2 +- x-pack/metricbeat/modules.d/containerd.yml.disabled | 2 +- x-pack/metricbeat/modules.d/coredns.yml.disabled | 2 +- .../modules.d/enterprisesearch-xpack.yml.disabled | 2 +- .../metricbeat/modules.d/enterprisesearch.yml.disabled | 2 +- x-pack/metricbeat/modules.d/gcp.yml.disabled | 2 +- x-pack/metricbeat/modules.d/ibmmq.yml.disabled | 2 +- x-pack/metricbeat/modules.d/iis.yml.disabled | 2 +- x-pack/metricbeat/modules.d/istio.yml.disabled | 2 +- x-pack/metricbeat/modules.d/mssql.yml.disabled | 2 +- x-pack/metricbeat/modules.d/oracle.yml.disabled | 2 +- x-pack/metricbeat/modules.d/prometheus.yml.disabled | 2 +- x-pack/metricbeat/modules.d/redisenterprise.yml.disabled | 2 +- x-pack/metricbeat/modules.d/sql.yml.disabled | 2 +- x-pack/metricbeat/modules.d/stan.yml.disabled | 2 +- x-pack/metricbeat/modules.d/statsd.yml.disabled | 2 +- x-pack/metricbeat/modules.d/syncgateway.yml.disabled | 2 +- x-pack/metricbeat/modules.d/tomcat.yml.disabled | 2 +- 141 files changed, 144 insertions(+), 148 deletions(-) diff --git a/dev-tools/mage/settings.go b/dev-tools/mage/settings.go index 2e82c6d6c0d4..0fe010877f0a 100644 --- a/dev-tools/mage/settings.go +++ b/dev-tools/mage/settings.go @@ -386,11 +386,10 @@ func beatVersion() (string, error) { } var ( - beatDocBranchRegex = regexp.MustCompile(`(?m)doc-branch:\s*([^\s]+)\r?$`) - beatDocSiteBranchRegex = regexp.MustCompile(`(?m)doc-site-branch:\s*([^\s]+)\r?$`) - beatDocBranchValue string - beatDocBranchErr error - beatDocBranchOnce sync.Once + beatDocBranchRegex = regexp.MustCompile(`(?m)doc-branch:\s*([^\s]+)\r?$`) + beatDocBranchValue string + beatDocBranchErr error + beatDocBranchOnce sync.Once ) // BeatDocBranch returns the documentation branch name associated with the diff --git a/filebeat/modules.d/apache.yml.disabled b/filebeat/modules.d/apache.yml.disabled index cd58ed77b3c2..d4fbc61659d3 100644 --- a/filebeat/modules.d/apache.yml.disabled +++ b/filebeat/modules.d/apache.yml.disabled @@ -1,5 +1,5 @@ # Module: apache -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-apache.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-apache.html - module: apache # Access logs diff --git a/filebeat/modules.d/auditd.yml.disabled b/filebeat/modules.d/auditd.yml.disabled index b63d14ffc276..8bcedafdee9a 100644 --- a/filebeat/modules.d/auditd.yml.disabled +++ b/filebeat/modules.d/auditd.yml.disabled @@ -1,5 +1,5 @@ # Module: auditd -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-auditd.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-auditd.html - module: auditd log: diff --git a/filebeat/modules.d/elasticsearch.yml.disabled b/filebeat/modules.d/elasticsearch.yml.disabled index 33ea085f7844..75236f1a6640 100644 --- a/filebeat/modules.d/elasticsearch.yml.disabled +++ b/filebeat/modules.d/elasticsearch.yml.disabled @@ -1,5 +1,5 @@ # Module: elasticsearch -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-elasticsearch.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-elasticsearch.html - module: elasticsearch # Server log diff --git a/filebeat/modules.d/haproxy.yml.disabled b/filebeat/modules.d/haproxy.yml.disabled index cb0a107fb5f5..5863c5bbdf8c 100644 --- a/filebeat/modules.d/haproxy.yml.disabled +++ b/filebeat/modules.d/haproxy.yml.disabled @@ -1,5 +1,5 @@ # Module: haproxy -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-haproxy.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-haproxy.html - module: haproxy # All logs diff --git a/filebeat/modules.d/icinga.yml.disabled b/filebeat/modules.d/icinga.yml.disabled index 1f0ba5e4de45..10ab79616eb9 100644 --- a/filebeat/modules.d/icinga.yml.disabled +++ b/filebeat/modules.d/icinga.yml.disabled @@ -1,5 +1,5 @@ # Module: icinga -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-icinga.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-icinga.html - module: icinga # Main logs diff --git a/filebeat/modules.d/iis.yml.disabled b/filebeat/modules.d/iis.yml.disabled index 6be750c8701f..868fadedbb09 100644 --- a/filebeat/modules.d/iis.yml.disabled +++ b/filebeat/modules.d/iis.yml.disabled @@ -1,5 +1,5 @@ # Module: iis -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-iis.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-iis.html - module: iis # Access logs diff --git a/filebeat/modules.d/kafka.yml.disabled b/filebeat/modules.d/kafka.yml.disabled index 0cc4fbf9fe33..fd7b00137392 100644 --- a/filebeat/modules.d/kafka.yml.disabled +++ b/filebeat/modules.d/kafka.yml.disabled @@ -1,5 +1,5 @@ # Module: kafka -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-kafka.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-kafka.html - module: kafka # All logs diff --git a/filebeat/modules.d/kibana.yml.disabled b/filebeat/modules.d/kibana.yml.disabled index 5ade4bf1439e..bc34de819a57 100644 --- a/filebeat/modules.d/kibana.yml.disabled +++ b/filebeat/modules.d/kibana.yml.disabled @@ -1,5 +1,5 @@ # Module: kibana -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-kibana.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-kibana.html - module: kibana # Server logs diff --git a/filebeat/modules.d/logstash.yml.disabled b/filebeat/modules.d/logstash.yml.disabled index 501b8bc33213..fe99eeabae47 100644 --- a/filebeat/modules.d/logstash.yml.disabled +++ b/filebeat/modules.d/logstash.yml.disabled @@ -1,5 +1,5 @@ # Module: logstash -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-logstash.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-logstash.html - module: logstash # logs diff --git a/filebeat/modules.d/mongodb.yml.disabled b/filebeat/modules.d/mongodb.yml.disabled index 4180e5985821..ac31f64bed1d 100644 --- a/filebeat/modules.d/mongodb.yml.disabled +++ b/filebeat/modules.d/mongodb.yml.disabled @@ -1,5 +1,5 @@ # Module: mongodb -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-mongodb.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-mongodb.html - module: mongodb # All logs diff --git a/filebeat/modules.d/mysql.yml.disabled b/filebeat/modules.d/mysql.yml.disabled index b2c42d1f1cd8..dd5079648bc4 100644 --- a/filebeat/modules.d/mysql.yml.disabled +++ b/filebeat/modules.d/mysql.yml.disabled @@ -1,5 +1,5 @@ # Module: mysql -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-mysql.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-mysql.html - module: mysql # Error logs diff --git a/filebeat/modules.d/nats.yml.disabled b/filebeat/modules.d/nats.yml.disabled index 2cfa45e5c193..6074f499cad7 100644 --- a/filebeat/modules.d/nats.yml.disabled +++ b/filebeat/modules.d/nats.yml.disabled @@ -1,5 +1,5 @@ # Module: nats -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-nats.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-nats.html - module: nats # All logs diff --git a/filebeat/modules.d/nginx.yml.disabled b/filebeat/modules.d/nginx.yml.disabled index 709e52630e9c..450b30c0e013 100644 --- a/filebeat/modules.d/nginx.yml.disabled +++ b/filebeat/modules.d/nginx.yml.disabled @@ -1,5 +1,5 @@ # Module: nginx -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-nginx.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-nginx.html - module: nginx # Access logs diff --git a/filebeat/modules.d/osquery.yml.disabled b/filebeat/modules.d/osquery.yml.disabled index 2def611ecbba..0740b774a527 100644 --- a/filebeat/modules.d/osquery.yml.disabled +++ b/filebeat/modules.d/osquery.yml.disabled @@ -1,5 +1,5 @@ # Module: osquery -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-osquery.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-osquery.html - module: osquery result: diff --git a/filebeat/modules.d/pensando.yml.disabled b/filebeat/modules.d/pensando.yml.disabled index 18a8b7d4efe1..1002b61bf3e9 100644 --- a/filebeat/modules.d/pensando.yml.disabled +++ b/filebeat/modules.d/pensando.yml.disabled @@ -1,5 +1,5 @@ # Module: pensando -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-pensando.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-pensando.html - module: pensando # Firewall logs diff --git a/filebeat/modules.d/postgresql.yml.disabled b/filebeat/modules.d/postgresql.yml.disabled index bec77dc84f7a..5df32fefc491 100644 --- a/filebeat/modules.d/postgresql.yml.disabled +++ b/filebeat/modules.d/postgresql.yml.disabled @@ -1,5 +1,5 @@ # Module: postgresql -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-postgresql.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-postgresql.html - module: postgresql # All logs diff --git a/filebeat/modules.d/redis.yml.disabled b/filebeat/modules.d/redis.yml.disabled index 31b022d2bc99..dfec32f8849b 100644 --- a/filebeat/modules.d/redis.yml.disabled +++ b/filebeat/modules.d/redis.yml.disabled @@ -1,5 +1,5 @@ # Module: redis -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-redis.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-redis.html - module: redis # Main logs diff --git a/filebeat/modules.d/santa.yml.disabled b/filebeat/modules.d/santa.yml.disabled index 4707b903ce8b..9655b1afb599 100644 --- a/filebeat/modules.d/santa.yml.disabled +++ b/filebeat/modules.d/santa.yml.disabled @@ -1,5 +1,5 @@ # Module: santa -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-santa.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-santa.html - module: santa log: diff --git a/filebeat/modules.d/system.yml.disabled b/filebeat/modules.d/system.yml.disabled index 1302c6374da8..4171c65f7ad2 100644 --- a/filebeat/modules.d/system.yml.disabled +++ b/filebeat/modules.d/system.yml.disabled @@ -1,5 +1,5 @@ # Module: system -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-system.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-system.html - module: system # Syslog diff --git a/filebeat/modules.d/traefik.yml.disabled b/filebeat/modules.d/traefik.yml.disabled index cc65ce2de9cd..440028cc1823 100644 --- a/filebeat/modules.d/traefik.yml.disabled +++ b/filebeat/modules.d/traefik.yml.disabled @@ -1,5 +1,5 @@ # Module: traefik -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-traefik.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-traefik.html - module: traefik # Access logs diff --git a/libbeat/docs/version.asciidoc b/libbeat/docs/version.asciidoc index d3261c6d65c3..1f9df4e12c65 100644 --- a/libbeat/docs/version.asciidoc +++ b/libbeat/docs/version.asciidoc @@ -1,8 +1,5 @@ :stack-version: 8.9.0 -:doc-branch: main -// FIXME: once elastic.co docs have been switched over to use `main`, remove -// the `doc-site-branch` line below as well as any references to it in the code. -:doc-site-branch: master +:doc-branch: master :go-version: 1.19.9 :release-state: unreleased :python: 3.7 diff --git a/metricbeat/modules.d/aerospike.yml.disabled b/metricbeat/modules.d/aerospike.yml.disabled index 5294b90301ed..a2fbdf83d2ce 100644 --- a/metricbeat/modules.d/aerospike.yml.disabled +++ b/metricbeat/modules.d/aerospike.yml.disabled @@ -1,5 +1,5 @@ # Module: aerospike -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-aerospike.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-aerospike.html - module: aerospike #metricsets: diff --git a/metricbeat/modules.d/apache.yml.disabled b/metricbeat/modules.d/apache.yml.disabled index 9c3adaa97d80..28e34fe429ad 100644 --- a/metricbeat/modules.d/apache.yml.disabled +++ b/metricbeat/modules.d/apache.yml.disabled @@ -1,5 +1,5 @@ # Module: apache -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-apache.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-apache.html - module: apache #metricsets: diff --git a/metricbeat/modules.d/beat-xpack.yml.disabled b/metricbeat/modules.d/beat-xpack.yml.disabled index 98cd8c7edefb..0d254a465a1b 100644 --- a/metricbeat/modules.d/beat-xpack.yml.disabled +++ b/metricbeat/modules.d/beat-xpack.yml.disabled @@ -1,5 +1,5 @@ # Module: beat -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-beat.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-beat.html - module: beat xpack.enabled: true diff --git a/metricbeat/modules.d/beat.yml.disabled b/metricbeat/modules.d/beat.yml.disabled index cb26d83a5cf6..af2907f77b44 100644 --- a/metricbeat/modules.d/beat.yml.disabled +++ b/metricbeat/modules.d/beat.yml.disabled @@ -1,5 +1,5 @@ # Module: beat -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-beat.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-beat.html - module: beat metricsets: diff --git a/metricbeat/modules.d/ceph-mgr.yml.disabled b/metricbeat/modules.d/ceph-mgr.yml.disabled index 9d06114f79f7..84932d3f4c03 100644 --- a/metricbeat/modules.d/ceph-mgr.yml.disabled +++ b/metricbeat/modules.d/ceph-mgr.yml.disabled @@ -1,5 +1,5 @@ # Module: ceph -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-ceph.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-ceph.html - module: ceph metricsets: diff --git a/metricbeat/modules.d/ceph.yml.disabled b/metricbeat/modules.d/ceph.yml.disabled index 550ea8fe6ea4..7e875b274bd9 100644 --- a/metricbeat/modules.d/ceph.yml.disabled +++ b/metricbeat/modules.d/ceph.yml.disabled @@ -1,5 +1,5 @@ # Module: ceph -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-ceph.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-ceph.html - module: ceph #metricsets: diff --git a/metricbeat/modules.d/consul.yml.disabled b/metricbeat/modules.d/consul.yml.disabled index 9344dd8c999f..d9b9dc5085d9 100644 --- a/metricbeat/modules.d/consul.yml.disabled +++ b/metricbeat/modules.d/consul.yml.disabled @@ -1,5 +1,5 @@ # Module: consul -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-consul.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-consul.html - module: consul metricsets: diff --git a/metricbeat/modules.d/couchbase.yml.disabled b/metricbeat/modules.d/couchbase.yml.disabled index 088f98b45c5c..fbb8a53b4caa 100644 --- a/metricbeat/modules.d/couchbase.yml.disabled +++ b/metricbeat/modules.d/couchbase.yml.disabled @@ -1,5 +1,5 @@ # Module: couchbase -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-couchbase.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-couchbase.html - module: couchbase #metricsets: diff --git a/metricbeat/modules.d/couchdb.yml.disabled b/metricbeat/modules.d/couchdb.yml.disabled index 2a2eb9a5613b..265878fc9db4 100644 --- a/metricbeat/modules.d/couchdb.yml.disabled +++ b/metricbeat/modules.d/couchdb.yml.disabled @@ -1,5 +1,5 @@ # Module: couchdb -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-couchdb.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-couchdb.html - module: couchdb metricsets: ["server"] diff --git a/metricbeat/modules.d/docker.yml.disabled b/metricbeat/modules.d/docker.yml.disabled index 88af5d212889..bf5950eb6e79 100644 --- a/metricbeat/modules.d/docker.yml.disabled +++ b/metricbeat/modules.d/docker.yml.disabled @@ -1,5 +1,5 @@ # Module: docker -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-docker.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-docker.html - module: docker #metricsets: diff --git a/metricbeat/modules.d/dropwizard.yml.disabled b/metricbeat/modules.d/dropwizard.yml.disabled index 1103a314d1d5..5baa63494528 100644 --- a/metricbeat/modules.d/dropwizard.yml.disabled +++ b/metricbeat/modules.d/dropwizard.yml.disabled @@ -1,5 +1,5 @@ # Module: dropwizard -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-dropwizard.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-dropwizard.html - module: dropwizard #metricsets: diff --git a/metricbeat/modules.d/elasticsearch-xpack.yml.disabled b/metricbeat/modules.d/elasticsearch-xpack.yml.disabled index d89c8b5d29b8..c7f57b84f541 100644 --- a/metricbeat/modules.d/elasticsearch-xpack.yml.disabled +++ b/metricbeat/modules.d/elasticsearch-xpack.yml.disabled @@ -1,5 +1,5 @@ # Module: elasticsearch -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-elasticsearch.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-elasticsearch.html - module: elasticsearch xpack.enabled: true diff --git a/metricbeat/modules.d/elasticsearch.yml.disabled b/metricbeat/modules.d/elasticsearch.yml.disabled index aadd41d59468..271f927e301e 100644 --- a/metricbeat/modules.d/elasticsearch.yml.disabled +++ b/metricbeat/modules.d/elasticsearch.yml.disabled @@ -1,5 +1,5 @@ # Module: elasticsearch -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-elasticsearch.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-elasticsearch.html - module: elasticsearch #metricsets: diff --git a/metricbeat/modules.d/envoyproxy.yml.disabled b/metricbeat/modules.d/envoyproxy.yml.disabled index ca75daff0850..67d638f0b484 100644 --- a/metricbeat/modules.d/envoyproxy.yml.disabled +++ b/metricbeat/modules.d/envoyproxy.yml.disabled @@ -1,5 +1,5 @@ # Module: envoyproxy -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-envoyproxy.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-envoyproxy.html - module: envoyproxy #metricsets: diff --git a/metricbeat/modules.d/etcd.yml.disabled b/metricbeat/modules.d/etcd.yml.disabled index 5aa30fb86e7a..5a6fa8cd1791 100644 --- a/metricbeat/modules.d/etcd.yml.disabled +++ b/metricbeat/modules.d/etcd.yml.disabled @@ -1,5 +1,5 @@ # Module: etcd -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-etcd.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-etcd.html - module: etcd #metricsets: diff --git a/metricbeat/modules.d/golang.yml.disabled b/metricbeat/modules.d/golang.yml.disabled index 9f9e5624fa30..8bb65e090e18 100644 --- a/metricbeat/modules.d/golang.yml.disabled +++ b/metricbeat/modules.d/golang.yml.disabled @@ -1,5 +1,5 @@ # Module: golang -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-golang.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-golang.html - module: golang #metricsets: diff --git a/metricbeat/modules.d/graphite.yml.disabled b/metricbeat/modules.d/graphite.yml.disabled index 3354715923c4..78f7c32b3047 100644 --- a/metricbeat/modules.d/graphite.yml.disabled +++ b/metricbeat/modules.d/graphite.yml.disabled @@ -1,5 +1,5 @@ # Module: graphite -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-graphite.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-graphite.html - module: graphite #metricsets: diff --git a/metricbeat/modules.d/haproxy.yml.disabled b/metricbeat/modules.d/haproxy.yml.disabled index e95f687253d2..2c61ee0c55dd 100644 --- a/metricbeat/modules.d/haproxy.yml.disabled +++ b/metricbeat/modules.d/haproxy.yml.disabled @@ -1,5 +1,5 @@ # Module: haproxy -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-haproxy.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-haproxy.html - module: haproxy #metricsets: diff --git a/metricbeat/modules.d/http.yml.disabled b/metricbeat/modules.d/http.yml.disabled index 63ebd2ee0935..0ce5b5c0f85c 100644 --- a/metricbeat/modules.d/http.yml.disabled +++ b/metricbeat/modules.d/http.yml.disabled @@ -1,5 +1,5 @@ # Module: http -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-http.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-http.html - module: http #metricsets: diff --git a/metricbeat/modules.d/jolokia.yml.disabled b/metricbeat/modules.d/jolokia.yml.disabled index b58782353ecd..2190273485f9 100644 --- a/metricbeat/modules.d/jolokia.yml.disabled +++ b/metricbeat/modules.d/jolokia.yml.disabled @@ -1,5 +1,5 @@ # Module: jolokia -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-jolokia.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-jolokia.html - module: jolokia #metricsets: ["jmx"] diff --git a/metricbeat/modules.d/kafka.yml.disabled b/metricbeat/modules.d/kafka.yml.disabled index afafa7e5a4c5..1e0db5d517b8 100644 --- a/metricbeat/modules.d/kafka.yml.disabled +++ b/metricbeat/modules.d/kafka.yml.disabled @@ -1,5 +1,5 @@ # Module: kafka -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-kafka.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-kafka.html # Kafka metrics collected using the Kafka protocol - module: kafka diff --git a/metricbeat/modules.d/kibana-xpack.yml.disabled b/metricbeat/modules.d/kibana-xpack.yml.disabled index 91471a7c212b..dd6b4d939a2e 100644 --- a/metricbeat/modules.d/kibana-xpack.yml.disabled +++ b/metricbeat/modules.d/kibana-xpack.yml.disabled @@ -1,5 +1,5 @@ # Module: kibana -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-kibana.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-kibana.html - module: kibana xpack.enabled: true diff --git a/metricbeat/modules.d/kibana.yml.disabled b/metricbeat/modules.d/kibana.yml.disabled index 27ca4b1a05fe..78f769cd65e1 100644 --- a/metricbeat/modules.d/kibana.yml.disabled +++ b/metricbeat/modules.d/kibana.yml.disabled @@ -1,5 +1,5 @@ # Module: kibana -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-kibana.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-kibana.html - module: kibana #metricsets: diff --git a/metricbeat/modules.d/kubernetes.yml.disabled b/metricbeat/modules.d/kubernetes.yml.disabled index 23bd210a8357..02baebb8bb7f 100644 --- a/metricbeat/modules.d/kubernetes.yml.disabled +++ b/metricbeat/modules.d/kubernetes.yml.disabled @@ -1,5 +1,5 @@ # Module: kubernetes -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-kubernetes.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-kubernetes.html # Node metrics, from kubelet: - module: kubernetes diff --git a/metricbeat/modules.d/kvm.yml.disabled b/metricbeat/modules.d/kvm.yml.disabled index 00e06354b0b2..8450e1afc6d1 100644 --- a/metricbeat/modules.d/kvm.yml.disabled +++ b/metricbeat/modules.d/kvm.yml.disabled @@ -1,5 +1,5 @@ # Module: kvm -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-kvm.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-kvm.html - module: kvm #metricsets: diff --git a/metricbeat/modules.d/linux.yml.disabled b/metricbeat/modules.d/linux.yml.disabled index 2c28e8bcbd07..df7311017bf9 100644 --- a/metricbeat/modules.d/linux.yml.disabled +++ b/metricbeat/modules.d/linux.yml.disabled @@ -1,5 +1,5 @@ # Module: linux -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-linux.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-linux.html - module: linux period: 10s diff --git a/metricbeat/modules.d/logstash-xpack.yml.disabled b/metricbeat/modules.d/logstash-xpack.yml.disabled index b00f4479919a..db78289f2a86 100644 --- a/metricbeat/modules.d/logstash-xpack.yml.disabled +++ b/metricbeat/modules.d/logstash-xpack.yml.disabled @@ -1,5 +1,5 @@ # Module: logstash -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-logstash.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-logstash.html - module: logstash xpack.enabled: true diff --git a/metricbeat/modules.d/logstash.yml.disabled b/metricbeat/modules.d/logstash.yml.disabled index 90274a3c7281..72ea8231ff4b 100644 --- a/metricbeat/modules.d/logstash.yml.disabled +++ b/metricbeat/modules.d/logstash.yml.disabled @@ -1,5 +1,5 @@ # Module: logstash -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-logstash.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-logstash.html - module: logstash #metricsets: diff --git a/metricbeat/modules.d/memcached.yml.disabled b/metricbeat/modules.d/memcached.yml.disabled index 0df976bb0bf6..7037988cc354 100644 --- a/metricbeat/modules.d/memcached.yml.disabled +++ b/metricbeat/modules.d/memcached.yml.disabled @@ -1,5 +1,5 @@ # Module: memcached -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-memcached.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-memcached.html - module: memcached # metricsets: ["stats"] diff --git a/metricbeat/modules.d/mongodb.yml.disabled b/metricbeat/modules.d/mongodb.yml.disabled index 48705eae39f6..0d4c26be4a5a 100644 --- a/metricbeat/modules.d/mongodb.yml.disabled +++ b/metricbeat/modules.d/mongodb.yml.disabled @@ -1,5 +1,5 @@ # Module: mongodb -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-mongodb.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-mongodb.html - module: mongodb #metricsets: diff --git a/metricbeat/modules.d/munin.yml.disabled b/metricbeat/modules.d/munin.yml.disabled index 803d200561ba..d42b1d9919ec 100644 --- a/metricbeat/modules.d/munin.yml.disabled +++ b/metricbeat/modules.d/munin.yml.disabled @@ -1,5 +1,5 @@ # Module: munin -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-munin.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-munin.html - module: munin #metricsets: diff --git a/metricbeat/modules.d/mysql.yml.disabled b/metricbeat/modules.d/mysql.yml.disabled index 2913f5af8bc8..2b3371b18904 100644 --- a/metricbeat/modules.d/mysql.yml.disabled +++ b/metricbeat/modules.d/mysql.yml.disabled @@ -1,5 +1,5 @@ # Module: mysql -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-mysql.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-mysql.html - module: mysql #metricsets: diff --git a/metricbeat/modules.d/nats.yml.disabled b/metricbeat/modules.d/nats.yml.disabled index e1e751cdb495..d398ac0be432 100644 --- a/metricbeat/modules.d/nats.yml.disabled +++ b/metricbeat/modules.d/nats.yml.disabled @@ -1,5 +1,5 @@ # Module: nats -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-nats.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-nats.html - module: nats metricsets: diff --git a/metricbeat/modules.d/nginx.yml.disabled b/metricbeat/modules.d/nginx.yml.disabled index 40c3bea92e55..786cc90edd6d 100644 --- a/metricbeat/modules.d/nginx.yml.disabled +++ b/metricbeat/modules.d/nginx.yml.disabled @@ -1,5 +1,5 @@ # Module: nginx -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-nginx.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-nginx.html - module: nginx #metricsets: diff --git a/metricbeat/modules.d/openmetrics.yml.disabled b/metricbeat/modules.d/openmetrics.yml.disabled index bebd339a1a27..ad933acedad0 100644 --- a/metricbeat/modules.d/openmetrics.yml.disabled +++ b/metricbeat/modules.d/openmetrics.yml.disabled @@ -1,5 +1,5 @@ # Module: openmetrics -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-openmetrics.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-openmetrics.html - module: openmetrics metricsets: ['collector'] diff --git a/metricbeat/modules.d/php_fpm.yml.disabled b/metricbeat/modules.d/php_fpm.yml.disabled index 0ca2ac5c1df1..08aaa3cc9579 100644 --- a/metricbeat/modules.d/php_fpm.yml.disabled +++ b/metricbeat/modules.d/php_fpm.yml.disabled @@ -1,5 +1,5 @@ # Module: php_fpm -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-php_fpm.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-php_fpm.html - module: php_fpm #metricsets: diff --git a/metricbeat/modules.d/postgresql.yml.disabled b/metricbeat/modules.d/postgresql.yml.disabled index fe2e5858dfb6..14ee2fc7acae 100644 --- a/metricbeat/modules.d/postgresql.yml.disabled +++ b/metricbeat/modules.d/postgresql.yml.disabled @@ -1,5 +1,5 @@ # Module: postgresql -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-postgresql.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-postgresql.html - module: postgresql #metricsets: diff --git a/metricbeat/modules.d/prometheus.yml.disabled b/metricbeat/modules.d/prometheus.yml.disabled index f829e3d89da3..82f455739319 100644 --- a/metricbeat/modules.d/prometheus.yml.disabled +++ b/metricbeat/modules.d/prometheus.yml.disabled @@ -1,5 +1,5 @@ # Module: prometheus -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-prometheus.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-prometheus.html # Metrics collected from a Prometheus endpoint - module: prometheus diff --git a/metricbeat/modules.d/rabbitmq.yml.disabled b/metricbeat/modules.d/rabbitmq.yml.disabled index b6967556f838..ed0d81595719 100644 --- a/metricbeat/modules.d/rabbitmq.yml.disabled +++ b/metricbeat/modules.d/rabbitmq.yml.disabled @@ -1,5 +1,5 @@ # Module: rabbitmq -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-rabbitmq.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-rabbitmq.html - module: rabbitmq #metricsets: diff --git a/metricbeat/modules.d/redis.yml.disabled b/metricbeat/modules.d/redis.yml.disabled index 8b520cf39e85..d2ad5abda481 100644 --- a/metricbeat/modules.d/redis.yml.disabled +++ b/metricbeat/modules.d/redis.yml.disabled @@ -1,5 +1,5 @@ # Module: redis -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-redis.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-redis.html - module: redis #metricsets: diff --git a/metricbeat/modules.d/system.yml b/metricbeat/modules.d/system.yml index 4123ea00f332..3c511e77439d 100644 --- a/metricbeat/modules.d/system.yml +++ b/metricbeat/modules.d/system.yml @@ -1,5 +1,5 @@ # Module: system -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-system.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-system.html - module: system period: 10s diff --git a/metricbeat/modules.d/traefik.yml.disabled b/metricbeat/modules.d/traefik.yml.disabled index b186538f4e19..35326a4ec4aa 100644 --- a/metricbeat/modules.d/traefik.yml.disabled +++ b/metricbeat/modules.d/traefik.yml.disabled @@ -1,5 +1,5 @@ # Module: traefik -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-traefik.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-traefik.html - module: traefik metricsets: ["health"] diff --git a/metricbeat/modules.d/uwsgi.yml.disabled b/metricbeat/modules.d/uwsgi.yml.disabled index 7ac6322064c1..f758061b65a7 100644 --- a/metricbeat/modules.d/uwsgi.yml.disabled +++ b/metricbeat/modules.d/uwsgi.yml.disabled @@ -1,5 +1,5 @@ # Module: uwsgi -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-uwsgi.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-uwsgi.html - module: uwsgi #metricsets: diff --git a/metricbeat/modules.d/vsphere.yml.disabled b/metricbeat/modules.d/vsphere.yml.disabled index 874b3b5b2e89..c56a9b1ac334 100644 --- a/metricbeat/modules.d/vsphere.yml.disabled +++ b/metricbeat/modules.d/vsphere.yml.disabled @@ -1,5 +1,5 @@ # Module: vsphere -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-vsphere.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-vsphere.html - module: vsphere #metricsets: diff --git a/metricbeat/modules.d/windows.yml.disabled b/metricbeat/modules.d/windows.yml.disabled index afe1af593116..717e52655a2c 100644 --- a/metricbeat/modules.d/windows.yml.disabled +++ b/metricbeat/modules.d/windows.yml.disabled @@ -1,5 +1,5 @@ # Module: windows -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-windows.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-windows.html - module: windows metricsets: diff --git a/metricbeat/modules.d/zookeeper.yml.disabled b/metricbeat/modules.d/zookeeper.yml.disabled index f8d16c527a66..7d44efb938ee 100644 --- a/metricbeat/modules.d/zookeeper.yml.disabled +++ b/metricbeat/modules.d/zookeeper.yml.disabled @@ -1,5 +1,5 @@ # Module: zookeeper -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-zookeeper.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-zookeeper.html - module: zookeeper #metricsets: diff --git a/x-pack/filebeat/modules.d/activemq.yml.disabled b/x-pack/filebeat/modules.d/activemq.yml.disabled index e19824686aef..82c70b169479 100644 --- a/x-pack/filebeat/modules.d/activemq.yml.disabled +++ b/x-pack/filebeat/modules.d/activemq.yml.disabled @@ -1,5 +1,5 @@ # Module: activemq -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-activemq.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-activemq.html - module: activemq # Audit logs diff --git a/x-pack/filebeat/modules.d/aws.yml.disabled b/x-pack/filebeat/modules.d/aws.yml.disabled index c730b8aea074..6a49839c1160 100644 --- a/x-pack/filebeat/modules.d/aws.yml.disabled +++ b/x-pack/filebeat/modules.d/aws.yml.disabled @@ -1,5 +1,5 @@ # Module: aws -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-aws.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-aws.html - module: aws cloudtrail: diff --git a/x-pack/filebeat/modules.d/awsfargate.yml.disabled b/x-pack/filebeat/modules.d/awsfargate.yml.disabled index c2e96fd2f933..57a5e4191354 100644 --- a/x-pack/filebeat/modules.d/awsfargate.yml.disabled +++ b/x-pack/filebeat/modules.d/awsfargate.yml.disabled @@ -1,5 +1,5 @@ # Module: awsfargate -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-awsfargate.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-awsfargate.html - module: awsfargate log: diff --git a/x-pack/filebeat/modules.d/azure.yml.disabled b/x-pack/filebeat/modules.d/azure.yml.disabled index 97eb4b9e4612..04fe209e3f71 100644 --- a/x-pack/filebeat/modules.d/azure.yml.disabled +++ b/x-pack/filebeat/modules.d/azure.yml.disabled @@ -1,5 +1,5 @@ # Module: azure -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-azure.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-azure.html - module: azure # All logs diff --git a/x-pack/filebeat/modules.d/barracuda.yml.disabled b/x-pack/filebeat/modules.d/barracuda.yml.disabled index 3926a2fec960..6327b8d6a755 100644 --- a/x-pack/filebeat/modules.d/barracuda.yml.disabled +++ b/x-pack/filebeat/modules.d/barracuda.yml.disabled @@ -1,5 +1,5 @@ # Module: barracuda -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-barracuda.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-barracuda.html - module: barracuda waf: diff --git a/x-pack/filebeat/modules.d/bluecoat.yml.disabled b/x-pack/filebeat/modules.d/bluecoat.yml.disabled index 28badfd0def5..98a4cef099bb 100644 --- a/x-pack/filebeat/modules.d/bluecoat.yml.disabled +++ b/x-pack/filebeat/modules.d/bluecoat.yml.disabled @@ -1,5 +1,5 @@ # Module: bluecoat -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-bluecoat.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-bluecoat.html - module: bluecoat director: diff --git a/x-pack/filebeat/modules.d/cef.yml.disabled b/x-pack/filebeat/modules.d/cef.yml.disabled index 1834c8f4dbae..cda083f4a5eb 100644 --- a/x-pack/filebeat/modules.d/cef.yml.disabled +++ b/x-pack/filebeat/modules.d/cef.yml.disabled @@ -1,5 +1,5 @@ # Module: cef -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-cef.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-cef.html - module: cef log: diff --git a/x-pack/filebeat/modules.d/checkpoint.yml.disabled b/x-pack/filebeat/modules.d/checkpoint.yml.disabled index 595beccdbffd..62d30a992b7f 100644 --- a/x-pack/filebeat/modules.d/checkpoint.yml.disabled +++ b/x-pack/filebeat/modules.d/checkpoint.yml.disabled @@ -1,5 +1,5 @@ # Module: checkpoint -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-checkpoint.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-checkpoint.html - module: checkpoint firewall: diff --git a/x-pack/filebeat/modules.d/cisco.yml.disabled b/x-pack/filebeat/modules.d/cisco.yml.disabled index b2aca39798e6..6bc846f93f6a 100644 --- a/x-pack/filebeat/modules.d/cisco.yml.disabled +++ b/x-pack/filebeat/modules.d/cisco.yml.disabled @@ -1,5 +1,5 @@ # Module: cisco -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-cisco.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-cisco.html - module: cisco asa: diff --git a/x-pack/filebeat/modules.d/coredns.yml.disabled b/x-pack/filebeat/modules.d/coredns.yml.disabled index bfcc3bba412e..fb7e99951305 100644 --- a/x-pack/filebeat/modules.d/coredns.yml.disabled +++ b/x-pack/filebeat/modules.d/coredns.yml.disabled @@ -1,5 +1,5 @@ # Module: coredns -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-coredns.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-coredns.html - module: coredns # Fileset for native deployment diff --git a/x-pack/filebeat/modules.d/crowdstrike.yml.disabled b/x-pack/filebeat/modules.d/crowdstrike.yml.disabled index 8f30c4ed8995..aea362f2e403 100644 --- a/x-pack/filebeat/modules.d/crowdstrike.yml.disabled +++ b/x-pack/filebeat/modules.d/crowdstrike.yml.disabled @@ -1,5 +1,5 @@ # Module: crowdstrike -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-crowdstrike.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-crowdstrike.html - module: crowdstrike diff --git a/x-pack/filebeat/modules.d/cyberarkpas.yml.disabled b/x-pack/filebeat/modules.d/cyberarkpas.yml.disabled index 8b4ddf9b814c..f2168e9d4530 100644 --- a/x-pack/filebeat/modules.d/cyberarkpas.yml.disabled +++ b/x-pack/filebeat/modules.d/cyberarkpas.yml.disabled @@ -1,5 +1,5 @@ # Module: cyberarkpas -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-cyberarkpas.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-cyberarkpas.html - module: cyberarkpas audit: diff --git a/x-pack/filebeat/modules.d/cylance.yml.disabled b/x-pack/filebeat/modules.d/cylance.yml.disabled index 48cbb166e829..164642f07382 100644 --- a/x-pack/filebeat/modules.d/cylance.yml.disabled +++ b/x-pack/filebeat/modules.d/cylance.yml.disabled @@ -1,5 +1,5 @@ # Module: cylance -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-cylance.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-cylance.html - module: cylance protect: diff --git a/x-pack/filebeat/modules.d/envoyproxy.yml.disabled b/x-pack/filebeat/modules.d/envoyproxy.yml.disabled index b06026cc061f..d95316b3c301 100644 --- a/x-pack/filebeat/modules.d/envoyproxy.yml.disabled +++ b/x-pack/filebeat/modules.d/envoyproxy.yml.disabled @@ -1,5 +1,5 @@ # Module: envoyproxy -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-envoyproxy.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-envoyproxy.html - module: envoyproxy # Fileset for native deployment diff --git a/x-pack/filebeat/modules.d/f5.yml.disabled b/x-pack/filebeat/modules.d/f5.yml.disabled index cb9399134fe8..4db5209693d3 100644 --- a/x-pack/filebeat/modules.d/f5.yml.disabled +++ b/x-pack/filebeat/modules.d/f5.yml.disabled @@ -1,5 +1,5 @@ # Module: f5 -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-f5.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-f5.html - module: f5 bigipapm: diff --git a/x-pack/filebeat/modules.d/fortinet.yml.disabled b/x-pack/filebeat/modules.d/fortinet.yml.disabled index a07a18bca93b..e31eb967d733 100644 --- a/x-pack/filebeat/modules.d/fortinet.yml.disabled +++ b/x-pack/filebeat/modules.d/fortinet.yml.disabled @@ -1,5 +1,5 @@ # Module: fortinet -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-fortinet.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-fortinet.html - module: fortinet firewall: diff --git a/x-pack/filebeat/modules.d/gcp.yml.disabled b/x-pack/filebeat/modules.d/gcp.yml.disabled index 601be53f69b5..b0b5f636b101 100644 --- a/x-pack/filebeat/modules.d/gcp.yml.disabled +++ b/x-pack/filebeat/modules.d/gcp.yml.disabled @@ -1,5 +1,5 @@ # Module: gcp -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-gcp.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-gcp.html - module: gcp vpcflow: diff --git a/x-pack/filebeat/modules.d/google_workspace.yml.disabled b/x-pack/filebeat/modules.d/google_workspace.yml.disabled index a079e429f846..85142dfcaf02 100644 --- a/x-pack/filebeat/modules.d/google_workspace.yml.disabled +++ b/x-pack/filebeat/modules.d/google_workspace.yml.disabled @@ -1,5 +1,5 @@ # Module: google_workspace -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-google_workspace.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-google_workspace.html - module: google_workspace saml: diff --git a/x-pack/filebeat/modules.d/ibmmq.yml.disabled b/x-pack/filebeat/modules.d/ibmmq.yml.disabled index fd19cafb3c92..4ad3209a90ec 100644 --- a/x-pack/filebeat/modules.d/ibmmq.yml.disabled +++ b/x-pack/filebeat/modules.d/ibmmq.yml.disabled @@ -1,5 +1,5 @@ # Module: ibmmq -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-ibmmq.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-ibmmq.html - module: ibmmq # All logs diff --git a/x-pack/filebeat/modules.d/imperva.yml.disabled b/x-pack/filebeat/modules.d/imperva.yml.disabled index e66163983033..cd864075960b 100644 --- a/x-pack/filebeat/modules.d/imperva.yml.disabled +++ b/x-pack/filebeat/modules.d/imperva.yml.disabled @@ -1,5 +1,5 @@ # Module: imperva -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-imperva.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-imperva.html - module: imperva securesphere: diff --git a/x-pack/filebeat/modules.d/infoblox.yml.disabled b/x-pack/filebeat/modules.d/infoblox.yml.disabled index 910a896d12a8..24d524d259d3 100644 --- a/x-pack/filebeat/modules.d/infoblox.yml.disabled +++ b/x-pack/filebeat/modules.d/infoblox.yml.disabled @@ -1,5 +1,5 @@ # Module: infoblox -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-infoblox.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-infoblox.html - module: infoblox nios: diff --git a/x-pack/filebeat/modules.d/iptables.yml.disabled b/x-pack/filebeat/modules.d/iptables.yml.disabled index a4c73b7a04a1..2d51c67f24e5 100644 --- a/x-pack/filebeat/modules.d/iptables.yml.disabled +++ b/x-pack/filebeat/modules.d/iptables.yml.disabled @@ -1,5 +1,5 @@ # Module: iptables -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-iptables.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-iptables.html - module: iptables log: diff --git a/x-pack/filebeat/modules.d/juniper.yml.disabled b/x-pack/filebeat/modules.d/juniper.yml.disabled index 5fb85afc302c..583f47bb7f73 100644 --- a/x-pack/filebeat/modules.d/juniper.yml.disabled +++ b/x-pack/filebeat/modules.d/juniper.yml.disabled @@ -1,5 +1,5 @@ # Module: juniper -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-juniper.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-juniper.html - module: juniper junos: diff --git a/x-pack/filebeat/modules.d/microsoft.yml.disabled b/x-pack/filebeat/modules.d/microsoft.yml.disabled index 4c5528f5b760..e4af73ad6ede 100644 --- a/x-pack/filebeat/modules.d/microsoft.yml.disabled +++ b/x-pack/filebeat/modules.d/microsoft.yml.disabled @@ -1,5 +1,5 @@ # Module: microsoft -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-microsoft.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-microsoft.html - module: microsoft # ATP configuration diff --git a/x-pack/filebeat/modules.d/misp.yml.disabled b/x-pack/filebeat/modules.d/misp.yml.disabled index 28ca66083678..4e405aaac70e 100644 --- a/x-pack/filebeat/modules.d/misp.yml.disabled +++ b/x-pack/filebeat/modules.d/misp.yml.disabled @@ -1,5 +1,5 @@ # Module: misp -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-misp.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-misp.html # Deprecated in 7.14.0: Recommended to migrate to the Threat Intel module. diff --git a/x-pack/filebeat/modules.d/mssql.yml.disabled b/x-pack/filebeat/modules.d/mssql.yml.disabled index ee3f225a9415..c8473c91dd5f 100644 --- a/x-pack/filebeat/modules.d/mssql.yml.disabled +++ b/x-pack/filebeat/modules.d/mssql.yml.disabled @@ -1,5 +1,5 @@ # Module: mssql -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-mssql.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-mssql.html - module: mssql # Fileset for native deployment diff --git a/x-pack/filebeat/modules.d/mysqlenterprise.yml.disabled b/x-pack/filebeat/modules.d/mysqlenterprise.yml.disabled index 50e8860671f8..33c1731cd19d 100644 --- a/x-pack/filebeat/modules.d/mysqlenterprise.yml.disabled +++ b/x-pack/filebeat/modules.d/mysqlenterprise.yml.disabled @@ -1,5 +1,5 @@ # Module: mysqlenterprise -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-mysqlenterprise.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-mysqlenterprise.html - module: mysqlenterprise audit: diff --git a/x-pack/filebeat/modules.d/netflow.yml.disabled b/x-pack/filebeat/modules.d/netflow.yml.disabled index b2584b168906..7f365e90b436 100644 --- a/x-pack/filebeat/modules.d/netflow.yml.disabled +++ b/x-pack/filebeat/modules.d/netflow.yml.disabled @@ -1,5 +1,5 @@ # Module: netflow -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-netflow.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-netflow.html - module: netflow log: diff --git a/x-pack/filebeat/modules.d/netscout.yml.disabled b/x-pack/filebeat/modules.d/netscout.yml.disabled index 6a0e4c0dce6d..c6d5520629b8 100644 --- a/x-pack/filebeat/modules.d/netscout.yml.disabled +++ b/x-pack/filebeat/modules.d/netscout.yml.disabled @@ -1,5 +1,5 @@ # Module: netscout -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-netscout.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-netscout.html - module: netscout sightline: diff --git a/x-pack/filebeat/modules.d/o365.yml.disabled b/x-pack/filebeat/modules.d/o365.yml.disabled index 99724949b39b..ab61528d6f9d 100644 --- a/x-pack/filebeat/modules.d/o365.yml.disabled +++ b/x-pack/filebeat/modules.d/o365.yml.disabled @@ -1,5 +1,5 @@ # Module: o365 -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-o365.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-o365.html - module: o365 audit: diff --git a/x-pack/filebeat/modules.d/okta.yml.disabled b/x-pack/filebeat/modules.d/okta.yml.disabled index 13706b240d2b..062856ce4e4c 100644 --- a/x-pack/filebeat/modules.d/okta.yml.disabled +++ b/x-pack/filebeat/modules.d/okta.yml.disabled @@ -1,5 +1,5 @@ # Module: okta -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-okta.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-okta.html - module: okta system: diff --git a/x-pack/filebeat/modules.d/oracle.yml.disabled b/x-pack/filebeat/modules.d/oracle.yml.disabled index c74c5f889f83..aa24b1f67554 100644 --- a/x-pack/filebeat/modules.d/oracle.yml.disabled +++ b/x-pack/filebeat/modules.d/oracle.yml.disabled @@ -1,5 +1,5 @@ # Module: oracle -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-oracle.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-oracle.html - module: oracle database_audit: diff --git a/x-pack/filebeat/modules.d/panw.yml.disabled b/x-pack/filebeat/modules.d/panw.yml.disabled index 93b9a6836030..1a630f8fb4ee 100644 --- a/x-pack/filebeat/modules.d/panw.yml.disabled +++ b/x-pack/filebeat/modules.d/panw.yml.disabled @@ -1,5 +1,5 @@ # Module: panw -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-panw.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-panw.html - module: panw panos: diff --git a/x-pack/filebeat/modules.d/proofpoint.yml.disabled b/x-pack/filebeat/modules.d/proofpoint.yml.disabled index 2c5dfec92e57..34b31277086d 100644 --- a/x-pack/filebeat/modules.d/proofpoint.yml.disabled +++ b/x-pack/filebeat/modules.d/proofpoint.yml.disabled @@ -1,5 +1,5 @@ # Module: proofpoint -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-proofpoint.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-proofpoint.html - module: proofpoint emailsecurity: diff --git a/x-pack/filebeat/modules.d/rabbitmq.yml.disabled b/x-pack/filebeat/modules.d/rabbitmq.yml.disabled index 2b2171f86d0d..437cf9a57219 100644 --- a/x-pack/filebeat/modules.d/rabbitmq.yml.disabled +++ b/x-pack/filebeat/modules.d/rabbitmq.yml.disabled @@ -1,5 +1,5 @@ # Module: rabbitmq -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-rabbitmq.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-rabbitmq.html - module: rabbitmq # All logs diff --git a/x-pack/filebeat/modules.d/radware.yml.disabled b/x-pack/filebeat/modules.d/radware.yml.disabled index fe39a7b805eb..553d84591276 100644 --- a/x-pack/filebeat/modules.d/radware.yml.disabled +++ b/x-pack/filebeat/modules.d/radware.yml.disabled @@ -1,5 +1,5 @@ # Module: radware -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-radware.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-radware.html - module: radware defensepro: diff --git a/x-pack/filebeat/modules.d/salesforce.yml.disabled b/x-pack/filebeat/modules.d/salesforce.yml.disabled index 8535b30f0060..93d04365a868 100644 --- a/x-pack/filebeat/modules.d/salesforce.yml.disabled +++ b/x-pack/filebeat/modules.d/salesforce.yml.disabled @@ -1,5 +1,5 @@ # Module: salesforce -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-salesforce.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-salesforce.html - module: salesforce diff --git a/x-pack/filebeat/modules.d/snort.yml.disabled b/x-pack/filebeat/modules.d/snort.yml.disabled index d8befbb7d7c4..89d25c4b5566 100644 --- a/x-pack/filebeat/modules.d/snort.yml.disabled +++ b/x-pack/filebeat/modules.d/snort.yml.disabled @@ -1,5 +1,5 @@ # Module: snort -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-snort.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-snort.html - module: snort log: diff --git a/x-pack/filebeat/modules.d/snyk.yml.disabled b/x-pack/filebeat/modules.d/snyk.yml.disabled index ab6b379f389d..f92cf1d71f06 100644 --- a/x-pack/filebeat/modules.d/snyk.yml.disabled +++ b/x-pack/filebeat/modules.d/snyk.yml.disabled @@ -1,5 +1,5 @@ # Module: snyk -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-snyk.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-snyk.html - module: snyk audit: diff --git a/x-pack/filebeat/modules.d/sonicwall.yml.disabled b/x-pack/filebeat/modules.d/sonicwall.yml.disabled index cf0706bdd81b..f267d355b370 100644 --- a/x-pack/filebeat/modules.d/sonicwall.yml.disabled +++ b/x-pack/filebeat/modules.d/sonicwall.yml.disabled @@ -1,5 +1,5 @@ # Module: sonicwall -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-sonicwall.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-sonicwall.html - module: sonicwall firewall: diff --git a/x-pack/filebeat/modules.d/sophos.yml.disabled b/x-pack/filebeat/modules.d/sophos.yml.disabled index 42aa513de7e8..e875354ad628 100644 --- a/x-pack/filebeat/modules.d/sophos.yml.disabled +++ b/x-pack/filebeat/modules.d/sophos.yml.disabled @@ -1,5 +1,5 @@ # Module: sophos -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-sophos.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-sophos.html - module: sophos xg: diff --git a/x-pack/filebeat/modules.d/squid.yml.disabled b/x-pack/filebeat/modules.d/squid.yml.disabled index bc34fdcb5a6e..81d5f6e0af03 100644 --- a/x-pack/filebeat/modules.d/squid.yml.disabled +++ b/x-pack/filebeat/modules.d/squid.yml.disabled @@ -1,5 +1,5 @@ # Module: squid -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-squid.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-squid.html - module: squid log: diff --git a/x-pack/filebeat/modules.d/suricata.yml.disabled b/x-pack/filebeat/modules.d/suricata.yml.disabled index 14b1855a0584..98e905fff23e 100644 --- a/x-pack/filebeat/modules.d/suricata.yml.disabled +++ b/x-pack/filebeat/modules.d/suricata.yml.disabled @@ -1,5 +1,5 @@ # Module: suricata -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-suricata.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-suricata.html - module: suricata # All logs diff --git a/x-pack/filebeat/modules.d/threatintel.yml.disabled b/x-pack/filebeat/modules.d/threatintel.yml.disabled index d5a0365f40cf..717de295f33b 100644 --- a/x-pack/filebeat/modules.d/threatintel.yml.disabled +++ b/x-pack/filebeat/modules.d/threatintel.yml.disabled @@ -1,5 +1,5 @@ # Module: threatintel -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-threatintel.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-threatintel.html - module: threatintel abuseurl: diff --git a/x-pack/filebeat/modules.d/tomcat.yml.disabled b/x-pack/filebeat/modules.d/tomcat.yml.disabled index 1fda24706e3b..dc7a8d7eadd4 100644 --- a/x-pack/filebeat/modules.d/tomcat.yml.disabled +++ b/x-pack/filebeat/modules.d/tomcat.yml.disabled @@ -1,5 +1,5 @@ # Module: tomcat -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-tomcat.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-tomcat.html - module: tomcat log: diff --git a/x-pack/filebeat/modules.d/zeek.yml.disabled b/x-pack/filebeat/modules.d/zeek.yml.disabled index 4017a6e39976..2ceeeea911da 100644 --- a/x-pack/filebeat/modules.d/zeek.yml.disabled +++ b/x-pack/filebeat/modules.d/zeek.yml.disabled @@ -1,5 +1,5 @@ # Module: zeek -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-zeek.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-zeek.html - module: zeek capture_loss: diff --git a/x-pack/filebeat/modules.d/zookeeper.yml.disabled b/x-pack/filebeat/modules.d/zookeeper.yml.disabled index a2cb2977935e..f632c0de9e70 100644 --- a/x-pack/filebeat/modules.d/zookeeper.yml.disabled +++ b/x-pack/filebeat/modules.d/zookeeper.yml.disabled @@ -1,5 +1,5 @@ # Module: zookeeper -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-zookeeper.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-zookeeper.html - module: zookeeper # All logs diff --git a/x-pack/filebeat/modules.d/zoom.yml.disabled b/x-pack/filebeat/modules.d/zoom.yml.disabled index 8fb6dffcaffb..b7a5bc35a002 100644 --- a/x-pack/filebeat/modules.d/zoom.yml.disabled +++ b/x-pack/filebeat/modules.d/zoom.yml.disabled @@ -1,5 +1,5 @@ # Module: zoom -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-zoom.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-zoom.html - module: zoom webhook: diff --git a/x-pack/filebeat/modules.d/zscaler.yml.disabled b/x-pack/filebeat/modules.d/zscaler.yml.disabled index 8ca0cea079cb..732a033073b6 100644 --- a/x-pack/filebeat/modules.d/zscaler.yml.disabled +++ b/x-pack/filebeat/modules.d/zscaler.yml.disabled @@ -1,5 +1,5 @@ # Module: zscaler -# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-zscaler.html +# Docs: https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-zscaler.html - module: zscaler zia: diff --git a/x-pack/metricbeat/modules.d/activemq.yml.disabled b/x-pack/metricbeat/modules.d/activemq.yml.disabled index de0ecb7c79f3..33716db01c9d 100644 --- a/x-pack/metricbeat/modules.d/activemq.yml.disabled +++ b/x-pack/metricbeat/modules.d/activemq.yml.disabled @@ -1,5 +1,5 @@ # Module: activemq -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-activemq.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-activemq.html - module: activemq metricsets: ['broker', 'queue', 'topic'] diff --git a/x-pack/metricbeat/modules.d/airflow.yml.disabled b/x-pack/metricbeat/modules.d/airflow.yml.disabled index e874fcf7db02..010b1daadd8c 100644 --- a/x-pack/metricbeat/modules.d/airflow.yml.disabled +++ b/x-pack/metricbeat/modules.d/airflow.yml.disabled @@ -1,5 +1,5 @@ # Module: airflow -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-airflow.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-airflow.html - module: airflow host: "localhost" diff --git a/x-pack/metricbeat/modules.d/aws.yml.disabled b/x-pack/metricbeat/modules.d/aws.yml.disabled index ddd36a4c3269..3fc7c43a1088 100644 --- a/x-pack/metricbeat/modules.d/aws.yml.disabled +++ b/x-pack/metricbeat/modules.d/aws.yml.disabled @@ -1,5 +1,5 @@ # Module: aws -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-aws.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-aws.html - module: aws period: 1m diff --git a/x-pack/metricbeat/modules.d/awsfargate.yml.disabled b/x-pack/metricbeat/modules.d/awsfargate.yml.disabled index 81c34f5759dd..b2b91f06ee45 100644 --- a/x-pack/metricbeat/modules.d/awsfargate.yml.disabled +++ b/x-pack/metricbeat/modules.d/awsfargate.yml.disabled @@ -1,5 +1,5 @@ # Module: awsfargate -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-awsfargate.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-awsfargate.html - module: awsfargate period: 10s diff --git a/x-pack/metricbeat/modules.d/azure.yml.disabled b/x-pack/metricbeat/modules.d/azure.yml.disabled index e42f064618a8..10d00e003cfc 100644 --- a/x-pack/metricbeat/modules.d/azure.yml.disabled +++ b/x-pack/metricbeat/modules.d/azure.yml.disabled @@ -1,5 +1,5 @@ # Module: azure -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-azure.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-azure.html - module: azure metricsets: diff --git a/x-pack/metricbeat/modules.d/cloudfoundry.yml.disabled b/x-pack/metricbeat/modules.d/cloudfoundry.yml.disabled index e082545a78d0..22a600e51d82 100644 --- a/x-pack/metricbeat/modules.d/cloudfoundry.yml.disabled +++ b/x-pack/metricbeat/modules.d/cloudfoundry.yml.disabled @@ -1,5 +1,5 @@ # Module: cloudfoundry -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-cloudfoundry.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-cloudfoundry.html - module: cloudfoundry metricsets: diff --git a/x-pack/metricbeat/modules.d/cockroachdb.yml.disabled b/x-pack/metricbeat/modules.d/cockroachdb.yml.disabled index 198fb66f8d88..5b0a48e86bbe 100644 --- a/x-pack/metricbeat/modules.d/cockroachdb.yml.disabled +++ b/x-pack/metricbeat/modules.d/cockroachdb.yml.disabled @@ -1,5 +1,5 @@ # Module: cockroachdb -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-cockroachdb.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-cockroachdb.html - module: cockroachdb metricsets: ['status'] diff --git a/x-pack/metricbeat/modules.d/containerd.yml.disabled b/x-pack/metricbeat/modules.d/containerd.yml.disabled index 20b03cd9e508..f21b32139eb1 100644 --- a/x-pack/metricbeat/modules.d/containerd.yml.disabled +++ b/x-pack/metricbeat/modules.d/containerd.yml.disabled @@ -1,5 +1,5 @@ # Module: containerd -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-containerd.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-containerd.html - module: containerd metricsets: ["cpu", "memory", "blkio"] diff --git a/x-pack/metricbeat/modules.d/coredns.yml.disabled b/x-pack/metricbeat/modules.d/coredns.yml.disabled index 60e8b71c32c5..644a62bc4b77 100644 --- a/x-pack/metricbeat/modules.d/coredns.yml.disabled +++ b/x-pack/metricbeat/modules.d/coredns.yml.disabled @@ -1,5 +1,5 @@ # Module: coredns -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-coredns.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-coredns.html - module: coredns metricsets: ["stats"] diff --git a/x-pack/metricbeat/modules.d/enterprisesearch-xpack.yml.disabled b/x-pack/metricbeat/modules.d/enterprisesearch-xpack.yml.disabled index 0af7916573a0..e42dde843c2a 100644 --- a/x-pack/metricbeat/modules.d/enterprisesearch-xpack.yml.disabled +++ b/x-pack/metricbeat/modules.d/enterprisesearch-xpack.yml.disabled @@ -1,5 +1,5 @@ # Module: enterprisesearch -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-enterprisesearch.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-enterprisesearch.html - module: enterprisesearch xpack.enabled: true diff --git a/x-pack/metricbeat/modules.d/enterprisesearch.yml.disabled b/x-pack/metricbeat/modules.d/enterprisesearch.yml.disabled index 122e56b627b1..241791cc203c 100644 --- a/x-pack/metricbeat/modules.d/enterprisesearch.yml.disabled +++ b/x-pack/metricbeat/modules.d/enterprisesearch.yml.disabled @@ -1,5 +1,5 @@ # Module: enterprisesearch -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-enterprisesearch.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-enterprisesearch.html - module: enterprisesearch metricsets: ["health", "stats"] diff --git a/x-pack/metricbeat/modules.d/gcp.yml.disabled b/x-pack/metricbeat/modules.d/gcp.yml.disabled index f79e1607a453..4a42e04b3115 100644 --- a/x-pack/metricbeat/modules.d/gcp.yml.disabled +++ b/x-pack/metricbeat/modules.d/gcp.yml.disabled @@ -1,5 +1,5 @@ # Module: gcp -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-gcp.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-gcp.html - module: gcp metricsets: diff --git a/x-pack/metricbeat/modules.d/ibmmq.yml.disabled b/x-pack/metricbeat/modules.d/ibmmq.yml.disabled index 43940532263f..a2fdf552f1ca 100644 --- a/x-pack/metricbeat/modules.d/ibmmq.yml.disabled +++ b/x-pack/metricbeat/modules.d/ibmmq.yml.disabled @@ -1,5 +1,5 @@ # Module: ibmmq -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-ibmmq.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-ibmmq.html - module: ibmmq metricsets: ['qmgr'] diff --git a/x-pack/metricbeat/modules.d/iis.yml.disabled b/x-pack/metricbeat/modules.d/iis.yml.disabled index 19f348a28755..f81d67eedffa 100644 --- a/x-pack/metricbeat/modules.d/iis.yml.disabled +++ b/x-pack/metricbeat/modules.d/iis.yml.disabled @@ -1,5 +1,5 @@ # Module: iis -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-iis.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-iis.html - module: iis metricsets: diff --git a/x-pack/metricbeat/modules.d/istio.yml.disabled b/x-pack/metricbeat/modules.d/istio.yml.disabled index ccb0884610a9..55c2a1d715a8 100644 --- a/x-pack/metricbeat/modules.d/istio.yml.disabled +++ b/x-pack/metricbeat/modules.d/istio.yml.disabled @@ -1,5 +1,5 @@ # Module: istio -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-istio.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-istio.html # Istio mesh. To collect all Mixer-generated metrics. For versions of Istio prior to 1.5. - module: istio diff --git a/x-pack/metricbeat/modules.d/mssql.yml.disabled b/x-pack/metricbeat/modules.d/mssql.yml.disabled index fbbb7bad8fc1..12eff0522eed 100644 --- a/x-pack/metricbeat/modules.d/mssql.yml.disabled +++ b/x-pack/metricbeat/modules.d/mssql.yml.disabled @@ -1,5 +1,5 @@ # Module: mssql -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-mssql.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-mssql.html - module: mssql metricsets: diff --git a/x-pack/metricbeat/modules.d/oracle.yml.disabled b/x-pack/metricbeat/modules.d/oracle.yml.disabled index 445924b61ea1..99d59eb2c3a5 100644 --- a/x-pack/metricbeat/modules.d/oracle.yml.disabled +++ b/x-pack/metricbeat/modules.d/oracle.yml.disabled @@ -1,5 +1,5 @@ # Module: oracle -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-oracle.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-oracle.html # Module: oracle diff --git a/x-pack/metricbeat/modules.d/prometheus.yml.disabled b/x-pack/metricbeat/modules.d/prometheus.yml.disabled index 11cc449ba47b..d6e00936b2a5 100644 --- a/x-pack/metricbeat/modules.d/prometheus.yml.disabled +++ b/x-pack/metricbeat/modules.d/prometheus.yml.disabled @@ -1,5 +1,5 @@ # Module: prometheus -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-prometheus.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-prometheus.html - module: prometheus period: 10s diff --git a/x-pack/metricbeat/modules.d/redisenterprise.yml.disabled b/x-pack/metricbeat/modules.d/redisenterprise.yml.disabled index 350843a88e93..c3121d7c2fb1 100644 --- a/x-pack/metricbeat/modules.d/redisenterprise.yml.disabled +++ b/x-pack/metricbeat/modules.d/redisenterprise.yml.disabled @@ -1,5 +1,5 @@ # Module: redisenterprise -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-redisenterprise.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-redisenterprise.html - module: redisenterprise metricsets: diff --git a/x-pack/metricbeat/modules.d/sql.yml.disabled b/x-pack/metricbeat/modules.d/sql.yml.disabled index f45644b0b112..5663e03b1ef1 100644 --- a/x-pack/metricbeat/modules.d/sql.yml.disabled +++ b/x-pack/metricbeat/modules.d/sql.yml.disabled @@ -1,5 +1,5 @@ # Module: sql -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-sql.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-sql.html - module: sql metricsets: diff --git a/x-pack/metricbeat/modules.d/stan.yml.disabled b/x-pack/metricbeat/modules.d/stan.yml.disabled index b3f192298747..0f93c0f5a0c2 100644 --- a/x-pack/metricbeat/modules.d/stan.yml.disabled +++ b/x-pack/metricbeat/modules.d/stan.yml.disabled @@ -1,5 +1,5 @@ # Module: stan -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-stan.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-stan.html - module: stan metricsets: ["stats", "subscriptions", "channels"] diff --git a/x-pack/metricbeat/modules.d/statsd.yml.disabled b/x-pack/metricbeat/modules.d/statsd.yml.disabled index 16712fd96b3d..ced946c242fd 100644 --- a/x-pack/metricbeat/modules.d/statsd.yml.disabled +++ b/x-pack/metricbeat/modules.d/statsd.yml.disabled @@ -1,5 +1,5 @@ # Module: statsd -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-statsd.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-statsd.html - module: statsd host: "localhost" diff --git a/x-pack/metricbeat/modules.d/syncgateway.yml.disabled b/x-pack/metricbeat/modules.d/syncgateway.yml.disabled index f37b367c9593..54c42a11809c 100644 --- a/x-pack/metricbeat/modules.d/syncgateway.yml.disabled +++ b/x-pack/metricbeat/modules.d/syncgateway.yml.disabled @@ -1,5 +1,5 @@ # Module: syncgateway -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-syncgateway.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-syncgateway.html - module: syncgateway metricsets: diff --git a/x-pack/metricbeat/modules.d/tomcat.yml.disabled b/x-pack/metricbeat/modules.d/tomcat.yml.disabled index 623f5a888d5c..58a9a4038f7b 100644 --- a/x-pack/metricbeat/modules.d/tomcat.yml.disabled +++ b/x-pack/metricbeat/modules.d/tomcat.yml.disabled @@ -1,5 +1,5 @@ # Module: tomcat -# Docs: https://www.elastic.co/guide/en/beats/metricbeat/main/metricbeat-module-tomcat.html +# Docs: https://www.elastic.co/guide/en/beats/metricbeat/master/metricbeat-module-tomcat.html - module: tomcat metricsets: ['threading', 'cache', 'memory', 'requests'] From 1cbb9ad2227dcfe03daca1958c5503c44516ad42 Mon Sep 17 00:00:00 2001 From: Tiago Queiroz Date: Tue, 13 Jun 2023 18:09:06 +0200 Subject: [PATCH 47/52] Set the unit unhealthy if output fails to start (#35719) If the output fails to start some inputs will go into a deadlock state, so we set the output unit as unhealthy and return early from the reload process. --- CHANGELOG.next.asciidoc | 1 + .../tests/integration/framework_test.go | 32 ++++ ...input_reload_test.go => managerV2_test.go} | 119 +++++++++--- x-pack/libbeat/management/managerV2.go | 20 +- x-pack/libbeat/management/managerV2_test.go | 178 ++++++++++++++++++ 5 files changed, 325 insertions(+), 25 deletions(-) rename x-pack/filebeat/tests/integration/{input_reload_test.go => managerV2_test.go} (79%) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 3a136d87c1dc..3a4356205f4b 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -9,6 +9,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] ==== Breaking changes *Affecting all Beats* +- Fix status reporting to Elastic-Agent when output configuration is invalid running under Elastic-Agent {pull}35719[35719] *Auditbeat* diff --git a/x-pack/filebeat/tests/integration/framework_test.go b/x-pack/filebeat/tests/integration/framework_test.go index 1a65eb96da8e..1d572c6cc002 100644 --- a/x-pack/filebeat/tests/integration/framework_test.go +++ b/x-pack/filebeat/tests/integration/framework_test.go @@ -134,3 +134,35 @@ func (b *BeatProc) openLogFile() *os.File { return f } + +// createTempDir creates a temporary directory that will be +// removed after the tests passes. +// +// If the test fails, the temporary directory is not removed. +// +// If the tests are run with -v, the temporary directory will +// be logged. +func createTempDir(t *testing.T) string { + tempDir, err := filepath.Abs(filepath.Join("../../build/integration-tests/", + fmt.Sprintf("%s-%d", t.Name(), time.Now().Unix()))) + if err != nil { + t.Fatal(err) + } + + if err := os.MkdirAll(tempDir, 0766); err != nil { + t.Fatalf("cannot create tmp dir: %s, msg: %s", err, err.Error()) + } + t.Logf("Temporary directory: %s", tempDir) + + cleanup := func() { + if !t.Failed() { + if err := os.RemoveAll(tempDir); err != nil { + t.Errorf("could not remove temp dir '%s': %s", tempDir, err) + } + t.Logf("Temporary directory '%s' removed", tempDir) + } + } + t.Cleanup(cleanup) + + return tempDir +} diff --git a/x-pack/filebeat/tests/integration/input_reload_test.go b/x-pack/filebeat/tests/integration/managerV2_test.go similarity index 79% rename from x-pack/filebeat/tests/integration/input_reload_test.go rename to x-pack/filebeat/tests/integration/managerV2_test.go index cab3b273a9bf..d0d0eea6e30d 100644 --- a/x-pack/filebeat/tests/integration/input_reload_test.go +++ b/x-pack/filebeat/tests/integration/managerV2_test.go @@ -46,28 +46,7 @@ func TestInputReloadUnderElasticAgent(t *testing.T) { // We create our own temp dir so the files can be persisted // in case the test fails. This will help debugging issues // locally and on CI. - // - // testSucceeded will be set to 'true' as the very last thing on this test, - // it allows us to use t.CleanUp to remove the temporary files - testSucceeded := false - tempDir, err := filepath.Abs(filepath.Join("../../build/integration-tests/", - fmt.Sprintf("%s-%d", t.Name(), time.Now().Unix()))) - if err != nil { - t.Fatal(err) - } - - if err := os.MkdirAll(tempDir, 0766); err != nil { - t.Fatalf("cannot create tmp dir: %s, msg: %s", err, err.Error()) - } - t.Logf("Temporary directory: %s", tempDir) - t.Cleanup(func() { - if testSucceeded { - if err := os.RemoveAll(tempDir); err != nil { - t.Fatalf("could not remove temp dir '%s': %s", tempDir, err) - } - t.Logf("Temporary directory '%s' removed", tempDir) - } - }) + tempDir := createTempDir(t) logFilePath := filepath.Join(tempDir, "flog.log") generateLogFile(t, logFilePath) @@ -273,9 +252,101 @@ func TestInputReloadUnderElasticAgent(t *testing.T) { return filebeat.LogContains("ForceReload set to FALSE") }, waitDeadlineOr5Min(), 100*time.Millisecond, "String 'ForceReload set to FALSE' not found on Filebeat logs") +} + +// TestFailedOutputReportsUnhealthy ensures that if an output +// fails to start and returns an error, the manager will set it +// as failed and the inputs will not be started, which means +// staying on the started state. +func TestFailedOutputReportsUnhealthy(t *testing.T) { + // First things first, ensure ES is running and we can connect to it. + // If ES is not running, the test will timeout and the only way to know + // what caused it is going through Filebeat's logs. + ensureESIsRunning(t) + + tempDir := createTempDir(t) + finalStateReached := false - // Set it to true, so the temporary directory is removed - testSucceeded = true + var units = []*proto.UnitExpected{ + { + Id: "output-unit-borken", + Type: proto.UnitType_OUTPUT, + ConfigStateIdx: 1, + State: proto.State_FAILED, + LogLevel: proto.UnitLogLevel_DEBUG, + Config: &proto.UnitExpectedConfig{ + Id: "default", + Type: "logstash", + Name: "logstash", + Source: requireNewStruct(t, + map[string]interface{}{ + "type": "logstash", + "invalid": "configuration", + }), + }, + }, + // Also add an input unit to make sure it never leaves the + // starting state + { + Id: "input-unit", + Type: proto.UnitType_INPUT, + ConfigStateIdx: 1, + State: proto.State_STARTING, + LogLevel: proto.UnitLogLevel_DEBUG, + Config: &proto.UnitExpectedConfig{ + Id: "log-input", + Type: "log", + Name: "log", + Streams: []*proto.Stream{ + { + Id: "log-input", + Source: requireNewStruct(t, map[string]interface{}{ + "enabled": true, + "type": "log", + "paths": "/tmp/foo", + }), + }, + }, + }, + }, + } + + server := &mock.StubServerV2{ + // The Beat will call the check-in function multiple times: + // - At least once at startup + // - At every state change (starting, configuring, healthy, etc) + // for every Unit. + // + // So we wait until the state matches the desired state + CheckinV2Impl: func(observed *proto.CheckinObserved) *proto.CheckinExpected { + if management.DoesStateMatch(observed, units, 0) { + finalStateReached = true + } + + return &proto.CheckinExpected{ + Units: units, + } + }, + ActionImpl: func(response *proto.ActionResponse) error { return nil }, + } + + require.NoError(t, server.Start()) + + filebeat := NewBeat( + t, + "../../filebeat.test", + tempDir, + "-E", fmt.Sprintf(`management.insecure_grpc_url_for_testing="localhost:%d"`, server.Port), + "-E", "management.enabled=true", + ) + + filebeat.Start() + + require.Eventually(t, func() bool { + return finalStateReached + }, 30*time.Second, 100*time.Millisecond, "Output unit did not report unhealthy") + + t.Cleanup(server.Stop) } func requireNewStruct(t *testing.T, v map[string]interface{}) *structpb.Struct { diff --git a/x-pack/libbeat/management/managerV2.go b/x-pack/libbeat/management/managerV2.go index e02eeb01f64c..55a6f57fe238 100644 --- a/x-pack/libbeat/management/managerV2.go +++ b/x-pack/libbeat/management/managerV2.go @@ -590,7 +590,25 @@ func (cm *BeatV2Manager) reload(units map[unitKey]*client.Unit) { // reload the output configuration if err := cm.reloadOutput(outputUnit); err != nil { - errs = append(errs, err) + // Output creation failed, there is no point in going any further + // because there is no output read the events. + // + // Trying to start inputs will eventually lead them to deadlock + // waiting for the output. Log input will deadlock when starting, + // effectively blocking this manager. + err = fmt.Errorf("could not start output: %w", err) + outputUnit.UpdateState(client.UnitStateFailed, err.Error(), nil) + cm.status = lbmanagement.Failed + cm.message = err.Error() + + // If there are any other errors, set the status accordingly. + // If len(errs), then the there were no previous and the only + // error has been reported already. + if len(errs) > 0 { + errs = append(errs, err) + cm.message = fmt.Sprintf("%s", errs) + } + return } // compute the input configuration diff --git a/x-pack/libbeat/management/managerV2_test.go b/x-pack/libbeat/management/managerV2_test.go index 538dd0c58023..aa84bb9f8f0a 100644 --- a/x-pack/libbeat/management/managerV2_test.go +++ b/x-pack/libbeat/management/managerV2_test.go @@ -5,6 +5,7 @@ package management import ( + "errors" "fmt" "sync" "testing" @@ -220,6 +221,133 @@ func TestManagerV2(t *testing.T) { }, 15*time.Second, 300*time.Millisecond) } +func TestOutputError(t *testing.T) { + // Uncomment the line below to see the debug logs for this test + // logp.DevelopmentSetup(logp.WithLevel(logp.DebugLevel), logp.WithSelectors("*")) + r := reload.NewRegistry() + + output := &mockOutput{ + ReloadFn: func(config *reload.ConfigWithMeta) error { + return errors.New("any kind of error will do") + }, + } + r.MustRegisterOutput(output) + inputs := &mockReloadable{ + ReloadFn: func(configs []*reload.ConfigWithMeta) error { + err := errors.New("Inputs should not be reloaded if the output fails") + t.Fatal(err) + return err + }, + } + r.MustRegisterInput(inputs) + + stateReached := false + units := []*proto.UnitExpected{ + { + Id: "output-unit", + Type: proto.UnitType_OUTPUT, + State: proto.State_HEALTHY, + ConfigStateIdx: 1, + LogLevel: proto.UnitLogLevel_DEBUG, + Config: &proto.UnitExpectedConfig{ + Id: "default", + Type: "mock", + Name: "mock", + Source: requireNewStruct(t, + map[string]interface{}{ + "Is": "this", + "required?": "Yes!", + }), + }, + }, + { + Id: "input-unit", + Type: proto.UnitType_INPUT, + State: proto.State_HEALTHY, + ConfigStateIdx: 1, + LogLevel: proto.UnitLogLevel_DEBUG, + }, + } + + desiredState := []*proto.UnitExpected{ + { + Id: "output-unit", + Type: proto.UnitType_OUTPUT, + State: proto.State_FAILED, + ConfigStateIdx: 1, + LogLevel: proto.UnitLogLevel_DEBUG, + Config: &proto.UnitExpectedConfig{ + Id: "default", + Type: "mock", + Name: "mock", + Source: requireNewStruct(t, + map[string]interface{}{ + "this": "is", + "required": true, + }), + }, + }, + { + Id: "input-unit", + Type: proto.UnitType_INPUT, + State: proto.State_STARTING, + ConfigStateIdx: 1, + LogLevel: proto.UnitLogLevel_DEBUG, + }, + } + + server := &mock.StubServerV2{ + CheckinV2Impl: func(observed *proto.CheckinObserved) *proto.CheckinExpected { + if DoesStateMatch(observed, desiredState, 0) { + stateReached = true + } + return &proto.CheckinExpected{ + Units: units, + } + }, + ActionImpl: func(response *proto.ActionResponse) error { return nil }, + } + + if err := server.Start(); err != nil { + t.Fatalf("could not start mock Elastic-Agent server: %s", err) + } + defer server.Stop() + + client := client.NewV2( + fmt.Sprintf(":%d", server.Port), + "", + client.VersionInfo{}, + grpc.WithTransportCredentials(insecure.NewCredentials())) + + m, err := NewV2AgentManagerWithClient( + &Config{ + Enabled: true, + }, + r, + client, + ) + if err != nil { + t.Fatalf("could not instantiate ManagerV2: %s", err) + } + + mm, ok := m.(*BeatV2Manager) + if !ok { + t.Fatalf("unexpected type for BeatV2Manager: %T", m) + } + + mm.changeDebounce = 10 * time.Millisecond + mm.forceReloadDebounce = 100 * time.Millisecond + + if err := m.Start(); err != nil { + t.Fatalf("could not start ManagerV2: %s", err) + } + defer m.Stop() + + require.Eventually(t, func() bool { + return stateReached + }, 10*time.Second, 100*time.Millisecond, "desired state, output failed, was not reached") +} + func mockSrv( units [][]*proto.UnitExpected, featuresIdxs []uint64, @@ -308,3 +436,53 @@ func (r *reloadableList) Configs() []*reload.ConfigWithMeta { defer r.mx.Unlock() return r.configs } + +type mockOutput struct { + mutex sync.Mutex + ReloadFn func(config *reload.ConfigWithMeta) error + ConfigFn func() *reload.ConfigWithMeta + ConfigsFn func() []*reload.ConfigWithMeta +} + +func (m *mockOutput) Reload(config *reload.ConfigWithMeta) error { + m.mutex.Lock() + defer m.mutex.Unlock() + return m.ReloadFn(config) +} + +func (m *mockOutput) Config() *reload.ConfigWithMeta { + m.mutex.Lock() + defer m.mutex.Unlock() + return m.ConfigFn() +} + +func (m *mockOutput) Configs() []*reload.ConfigWithMeta { + m.mutex.Lock() + defer m.mutex.Unlock() + return m.ConfigsFn() +} + +type mockReloadable struct { + mutex sync.Mutex + ReloadFn func(configs []*reload.ConfigWithMeta) error + ConfigFn func() *reload.ConfigWithMeta + ConfigsFn func() []*reload.ConfigWithMeta +} + +func (m *mockReloadable) Reload(configs []*reload.ConfigWithMeta) error { + m.mutex.Lock() + defer m.mutex.Unlock() + return m.ReloadFn(configs) +} + +func (m *mockReloadable) Config() *reload.ConfigWithMeta { + m.mutex.Lock() + defer m.mutex.Unlock() + return m.ConfigFn() +} + +func (m *mockReloadable) Configs() []*reload.ConfigWithMeta { + m.mutex.Lock() + defer m.mutex.Unlock() + return m.ConfigsFn() +} From d359f9eaf29cfc8679f3694df27af9683f1d6ae5 Mon Sep 17 00:00:00 2001 From: Bharat Pasupula <123897612+bhapas@users.noreply.github.com> Date: Tue, 13 Jun 2023 19:06:29 +0200 Subject: [PATCH 48/52] Fix url scheme grok pattern (#35757) --- CHANGELOG-developer.next.asciidoc | 1 + .../module/panw/panos/ingest/pipeline.yml | 2 +- .../module/panw/panos/test/pan_inc_threat.log | 2 +- .../test/pan_inc_threat.log-expected.json | 84 +++++++++---------- 4 files changed, 45 insertions(+), 44 deletions(-) diff --git a/CHANGELOG-developer.next.asciidoc b/CHANGELOG-developer.next.asciidoc index 5ff66ad373bd..fe7fb5c57287 100644 --- a/CHANGELOG-developer.next.asciidoc +++ b/CHANGELOG-developer.next.asciidoc @@ -82,6 +82,7 @@ The list below covers the major changes between 7.0.0-rc2 and main only. - Fix the ingest pipeline for mysql slowlog to parse schema name with dash {pull}34371[34372] - Fix the multiple host support for mongodb module {pull}34624[34624] - Skip HTTPJSON flakey test. {issue}34929[34929] {pull}35138[35138] +- Fix ingest pipeline for panw module to parse url scheme correctly {pull}35757[35757] ==== Added diff --git a/x-pack/filebeat/module/panw/panos/ingest/pipeline.yml b/x-pack/filebeat/module/panw/panos/ingest/pipeline.yml index 5d5941561ff1..7e34e24fdc2f 100644 --- a/x-pack/filebeat/module/panw/panos/ingest/pipeline.yml +++ b/x-pack/filebeat/module/panw/panos/ingest/pipeline.yml @@ -437,7 +437,7 @@ processors: - grok: field: url.original patterns: - - '(%{ANY:url.scheme}\:\/\/)?(%{USERNAME:url.username}(\:%{PASSWORD:url.password})?\@)?%{DOMAIN:url.domain}(\:%{POSINT:url.port})?(%{PATH:url.path})?(\?%{QUERY:url.query})?(\#%{ANY:url.fragment})?' + - '(%{URIPROTO:url.scheme}\:\/\/)?(%{USERNAME:url.username}(\:%{PASSWORD:url.password})?\@)?%{DOMAIN:url.domain}(\:%{POSINT:url.port})?(%{PATH:url.path})?(\?%{QUERY:url.query})?(\#%{ANY:url.fragment})?' ignore_missing: true pattern_definitions: USERNAME: '[^\:]*' diff --git a/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log b/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log index fff6477c1e40..989fc3e8bd43 100644 --- a/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log +++ b/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log @@ -62,7 +62,7 @@ Mar 25 23:59:12 1,2013/03/25 23:59:12,01606001116,THREAT,url,1,2012/04/10 04:42: Mar 25 23:59:12 1,2013/03/25 23:59:12,01606001116,THREAT,url,1,2012/04/10 04:42:42,192.168.0.2,213.180.199.61,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:42:42,28932,1,59721,80,0,0,0x200000,tcp,block-url,"edw-melon.narod.ru/config.txt",(9999),malware-sites,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,Russian Federation,0, Mar 25 23:59:12 1,2013/03/25 23:59:12,01606001116,THREAT,url,1,2012/04/10 04:42:51,192.168.0.2,213.180.199.61,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:42:51,28953,1,59752,80,0,0,0x200000,tcp,block-url,"maximtushin.narod.ru/config.txt",(9999),malware-sites,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,Russian Federation,0, Mar 25 23:59:17 1,2013/03/25 23:59:17,01606001116,THREAT,file,1,2012/04/10 04:19:59,89.160.20.112,192.168.0.2,0.0.0.0,0.0.0.0,rule1,,crusher,web-browsing,vsys1,untrust,trust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:20:05,64856,1,80,54431,0,0,0x200000,tcp,deny,"uLLGRaXP.exe",Windows Executable (EXE)(52020),any,low,server-to-client,0,0x0,United States,192.168.0.0-192.168.255.255,0, -Mar 25 23:59:22 1,2013/03/25 23:59:22,01606001116,THREAT,url,1,2012/04/10 04:09:01,192.168.0.2,67.43.156.12,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:09:01,55402,1,63183,80,0,0,0x200000,tcp,block-url,"marketingsoluchion.biz/fkn/config.bin",(9999),unknown,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0, +Mar 25 23:59:22 1,2013/03/25 23:59:22,01606001116,THREAT,url,1,2012/04/10 04:09:01,192.168.0.2,67.43.156.12,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:09:01,55402,1,63183,80,0,0,0x200000,tcp,block-url,"www.sportspar.de/widgets/index/refreshStatistic?requestPage=/&requestController=index&referer=https://www.google.com/",(9999),unknown,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0, Mar 25 23:59:32 1,2013/03/25 23:59:32,01606001116,THREAT,data,1,2012/04/09 08:18:27,192.168.0.6,207.46.140.46,0.0.0.0,0.0.0.0,rule1,jordy,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/09 08:18:32,25217,1,1047,80,0,0,0x200000,tcp,alert,"default.aspx",PII(60000),any,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0, Mar 25 23:59:32 1,2013/03/25 23:59:32,01606001116,THREAT,data,1,2012/04/09 08:18:29,81.2.69.143,192.168.0.6,0.0.0.0,0.0.0.0,rule1,,jordy,web-browsing,vsys1,untrust,trust,ethernet1/2,ethernet1/1,forwardAll,2012/04/09 08:18:34,25653,1,80,1039,0,0,0x200000,tcp,alert,"sck.aspx",PII(60000),any,informational,server-to-client,0,0x0,United States,192.168.0.0-192.168.255.255,0, Mar 25 23:59:32 1,2013/03/25 23:59:32,01606001116,THREAT,data,1,2012/04/09 08:18:32,81.2.69.143,192.168.0.6,0.0.0.0,0.0.0.0,rule1,,jordy,web-browsing,vsys1,untrust,trust,ethernet1/2,ethernet1/1,forwardAll,2012/04/09 08:18:37,25717,3,80,1064,0,0,0x200000,tcp,alert,"ADSAdClient31.dll",PII(60000),any,informational,server-to-client,0,0x0,United States,192.168.0.0-192.168.255.255,0, diff --git a/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log-expected.json b/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log-expected.json index 58ba2c93b7ce..9ec6337d6d0e 100644 --- a/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log-expected.json +++ b/x-pack/filebeat/module/panw/panos/test/pan_inc_threat.log-expected.json @@ -6010,7 +6010,7 @@ "event.dataset": "panw.panos", "event.kind": "alert", "event.module": "panw", - "event.original": "Mar 25 23:59:22 1,2013/03/25 23:59:22,01606001116,THREAT,url,1,2012/04/10 04:09:01,192.168.0.2,67.43.156.12,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:09:01,55402,1,63183,80,0,0,0x200000,tcp,block-url,\"marketingsoluchion.biz/fkn/config.bin\",(9999),unknown,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,", + "event.original": "Mar 25 23:59:22 1,2013/03/25 23:59:22,01606001116,THREAT,url,1,2012/04/10 04:09:01,192.168.0.2,67.43.156.12,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:09:01,55402,1,63183,80,0,0,0x200000,tcp,block-url,\"www.sportspar.de/widgets/index/refreshStatistic?requestPage=/&requestController=index&referer=https://www.google.com/\",(9999),unknown,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,", "event.outcome": "success", "event.severity": 5, "event.timezone": "-02:00", @@ -6048,12 +6048,12 @@ "panw.panos.sub_type": "url", "panw.panos.threat.id": "9999", "panw.panos.threat.name": "URL-filtering", - "panw.panos.threat.resource": "marketingsoluchion.biz/fkn/config.bin", + "panw.panos.threat.resource": "www.sportspar.de/widgets/index/refreshStatistic?requestPage=/&requestController=index&referer=https://www.google.com/", "panw.panos.type": "THREAT", "panw.panos.url.category": "unknown", "panw.panos.virtual_sys": "vsys1", "related.hosts": [ - "marketingsoluchion.biz" + "www.sportspar.de" ], "related.ip": [ "0.0.0.0", @@ -6076,10 +6076,10 @@ "forwarded", "pan-os" ], - "url.domain": "marketingsoluchion.biz", - "url.extension": "bin", - "url.original": "marketingsoluchion.biz/fkn/config.bin", - "url.path": "/fkn/config.bin", + "url.domain": "www.sportspar.de", + "url.original": "www.sportspar.de/widgets/index/refreshStatistic?requestPage=/&requestController=index&referer=https://www.google.com/", + "url.path": "/widgets/index/refreshStatistic", + "url.query": "requestPage=/&requestController=index&referer=https://www.google.com/", "user.name": "crusher" }, { @@ -6113,7 +6113,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 26586, + "log.offset": 26666, "network.application": "web-browsing", "network.community_id": "1:KC3xpBK9CdouZqamG9S6Mjl6LIo=", "network.direction": "inbound", @@ -6198,7 +6198,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 26964, + "log.offset": 27044, "network.application": "web-browsing", "network.community_id": "1:oZUSrEMVr54enE9TsNjtdpJu0L8=", "network.direction": "outbound", @@ -6290,7 +6290,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 27336, + "log.offset": 27416, "network.application": "web-browsing", "network.community_id": "1:vpvx2rrEII2Wtti+NqSoe98K6s4=", "network.direction": "outbound", @@ -6382,7 +6382,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 27717, + "log.offset": 27797, "network.application": "web-browsing", "network.community_id": "1:MeB0cefg5kMN7f+LW+cirwH2nA8=", "network.direction": "inbound", @@ -6466,7 +6466,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 28086, + "log.offset": 28166, "network.application": "web-browsing", "network.community_id": "1:lI0hgoESF7/v82QAbsIMoPxInGQ=", "network.direction": "outbound", @@ -6560,7 +6560,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 28455, + "log.offset": 28535, "network.application": "pandora", "network.community_id": "1:c67I85z1uJV7VW6M9MR5Q8fjHQM=", "network.direction": "inbound", @@ -6644,7 +6644,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 28843, + "log.offset": 28923, "network.application": "google-maps", "network.community_id": "1:tsjbpnOPfE5+wHs/9MImDTjVjp8=", "network.direction": "outbound", @@ -6736,7 +6736,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "low", - "log.offset": 29215, + "log.offset": 29295, "network.application": "web-browsing", "network.community_id": "1:a/X3iTqQa+TxkHJgrAy4Npfe+ZM=", "network.direction": "outbound", @@ -6821,7 +6821,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 29590, + "log.offset": 29670, "network.application": "google-maps", "network.community_id": "1:Tc4KEUPBViPeku88f+PNN9tpeuc=", "network.direction": "outbound", @@ -6912,7 +6912,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 29962, + "log.offset": 30042, "network.application": "google-maps", "network.community_id": "1:OjvHxM13sIYbWzkV4RtvyxXDyVM=", "network.direction": "outbound", @@ -7004,7 +7004,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 30336, + "log.offset": 30416, "network.application": "google-maps", "network.community_id": "1:kYzGF0Llye+Lln7ejrGG5SI6mW8=", "network.direction": "outbound", @@ -7096,7 +7096,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 30710, + "log.offset": 30790, "network.application": "google-maps", "network.community_id": "1:AwfQlEV4j9qZjH7WG4q1qExon/o=", "network.direction": "outbound", @@ -7188,7 +7188,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 31082, + "log.offset": 31162, "network.application": "google-analytics", "network.community_id": "1:pRuFj5DzdmtFceU+OTawbYPhbJg=", "network.direction": "inbound", @@ -7272,7 +7272,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 31462, + "log.offset": 31542, "network.application": "google-maps", "network.community_id": "1:PFB0Gj5/utCZj8v3vJPCiBrGY3Y=", "network.direction": "outbound", @@ -7365,7 +7365,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 31836, + "log.offset": 31916, "network.application": "web-browsing", "network.community_id": "1:N/Bc1RgG30q1Owz0DWHR2yEwN44=", "network.direction": "outbound", @@ -7450,7 +7450,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 32215, + "log.offset": 32295, "network.application": "web-browsing", "network.community_id": "1:mSmmKo9krpIsh+2qFAZoA8nMDhg=", "network.direction": "outbound", @@ -7540,7 +7540,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 32600, + "log.offset": 32680, "network.application": "web-browsing", "network.community_id": "1:03rrdI/L+dbrLea/vrQULMTFqvU=", "network.direction": "outbound", @@ -7632,7 +7632,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 32974, + "log.offset": 33054, "network.application": "web-browsing", "network.community_id": "1:bJxw0tI76mNYOiv1ZJjBXdDpnTU=", "network.direction": "outbound", @@ -7721,7 +7721,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 33378, + "log.offset": 33458, "network.application": "google-maps", "network.community_id": "1:h4FhwHd9ztu4jpl3xgOaiB011a4=", "network.direction": "outbound", @@ -7812,7 +7812,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 33749, + "log.offset": 33829, "network.application": "google-maps", "network.community_id": "1:dULQBKOE61wtZ1QM6GKohdrM1GE=", "network.direction": "outbound", @@ -7904,7 +7904,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 34119, + "log.offset": 34199, "network.application": "rss", "network.community_id": "1:DLYH0WNYoXQ93i3rnp9QFsh63iM=", "network.direction": "outbound", @@ -7993,7 +7993,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 34486, + "log.offset": 34566, "network.application": "google-maps", "network.community_id": "1:jorKmgA/OY669gtX62Fasc1iKGc=", "network.direction": "outbound", @@ -8084,7 +8084,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 34858, + "log.offset": 34938, "network.application": "web-browsing", "network.community_id": "1:v/xhtv/qhJVgrOjMPvPqMWlrHXA=", "network.direction": "outbound", @@ -8170,7 +8170,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 35225, + "log.offset": 35305, "network.application": "web-browsing", "network.community_id": "1:lM6ErOc/Uj5ui7hk5LvnxpCB/K0=", "network.direction": "outbound", @@ -8261,7 +8261,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 35600, + "log.offset": 35680, "network.application": "google-maps", "network.community_id": "1:AFqpyz1JYwEsC+Bm2Q7fspI+r8Y=", "network.direction": "outbound", @@ -8363,7 +8363,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 35972, + "log.offset": 36052, "network.application": "google-analytics", "network.community_id": "1:8xEo6/LvOntD+xMHdXzKIXv9JxE=", "network.direction": "inbound", @@ -8447,7 +8447,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 36353, + "log.offset": 36433, "network.application": "google-maps", "network.community_id": "1:diAtdns9tWiH2bS++Pup9kMV+AI=", "network.direction": "outbound", @@ -8538,7 +8538,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 36725, + "log.offset": 36805, "network.application": "google-maps", "network.community_id": "1:cs7mutkQqIorGFAbWD2/09AnYXk=", "network.direction": "outbound", @@ -8630,7 +8630,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 37097, + "log.offset": 37177, "network.application": "pandora", "network.community_id": "1:PzMJQoALQDxnDaqwOEEz4zxyhHU=", "network.direction": "inbound", @@ -8714,7 +8714,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 37484, + "log.offset": 37564, "network.application": "google-maps", "network.community_id": "1:8xnlPG6iTh0CwnSMVwmWkniCAeM=", "network.direction": "outbound", @@ -8807,7 +8807,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 37857, + "log.offset": 37937, "network.application": "google-maps", "network.community_id": "1:SQGgi8ETBszNJv+EzlSRiGB/m5A=", "network.direction": "outbound", @@ -8900,7 +8900,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 38228, + "log.offset": 38308, "network.application": "google-maps", "network.community_id": "1:21uyYLV+/XbEeb+gCdBr5K1MWLU=", "network.direction": "outbound", @@ -8991,7 +8991,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 38597, + "log.offset": 38677, "network.application": "google-maps", "network.community_id": "1:QEEd+0of3hSmO6x9aRpIaHXdaUI=", "network.direction": "outbound", @@ -9083,7 +9083,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 38967, + "log.offset": 39047, "network.application": "google-analytics", "network.community_id": "1:BnyjuRL2HOxT/uRoNE3ra3neRSY=", "network.direction": "outbound", @@ -9174,7 +9174,7 @@ "input.type": "log", "labels.captive_portal": true, "log.level": "informational", - "log.offset": 39339, + "log.offset": 39419, "network.application": "google-maps", "network.community_id": "1:eGnclJrBulAHa+EiT+kLvValbJE=", "network.direction": "outbound", From 207bd24c36276002bb4463b684f11b37233dc7e7 Mon Sep 17 00:00:00 2001 From: kaiyan-sheng Date: Tue, 13 Jun 2023 15:10:53 -0600 Subject: [PATCH 49/52] [AWS] Change include_linked_accounts default value to true (#35686) --- metricbeat/docs/modules/aws.asciidoc | 6 +++--- x-pack/metricbeat/module/aws/_meta/docs.asciidoc | 6 +++--- x-pack/metricbeat/module/aws/aws.go | 4 ++-- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/metricbeat/docs/modules/aws.asciidoc b/metricbeat/docs/modules/aws.asciidoc index da21bdbfad24..ee2a73e17dc6 100644 --- a/metricbeat/docs/modules/aws.asciidoc +++ b/metricbeat/docs/modules/aws.asciidoc @@ -80,9 +80,9 @@ If endpoint is specified, `regions` config becomes required. The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html[CloudWatch cross-account observability]. -By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring -account are collected. When set to true, the parameter allows the CloudWatch ListMetrics API to include metrics from -the monitoring account and all linked accounts in the returned data, providing a comprehensive cross-account view. +By default, the `include_linked_accounts` parameter is set to true, meaning that only metrics from the main monitoring +account and all linked accounts are all collected. When set to false, the parameter allows the CloudWatch service to +only retrieve metrics from the monitoring account. *_Note_:* Users should ensure that the necessary IAM roles and policies are properly set up in order to link the monitoring account and source accounts together. diff --git a/x-pack/metricbeat/module/aws/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/_meta/docs.asciidoc index cb6f05a9336b..08ac6918d9e1 100644 --- a/x-pack/metricbeat/module/aws/_meta/docs.asciidoc +++ b/x-pack/metricbeat/module/aws/_meta/docs.asciidoc @@ -68,9 +68,9 @@ If endpoint is specified, `regions` config becomes required. The `include_linked_accounts` parameter is used to enable the inclusion of metrics from different accounts linked to a main monitoring account. By setting this parameter to true, users can gather metrics from multiple AWS accounts that are linked through the https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Unified-Cross-Account.html[CloudWatch cross-account observability]. -By default, the `include_linked_accounts` parameter is set to false, meaning that only metrics from the main monitoring -account are collected. When set to true, the parameter allows the CloudWatch ListMetrics API to include metrics from -the monitoring account and all linked accounts in the returned data, providing a comprehensive cross-account view. +By default, the `include_linked_accounts` parameter is set to true, meaning that only metrics from the main monitoring +account and all linked accounts are all collected. When set to false, the parameter allows the CloudWatch service to +only retrieve metrics from the monitoring account. *_Note_:* Users should ensure that the necessary IAM roles and policies are properly set up in order to link the monitoring account and source accounts together. diff --git a/x-pack/metricbeat/module/aws/aws.go b/x-pack/metricbeat/module/aws/aws.go index 76f0b9d83d84..90569f9edb00 100644 --- a/x-pack/metricbeat/module/aws/aws.go +++ b/x-pack/metricbeat/module/aws/aws.go @@ -62,10 +62,10 @@ type Tag struct { // ModuleName is the name of this module. const ModuleName = "aws" -// IncludeLinkedAccountsDefault defines if we should include metrics from linked AWS accounts or not. Default is false. +// IncludeLinkedAccountsDefault defines if we should include metrics from linked AWS accounts or not. Default is true. // More information about cross-account Cloudwatch monitoring can be found at // https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Cross-Account-Cross-Region.html -const IncludeLinkedAccountsDefault = false +const IncludeLinkedAccountsDefault = true type LabelConstants struct { AccountIdIdx int From 8cb4defddf4936f0b6670e46b18e46e0affa17d4 Mon Sep 17 00:00:00 2001 From: Alex K <8418476+fearful-symmetry@users.noreply.github.com> Date: Tue, 13 Jun 2023 16:33:33 -0700 Subject: [PATCH 50/52] Fix race in FQDN values during startup (#35736) * first pass at fixing FQDN race issue * fix linter, add checks for features, use atomic bool * format * add comments, clean up code names --- libbeat/features/features.go | 31 ++++--- libbeat/features/features_test.go | 36 ++++++++ .../add_host_metadata/add_host_metadata.go | 86 +++++++++++++++---- .../add_host_metadata_test.go | 66 ++++++++------ .../processors/add_host_metadata/config.go | 18 ++-- 5 files changed, 172 insertions(+), 65 deletions(-) diff --git a/libbeat/features/features.go b/libbeat/features/features.go index 997803efad22..e6fb98156309 100644 --- a/libbeat/features/features.go +++ b/libbeat/features/features.go @@ -20,6 +20,7 @@ package features import ( "fmt" "sync" + "sync/atomic" "github.com/elastic/elastic-agent-client/v7/pkg/proto" conf "github.com/elastic/elastic-agent-libs/config" @@ -32,10 +33,11 @@ var ( type boolValueOnChangeCallback func(new, old bool) type fflags struct { - mu sync.RWMutex + // controls access to the callback hashmap + callbackMut sync.RWMutex // TODO: Refactor to generalize for other feature flags - fqdnEnabled bool + fqdnEnabled atomic.Bool fqdnCallbacks map[string]boolValueOnChangeCallback } @@ -88,36 +90,39 @@ func UpdateFromConfig(c *conf.C) error { } func (f *fflags) SetFQDNEnabled(newValue bool) { - f.mu.Lock() - defer f.mu.Unlock() + f.callbackMut.Lock() + defer f.callbackMut.Unlock() + oldValue := f.fqdnEnabled.Swap(newValue) - oldValue := f.fqdnEnabled - f.fqdnEnabled = newValue for _, cb := range f.fqdnCallbacks { cb(newValue, oldValue) } + } // FQDN reports if FQDN should be used instead of hostname for host.name. // If it hasn't been set by UpdateFromConfig or UpdateFromProto, it returns false. func FQDN() bool { - flags.mu.RLock() - defer flags.mu.RUnlock() - return flags.fqdnEnabled + return flags.fqdnEnabled.Load() } // AddFQDNOnChangeCallback takes a callback function that will be called with the new and old values // of `flags.fqdnEnabled` whenever it changes. It also takes a string ID - this is useful // in calling `RemoveFQDNOnChangeCallback` to de-register the callback. +// if the ID already exists, this returns an error. func AddFQDNOnChangeCallback(cb boolValueOnChangeCallback, id string) error { - flags.mu.Lock() - defer flags.mu.Unlock() + flags.callbackMut.Lock() + defer flags.callbackMut.Unlock() // Initialize callbacks map if necessary. if flags.fqdnCallbacks == nil { flags.fqdnCallbacks = map[string]boolValueOnChangeCallback{} } + if _, ok := flags.fqdnCallbacks[id]; ok { + return fmt.Errorf("callback with ID %s already registered", id) + } + flags.fqdnCallbacks[id] = cb return nil } @@ -126,8 +131,8 @@ func AddFQDNOnChangeCallback(cb boolValueOnChangeCallback, id string) error { // returned by `AddFQDNOnChangeCallback` so that function will be no longer be called when // `flags.fqdnEnabled` changes. func RemoveFQDNOnChangeCallback(id string) { - flags.mu.Lock() - defer flags.mu.Unlock() + flags.callbackMut.Lock() + defer flags.callbackMut.Unlock() delete(flags.fqdnCallbacks, id) } diff --git a/libbeat/features/features_test.go b/libbeat/features/features_test.go index d4bfe8354926..83d1274308bb 100644 --- a/libbeat/features/features_test.go +++ b/libbeat/features/features_test.go @@ -186,3 +186,39 @@ func TestFQDNCallbacks(t *testing.T) { RemoveFQDNOnChangeCallback("cb2") require.Len(t, flags.fqdnCallbacks, 0) } + +func TestFQDNWHileCallbackBlocked(t *testing.T) { + blockChan := make(chan struct{}) + willBlockChan := make(chan struct{}) + unblockedChan := make(chan struct{}) + err := AddFQDNOnChangeCallback(func(new, old bool) { + willBlockChan <- struct{}{} + t.Logf("callback is currently blocked.") + <-blockChan + t.Logf("callback is unblocked.") + + }, "test-TestFQDNWHileCallbackBlocked") + require.NoError(t, err) + + // Start with FQDN off + go func() { + err = UpdateFromConfig(config.MustNewConfigFrom(map[string]interface{}{ + "features.fqdn.enabled": true, + })) + unblockedChan <- struct{}{} + }() + + // callback should be blocking at this point + t.Logf("Waiting for callback to block...") + <-willBlockChan + whileBlocked := FQDN() + require.True(t, whileBlocked) + + //now unblock + blockChan <- struct{}{} + t.Logf("Waiting for callback to unblock...") + <-unblockedChan + unblocked := FQDN() + require.True(t, unblocked) + +} diff --git a/libbeat/processors/add_host_metadata/add_host_metadata.go b/libbeat/processors/add_host_metadata/add_host_metadata.go index 528d40a0365a..db3cbbc5ee30 100644 --- a/libbeat/processors/add_host_metadata/add_host_metadata.go +++ b/libbeat/processors/add_host_metadata/add_host_metadata.go @@ -22,6 +22,8 @@ import ( "sync" "time" + "github.com/gofrs/uuid" + "github.com/elastic/elastic-agent-libs/monitoring" "github.com/elastic/beats/v7/libbeat/beat" @@ -81,7 +83,7 @@ func New(cfg *config.C) (beat.Processor, error) { FQDNLookupFailed: monitoring.NewInt(reg, "fqdn_lookup_failed"), }, } - if err := p.loadData(); err != nil { + if err := p.loadData(true, features.FQDN()); err != nil { return nil, fmt.Errorf("failed to load data: %w", err) } @@ -93,7 +95,21 @@ func New(cfg *config.C) (beat.Processor, error) { p.geoData = mapstr.M{"host": mapstr.M{"geo": geoFields}} } - err := features.AddFQDNOnChangeCallback(p.handleFQDNReportingChange, processorName) + // create a unique ID for this instance of the processor + cbIDStr := "" + cbID, err := uuid.NewV4() + // if we fail, fall back to the processor name, hope for the best. + if err != nil { + p.logger.Errorf("error generating ID for FQDN callback, reverting to processor name: %w", err) + cbIDStr = processorName + } else { + cbIDStr = cbID.String() + } + + // this is safe as New() returns a pointer, not the actual object. + // This matters as other pieces of code in libbeat, like libbeat/processors/processor.go, + // will do weird stuff like copy the entire list of global processors. + err = features.AddFQDNOnChangeCallback(p.handleFQDNReportingChange, cbIDStr) if err != nil { return nil, fmt.Errorf( "could not register callback for FQDN reporting onChange from %s processor: %w", @@ -111,9 +127,9 @@ func (p *addHostMetadata) Run(event *beat.Event) (*beat.Event, error) { return event, nil } - err := p.loadData() + err := p.loadData(true, features.FQDN()) if err != nil { - return nil, err + return nil, fmt.Errorf("error loading data during event update: %w", err) } event.Fields.DeepUpdate(p.data.Get().Clone()) @@ -134,13 +150,14 @@ func (p *addHostMetadata) Run(event *beat.Event) (*beat.Event, error) { //} func (p *addHostMetadata) expired() bool { - if p.config.CacheTTL <= 0 { - return true - } p.lastUpdate.Lock() defer p.lastUpdate.Unlock() + if p.config.CacheTTL <= 0 { + return true + } + if p.lastUpdate.Add(p.config.CacheTTL).After(time.Now()) { return false } @@ -148,24 +165,25 @@ func (p *addHostMetadata) expired() bool { return true } -func (p *addHostMetadata) loadData() error { - if !p.expired() { +// loadData update's the processor's associated host metadata +func (p *addHostMetadata) loadData(checkCache bool, useFQDN bool) error { + if checkCache && !p.expired() { return nil } h, err := sysinfo.Host() if err != nil { - return err + return fmt.Errorf("error collecting host info: %w", err) } hostname := h.Info().Hostname - if features.FQDN() { + if useFQDN { fqdn, err := h.FQDN() if err != nil { // FQDN lookup is "best effort". If it fails, we monitor the failure, fallback to // the OS-reported hostname, and move on. p.metrics.FQDNLookupFailed.Inc() - p.logger.Debugf( + p.logger.Warnf( "unable to lookup FQDN (failed attempt counter: %d): %s, using hostname = %s as FQDN", p.metrics.FQDNLookupFailed.Get(), err.Error(), @@ -217,12 +235,13 @@ func (p *addHostMetadata) handleFQDNReportingChange(new, old bool) { return } - // Whether we should report the FQDN or not has changed. Expire cache - // so we start report the desired hostname value immediately. - p.expireCache() + // update the data for the processor + p.updateOrExpire(new) } -func (p *addHostMetadata) expireCache() { +// updateOrExpire will attempt to update the data for the processor, or expire the cache +// if the config update fails, or times out +func (p *addHostMetadata) updateOrExpire(useFQDN bool) { if p.config.CacheTTL <= 0 { return } @@ -230,9 +249,38 @@ func (p *addHostMetadata) expireCache() { p.lastUpdate.Lock() defer p.lastUpdate.Unlock() - // Update cache's last updated timestamp to be zero, - // effectively expiring the cache immediately. - p.lastUpdate.Time = time.Time{} + // while holding the mutex, attempt to update loadData() + // doing this with the mutex means other events must wait until we have the correct host data, as we assume that + // a call to this function means something else wants to force an update, and thus all events must sync. + + updateChanSuccess := make(chan bool) + timeout := time.After(p.config.ExpireUpdateTimeout) + go func() { + err := p.loadData(false, useFQDN) + if err != nil { + p.logger.Errorf("error updating data for processor: %w") + updateChanSuccess <- false + return + } + updateChanSuccess <- true + }() + + // this additional timeout check is paranoid, but when it's method is called from handleFQDNReportingChange(), + // it's blocking, which means we can hold a mutex in features. In addition, we don't want to break the processor by + // having all the events wait for too long. + select { + case <-timeout: + p.logger.Errorf("got timeout while trying to update metadata") + p.lastUpdate.Time = time.Time{} + case success := <-updateChanSuccess: + // only expire the cache if update was failed + if !success { + p.lastUpdate.Time = time.Time{} + } else { + p.lastUpdate.Time = time.Now() + } + } + } func skipAddingHostMetadata(event *beat.Event) bool { diff --git a/libbeat/processors/add_host_metadata/add_host_metadata_test.go b/libbeat/processors/add_host_metadata/add_host_metadata_test.go index 037119772824..c90feb771851 100644 --- a/libbeat/processors/add_host_metadata/add_host_metadata_test.go +++ b/libbeat/processors/add_host_metadata/add_host_metadata_test.go @@ -22,6 +22,7 @@ import ( "net" "os" "runtime" + "sync" "testing" "time" @@ -473,45 +474,60 @@ func TestSkipAddingHostMetadata(t *testing.T) { } } -func TestExpireCacheOnFQDNReportingChange(t *testing.T) { - testConfig := conf.MustNewConfigFrom(map[string]interface{}{ - "cache.ttl": "5m", - }) - - p, err := New(testConfig) +func TestFQDNEventSync(t *testing.T) { + hostname, err := os.Hostname() require.NoError(t, err) + srv, _ := mockdns.NewServer(map[string]mockdns.Zone{ + hostname + ".": { + CNAME: "foo.bar.baz.", + }, + "foo.bar.baz.": { + A: []string{"1.1.1.1"}, + }, + }, false) + defer srv.Close() - ahmP, ok := p.(*addHostMetadata) - require.True(t, ok) - - // Call the expired() method once to prime the cache's - // lastUpdated value - ahmP.expired() + srv.PatchNet(net.DefaultResolver) + defer mockdns.UnpatchNet(net.DefaultResolver) - // Since we just primed the cache's lastUpdated value, the - // cache should no longer be expired. - expired := ahmP.expired() - require.False(t, expired) + testConfig := conf.MustNewConfigFrom(map[string]interface{}{ + "cache.ttl": "5m", + }) - // Toggle the FQDN feature flag; this should cause the cache - // to expire. + // Start with FQDN off err = features.UpdateFromConfig(conf.MustNewConfigFrom(map[string]interface{}{ - "features.fqdn.enabled": true, + "features.fqdn.enabled": false, })) require.NoError(t, err) - expired = ahmP.expired() - require.True(t, expired) + p, err := New(testConfig) + require.NoError(t, err) - // Set the FQDN feature flag to the same value; this should NOT - // cause the cache to expire. + // update err = features.UpdateFromConfig(conf.MustNewConfigFrom(map[string]interface{}{ "features.fqdn.enabled": true, })) require.NoError(t, err) - expired = ahmP.expired() - require.False(t, expired) + t.Logf("updated FQDN") + + // run a number of events, make sure none have wrong hostname. + checkWait := sync.WaitGroup{} + for i := 0; i < 10; i++ { + checkWait.Add(1) + go func() { + resp, err := p.Run(&beat.Event{ + Fields: mapstr.M{}, + }) + require.NoError(t, err) + name, err := resp.Fields.GetValue("host.name") + require.NoError(t, err) + require.Equal(t, "foo.bar.baz", name) + checkWait.Done() + }() + } + t.Logf("Waiting for runners to return...") + checkWait.Wait() } func TestFQDNLookup(t *testing.T) { diff --git a/libbeat/processors/add_host_metadata/config.go b/libbeat/processors/add_host_metadata/config.go index 36f4a0a13f85..17133e1b55a9 100644 --- a/libbeat/processors/add_host_metadata/config.go +++ b/libbeat/processors/add_host_metadata/config.go @@ -25,17 +25,19 @@ import ( // Config for add_host_metadata processor. type Config struct { - NetInfoEnabled bool `config:"netinfo.enabled"` // Add IP and MAC to event - CacheTTL time.Duration `config:"cache.ttl"` - Geo *util.GeoConfig `config:"geo"` - Name string `config:"name"` - ReplaceFields bool `config:"replace_fields"` // replace existing host fields with add_host_metadata + NetInfoEnabled bool `config:"netinfo.enabled"` // Add IP and MAC to event + CacheTTL time.Duration `config:"cache.ttl"` + ExpireUpdateTimeout time.Duration `config:"expire_update_timeout"` + Geo *util.GeoConfig `config:"geo"` + Name string `config:"name"` + ReplaceFields bool `config:"replace_fields"` // replace existing host fields with add_host_metadata } func defaultConfig() Config { return Config{ - NetInfoEnabled: true, - CacheTTL: 5 * time.Minute, - ReplaceFields: true, + NetInfoEnabled: true, + CacheTTL: 5 * time.Minute, + ExpireUpdateTimeout: time.Second * 10, + ReplaceFields: true, } } From e1c1f3af93e298d73eeb8a5e62d38e26367a6945 Mon Sep 17 00:00:00 2001 From: apmmachine <58790750+apmmachine@users.noreply.github.com> Date: Tue, 13 Jun 2023 20:32:44 -0400 Subject: [PATCH 51/52] [Automation] Bump Golang version to 1.19.10 (#35751) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/libbeat/docs/version.asciidoc" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/.golangci.yml" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/.go-version" Made with ❤️️ by updatecli * chore: Updated the content of the file "/tmp/updatecli/github/elastic... ... /beats/x-pack/functionbeat/Dockerfile" Updated the content of the file "/tmp/updatecli/github/elastic/beats/auditbeat/Dockerfile" Updated the content of the file "/tmp/updatecli/github/elastic/beats/heartbeat/Dockerfile" Updated the content of the file "/tmp/updatecli/github/elastic/beats/metricbeat/Dockerfile" Updated the content of the file "/tmp/updatecli/github/elastic/beats/packetbeat/Dockerfile" Made with ❤️️ by updatecli * Add changelog entry. --------- Co-authored-by: apmmachine Co-authored-by: Craig MacKenzie --- .go-version | 2 +- .golangci.yml | 8 ++++---- CHANGELOG.next.asciidoc | 1 + auditbeat/Dockerfile | 2 +- heartbeat/Dockerfile | 2 +- libbeat/docs/version.asciidoc | 2 +- metricbeat/Dockerfile | 2 +- packetbeat/Dockerfile | 2 +- x-pack/functionbeat/Dockerfile | 2 +- 9 files changed, 12 insertions(+), 11 deletions(-) diff --git a/.go-version b/.go-version index 91c48c058d7f..88ebadf2c322 100644 --- a/.go-version +++ b/.go-version @@ -1 +1 @@ -1.19.9 +1.19.10 diff --git a/.golangci.yml b/.golangci.yml index 111fb70dbbdc..2cd359352da7 100755 --- a/.golangci.yml +++ b/.golangci.yml @@ -108,7 +108,7 @@ linters-settings: gosimple: # Select the Go version to target. The default is '1.13'. - go: "1.19.9" + go: "1.19.10" nakedret: # make an issue if func has more lines of code than this setting and it has naked returns; default is 30 @@ -126,19 +126,19 @@ linters-settings: staticcheck: # Select the Go version to target. The default is '1.13'. - go: "1.19.9" + go: "1.19.10" checks: ["all"] stylecheck: # Select the Go version to target. The default is '1.13'. - go: "1.19.9" + go: "1.19.10" # Disabled: # ST1005: error strings should not be capitalized checks: ["all", "-ST1005"] unused: # Select the Go version to target. The default is '1.13'. - go: "1.19.9" + go: "1.19.10" gosec: excludes: diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 3a4356205f4b..1edd9f1cde31 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -9,6 +9,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] ==== Breaking changes *Affecting all Beats* +- Increase Go version to 1.19.10 {pull}35751[35751] - Fix status reporting to Elastic-Agent when output configuration is invalid running under Elastic-Agent {pull}35719[35719] *Auditbeat* diff --git a/auditbeat/Dockerfile b/auditbeat/Dockerfile index 1ae89d1eb9b6..0fb6f185cd34 100644 --- a/auditbeat/Dockerfile +++ b/auditbeat/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.19.9 +FROM golang:1.19.10 RUN \ apt-get update \ diff --git a/heartbeat/Dockerfile b/heartbeat/Dockerfile index 22353de1879e..e57d265d33ff 100644 --- a/heartbeat/Dockerfile +++ b/heartbeat/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.19.9 +FROM golang:1.19.10 RUN \ apt-get update \ diff --git a/libbeat/docs/version.asciidoc b/libbeat/docs/version.asciidoc index 1f9df4e12c65..a73f993a2833 100644 --- a/libbeat/docs/version.asciidoc +++ b/libbeat/docs/version.asciidoc @@ -1,6 +1,6 @@ :stack-version: 8.9.0 :doc-branch: master -:go-version: 1.19.9 +:go-version: 1.19.10 :release-state: unreleased :python: 3.7 :docker: 1.12 diff --git a/metricbeat/Dockerfile b/metricbeat/Dockerfile index be52fe799916..76353ab18847 100644 --- a/metricbeat/Dockerfile +++ b/metricbeat/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.19.9 +FROM golang:1.19.10 RUN \ apt update \ diff --git a/packetbeat/Dockerfile b/packetbeat/Dockerfile index 3f337de00770..a8d1400fa533 100644 --- a/packetbeat/Dockerfile +++ b/packetbeat/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.19.9 +FROM golang:1.19.10 RUN \ apt-get update \ diff --git a/x-pack/functionbeat/Dockerfile b/x-pack/functionbeat/Dockerfile index be8433ce5ba6..de1ff7155978 100644 --- a/x-pack/functionbeat/Dockerfile +++ b/x-pack/functionbeat/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.19.9 +FROM golang:1.19.10 RUN \ apt-get update \ From 4a16c6a58cfa7abd293bfe9086bfb41352e79d02 Mon Sep 17 00:00:00 2001 From: subham sarkar Date: Wed, 14 Jun 2023 15:40:22 +0530 Subject: [PATCH 52/52] x-pack/metricbeat/module/statsd: Skip invalid statsd packet(s) (#35075) * x-pack/metricbeat/module/statsd: Skip invalid packet(s) and continue parsing Previously, invalid statsd metric packets would break the ingestion and further metric packets were left unparsed. Now it'd be able to skip invalid packets and continue the parsing. --- CHANGELOG.next.asciidoc | 1 + .../metricbeat/module/statsd/server/data.go | 44 +++++---- .../module/statsd/server/data_test.go | 92 ++++++++++++++++--- 3 files changed, 100 insertions(+), 37 deletions(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 1edd9f1cde31..277b692e72bd 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -202,6 +202,7 @@ automatic splitting at root level, if root level element is an array. {pull}3415 - Fix no error logs displayed in CloudWatch EC2, RDS and SQS metadata {issue}34985[34985] {pull}35035[35035] - Remove Beta warning from IIS application_pool metricset {pull}35480[35480] - Improve documentation for ActiveMQ module {issue}35113[35113] {pull}35558[35558] +- Resolve statsd module's prematurely halting of metrics parsing upon encountering an invalid packet. {pull}35075[35075] *Osquerybeat* diff --git a/x-pack/metricbeat/module/statsd/server/data.go b/x-pack/metricbeat/module/statsd/server/data.go index b06e659d09d6..077b3a35e805 100644 --- a/x-pack/metricbeat/module/statsd/server/data.go +++ b/x-pack/metricbeat/module/statsd/server/data.go @@ -6,11 +6,11 @@ package server import ( "bytes" + "errors" + "fmt" "strconv" "time" - "github.com/pkg/errors" - "github.com/elastic/beats/v7/libbeat/common" "github.com/elastic/beats/v7/metricbeat/helper/server" "github.com/elastic/elastic-agent-libs/logp" @@ -20,8 +20,7 @@ import ( var errInvalidPacket = errors.New("invalid statsd packet") type metricProcessor struct { - registry *registry - reservoirSize int + registry *registry } type statsdMetric struct { @@ -32,12 +31,12 @@ type statsdMetric struct { tags map[string]string } -func splitTags(rawTags []byte, kvSep []byte) map[string]string { +func splitTags(rawTags, kvSep []byte) map[string]string { tags := map[string]string{} for _, kv := range bytes.Split(rawTags, []byte(",")) { kvSplit := bytes.SplitN(kv, kvSep, 2) if len(kvSplit) != 2 { - logger.Warnf("could not parse tags") + logger.Warn("could not parse tags") continue } tags[string(kvSplit[0])] = string(kvSplit[1]) @@ -86,14 +85,16 @@ func parseSingle(b []byte) (statsdMetric, error) { return s, nil } -// parse will parse a statsd metric into its components +// parse will parse statsd metrics into individual metric and then its components func parse(b []byte) ([]statsdMetric, error) { - metrics := []statsdMetric{} - for _, rawMetric := range bytes.Split(b, []byte("\n")) { - if len(rawMetric) > 0 { - metric, err := parseSingle(rawMetric) + rawMetrics := bytes.Split(b, []byte("\n")) + metrics := make([]statsdMetric, 0, len(rawMetrics)) + for i := range rawMetrics { + if len(rawMetrics[i]) > 0 { + metric, err := parseSingle(rawMetrics[i]) if err != nil { - return metrics, err + logger.Warnf("invalid packet: %s", err) + continue } metrics = append(metrics, metric) } @@ -120,13 +121,13 @@ func eventMapping(metricName string, metricValue interface{}, metricSetFields ma // Not all labels match // Skip and continue to next mapping if len(res) != (len(mapping.Labels) + 1) { - logger.Debugf("not all labels match in statsd.mapping, skipped") + logger.Debug("not all labels match in statsd.mapping, skipped") continue } // Let's add the metric set fields from labels names := mapping.regex.SubexpNames() - for i, _ := range res { + for i := range res { for _, label := range mapping.Labels { if label.Attr != names[i] { continue @@ -139,8 +140,6 @@ func eventMapping(metricName string, metricValue interface{}, metricSetFields ma // Let's add the metric with the value field metricSetFields[mapping.Value.Field] = metricValue } - - return } func newMetricProcessor(ttl time.Duration) *metricProcessor { @@ -162,10 +161,10 @@ func (p *metricProcessor) processSingle(m statsdMetric) error { var err error sampleRate, err = strconv.ParseFloat(m.sampleRate, 64) if err != nil { - return errors.Wrapf(err, "failed to process metric `%s` sample rate `%s`", m.name, m.sampleRate) + return fmt.Errorf("failed to process metric `%s` sample rate `%s`: %w", m.name, m.sampleRate, err) } if sampleRate <= 0.0 { - return errors.Errorf("sample rate of 0.0 is invalid for metric `%s`", m.name) + return fmt.Errorf("sample rate of 0.0 is invalid for metric `%s`: %w", m.name, err) } } @@ -174,7 +173,7 @@ func (p *metricProcessor) processSingle(m statsdMetric) error { c := p.registry.GetOrNewCounter(m.name, m.tags) v, err := strconv.ParseInt(m.value, 10, 64) if err != nil { - return errors.Wrapf(err, "failed to process counter `%s` with value `%s`", m.name, m.value) + return fmt.Errorf("failed to process counter `%s` with value `%s`: %w", m.name, m.value, err) } // apply sample rate v = int64(float64(v) * (1.0 / sampleRate)) @@ -183,9 +182,8 @@ func (p *metricProcessor) processSingle(m statsdMetric) error { c := p.registry.GetOrNewGauge64(m.name, m.tags) v, err := strconv.ParseFloat(m.value, 64) if err != nil { - return errors.Wrapf(err, "failed to process gauge `%s` with value `%s`", m.name, m.value) + return fmt.Errorf("failed to process gauge `%s` with value `%s`: %w", m.name, m.value, err) } - // inc/dec or set if m.value[0] == '+' || m.value[0] == '-' { c.Inc(v) @@ -196,14 +194,14 @@ func (p *metricProcessor) processSingle(m statsdMetric) error { c := p.registry.GetOrNewTimer(m.name, m.tags) v, err := strconv.ParseFloat(m.value, 64) if err != nil { - return errors.Wrapf(err, "failed to process timer `%s` with value `%s`", m.name, m.value) + return fmt.Errorf("failed to process timer `%s` with value `%s`: %w", m.name, m.value, err) } c.SampledUpdate(time.Duration(v), sampleRate) case "h": // TODO: can these be floats? c := p.registry.GetOrNewHistogram(m.name, m.tags) v, err := strconv.ParseInt(m.value, 10, 64) if err != nil { - return errors.Wrapf(err, "failed to process histogram `%s` with value `%s`", m.name, m.value) + return fmt.Errorf("failed to process histogram `%s` with value `%s`: %w", m.name, m.value, err) } c.Update(v) case "s": diff --git a/x-pack/metricbeat/module/statsd/server/data_test.go b/x-pack/metricbeat/module/statsd/server/data_test.go index bf24d945b6da..aeacfc731572 100644 --- a/x-pack/metricbeat/module/statsd/server/data_test.go +++ b/x-pack/metricbeat/module/statsd/server/data_test.go @@ -5,7 +5,7 @@ package server import ( - "fmt" + "errors" "testing" "time" @@ -820,7 +820,7 @@ func TestBuildMappings(t *testing.T) { value: field: started `, - err: fmt.Errorf(`repeated label fields "repeated_label_field"`), + err: errors.New(`repeated label fields "repeated_label_field"`), expected: nil, }, { @@ -833,13 +833,14 @@ func TestBuildMappings(t *testing.T) { value: field: colliding_field `, - err: fmt.Errorf(`collision between label field "colliding_field" and value field "colliding_field"`), + err: errors.New(`collision between label field "colliding_field" and value field "colliding_field"`), expected: nil, }, } { t.Run(test.title, func(t *testing.T) { var mappings []StatsdMapping err := yaml.Unmarshal([]byte(test.input), &mappings) + require.NoError(t, err) actual, err := buildMappings(mappings) for k, v := range actual { v.regex = nil @@ -883,12 +884,36 @@ func TestParseMetrics(t *testing.T) { }}, }, { - input: "decrement-counter:-15|c", - expected: []statsdMetric{{ - name: "decrement-counter", - metricType: "c", - value: "-15", - }}, + // All metrics are parsed except the invalid packet + input: "decrement-counter:-15|c\nmeter1-1.4|m\ndecrement-counter:-20|c", + expected: []statsdMetric{ + { + name: "decrement-counter", + metricType: "c", + value: "-15", + }, + { + name: "decrement-counter", + metricType: "c", + value: "-20", + }, + }, + }, + { + // All metrics are parsed except the invalid packet + input: "meter1-1.4|m\ndecrement-counter:-20|c\ntimer1:1.2|ms", + expected: []statsdMetric{ + { + name: "decrement-counter", + metricType: "c", + value: "-20", + }, + { + name: "timer1", + metricType: "ms", + value: "1.2", + }, + }, }, { input: "timer1:1.2|ms", @@ -995,12 +1020,10 @@ func TestParseMetrics(t *testing.T) { { input: "meter1-1.4|m", expected: []statsdMetric{}, - err: errInvalidPacket, }, { input: "meter1:1.4-m", expected: []statsdMetric{}, - err: errInvalidPacket, }, } { actual, err := parse([]byte(test.input)) @@ -1016,6 +1039,47 @@ func TestParseMetrics(t *testing.T) { } } +func TestParseSingle(t *testing.T) { + tests := map[string]struct { + input string + err error + want statsdMetric + }{ + "invalid packet #1": {input: "meter1-1.4|m", err: errInvalidPacket, want: statsdMetric{}}, + "invalid packet #2": {input: "meter1:1.4-m", err: errInvalidPacket, want: statsdMetric{}}, + "valid packet: counter with tags": { + input: "tags1:1|c|#k1:v1,k2:v2", + err: nil, + want: statsdMetric{ + name: "tags1", + metricType: "c", + sampleRate: "", + value: "1", + tags: map[string]string{"k1": "v1", "k2": "v2"}, + }, + }, + "valid packet: gauge": { + input: "gauge1:1.0|g", + err: nil, + want: statsdMetric{ + name: "gauge1", + metricType: "g", + sampleRate: "", + value: "1.0", + tags: nil, + }, + }, + } + + for name, tc := range tests { + t.Run(name, func(t *testing.T) { + got, err := parseSingle([]byte(tc.input)) + assert.Equal(t, tc.err, err) + assert.Equal(t, tc.want, got) + }) + } +} + type testUDPEvent struct { event mapstr.M meta server.Meta @@ -1068,13 +1132,13 @@ func TestTagsGrouping(t *testing.T) { } expectedTags := []mapstr.M{ - mapstr.M{ + { "labels": mapstr.M{ "k1": "v1", "k2": "v2", }, }, - mapstr.M{ + { "labels": mapstr.M{ "k1": "v2", "k2": "v3", @@ -1182,6 +1246,7 @@ func TestGaugeDeltas(t *testing.T) { "metric01": map[string]interface{}{"value": -1.0}, }) } + func TestCounter(t *testing.T) { ms := mbtest.NewMetricSet(t, map[string]interface{}{"module": "statsd"}).(*MetricSet) testData := []string{ @@ -1316,5 +1381,4 @@ func BenchmarkIngest(b *testing.B) { err := ms.processor.Process(events[i%len(events)]) assert.NoError(b, err) } - }

%PuSC{6N*`oimi`siJZTpWss7Gh;gWs3o!3h ziI#JmQ1gD3I_IU<XRIQE>zPbnry$3H1+(TQdbCNg35ybAHh3h&bb zO*^S$Kx8IS;rRK*sY_AIi?wM2Zmhsiws@qXu?`^G#Gw`ayBLtpHuh;`;#dmteu!%g zW=xBMeu9`2!$Cotrfn7lM>xl*KALXuJ7-7gZ2xxdcraixg%Y#jfjP)evvaK4%)N}l z%_#Ah+KB$BV;h4L-4+Sx!QnZyZUdumsQG}Jk{K@NcnS{+9jl8V{k^?&x+H>6@lCY=fpA_-=cbeXseTDx7l|HJf(*I(4RhJGV5* zS4YrN@zUhP7`*K76=IT~WUzxHZN2kMz5c^Z=D{Ku`O6cXG7u*jovV69&f=S<@zv_% zu6F{`zDpUSciQ1qvW>`|?!sWN|>AC@yQlTow&=qwDSgsQgB=Ew}QyIZR6m&zr(<^A;k7r8z`%1)`bVXt4v{ z-H+xVu}gEcGWp%FWMfPM&7#c8WRC96mC4xxTKJiFYp!mP;&;W>3zcC$10 zmOn0+$jY_<$A^Y4MGKHl!44FT%&WXzY~tM2o+^AyT7-n(ig4K|)~?2>`4bJqL&)U) z`2^eii8>l-6pT`>P2}+0dNdHSsfW?gGhbKq=8rsdTMk0x%Y1{EF1`x?| z)XjC!=SH7B=_P^pTSiv@XiFTi)Qc2}w5vsb>l_-(b;b(>!^ zaqZ&`+hAbCJ4dA?LZt+)`^|}vqTv{!s9M`k2+$DTc97|SashL-ftSE_0D^B`Jz(gy zi$2!{0IqwF3x4l;{N_j(jAUIx*lW7o;*<7EW2Ojy$m0Bqqu)>Z_T0Zp&<3V9oO#;( zrr)TJQcO_sGZj4M7`Jj!QRCmk@e4Uey1g+8f1vaTxTZ?!ci9szbUWz}_|M*k4jA54 zim`k{UFEihH&YMAFEs75Gc)`?ZTsGNkoIK+qkm)h^Hr*VKSA%!Gz}Te&t+^3dA(ET zj5e?|I=jfte-TP|rip=cMW%a0`~!OBERU%OkXLSON`d_P{e{S{iN7)Ot6{3hQSLIl z#Ne7(KX>!_SkaYjhrR%F31^wBDqGK7#-SkyOYNEBRJH`J`7lsm6Y6+O6?+GNP63I+ z=e`&T;=99 z8jp->OAwYmZD5T6D`6d&fP65bq1?@162KBDV|0IS`7*z)*asJ6x3-Hff;&sUyQl^j zUEzQk6FsZ(h7|JZzim3JZJhDcx_|C}eyKl)0Mc1tmLp3bW&dzG?*j&cw!Cp@YcDrDgUm=`iJd@P`Hx!R3 zPnLX)b{06%r%6i?x~56el1G@f)~`E3FS~?A_0zI7h`{&%6?cgxJRtwWmACKZuJH`P zV1!OK+SVPXEL~-E37i`!BUKZQncTvAh0kXeY@8@)+>m|!9`4KD`;o=_q1fF5f88*COn{r9A8y2LMunGCc*O>9BqjEF z{^z_aa{K@Nk%kk+1LYX8s@IiufgTioBZbR`1!+hX-McvWaEV{5?d%yFn0GhW?lO9% zZV!5QAfH*P>AQcsY12X6%GSLkYdkfJQmq*VUw6EU$QcvbQ+QUT&URxaUxr3*Jd+D4 zYNWMTYvQ_*l#n4#3z@SzenxBYwl`Bxrdxcd^(DgT<Wc2sS!u>d!Eh5@LR+sbpSys;r$Cm6Bh5{}RCty)}+C;=*z_O?g8J4Xu za~hgGah*&`IeozIN5($qO~WCl8=|m3`8fKp>u>+(@%bZNFb2H1J}JQdYvc3I#eSQ5 zj?d0A#sKke))>m%^R?qfq7r&Sl%dz@0idlTf@_-e+p&51z%p z?Q-5pfN3@m`duu{{%V)mk{==(eV+Z*W-iVNm~C%63p>nAneI$O1X7=DDS8w#j@)*?e>5hz|4qdu1!QLYs5tNpXxei2;rQ zD{c#R6H^$cR~r!JvZ-%g-A|yFqTO0`-nQO=#8)-HgeGK0H_czW+W*WC{Pt6UfR&-$ z0L8Of6vn!~%Ur){TO9Wr;l~yU$1Tv>*CAIS(|?oC2p5!KaD&_NaP1|iXnCPwAQZ&^ zwm+9f|JV$}FU=dpKGKEWya`=sF!{YRac&8NL(x)u;-~7$vxuqZPXF292b$|yfBIHr z@XGlLT*VK1)}QXn{rj58d&3p+N=?|yx4PJC*iPXgV(SFWb}KhIEB}GVNEiz5Fp2gm zy@d&)Q)dmwFpOZk?X!NeHUro9%+7fN%Un}-0>3wul~Z3qV?j;y4Z^%wsy3E}D=jS> z31<|V-zXDLEtOSHnQc=_qnmBaqARW`r^S%pz>M% zv)(6%nTOS7)wJB4isM8-YM47z5vm;IER|PHT|6cxHT9e0k>246kcT#0#qWs5PjH0J zL@oaar7Vb`eVGh(@gJ$9)WsiDM=`B~@Y&!bw^EW;JaS$>!pl&+rdqwkaPji{;bNcM z8RjLIS~!fvzv~Wo&))pKvgs-l)I_+}La5Wk`)U+x06Lo6?}FY957ERK zJKX+0_>*7a9`s#}^ z>gv`0z^>0oj~Snh#0uq{O_HF{j+36RSD(=c=izkI?p@0HcYqDwt9gTyjizD5a?nzy(b;CF!RbUTAetYgv zO~(9&JTXKM{@Akg1%nxtnZ+0MhoFMorXk;*r7`B9@5leSj3bt@*vS>{0gcoaOQE2r z2#=zkQmg@2g3zSkd8&cbz7HrSQWc9w5|caCQ*p2yZ(wZ>eiOC8*y;l!GC^ z2ud-2q=wsTE8d(=i=+x41&MeL~enp{xECZjGN1bgkuksm69NP z2$0iY1BFyOcWrhP{!l}QrEViYW1GBUic%|0R_Z8M5g)3PTKFx%j;(m2#5)jyLfNESl7@S7}F+9I6CwxxBxTnoBHl4ns>`RGp{uE{MqqzjsE zEAK)D>reS}j%;}$HMr%4;AP{0y2>GC{3gDXpE{y0 zaZ|c3_FP>o8GNsaEG#4H{}@qDGZ8CgO8qwJO{&_&vZ_N1JaH1nVNQ+<4|PlbO7x3?whht|T9c6?XeK6Y<57J;O`}zd5h-*WP)ZGN z~Jsu-^SERaH?^@B!ua9~l=1>Y zA7?4{TiTs=R-!(_HoGp3U-K_IwmrmIz#CmjBS6HY+}gN6A<)}+V0`?zVvpK`^yF-K zGU{HAXwx|M@vb4y=F{MvEf|7Y`r<3xH3I$(rJs|dx#?m8%<5w(_0H0J3DTMRywBbK zq{UZ8jm&Y@z5wQ2XVT_C9!q~_@sBf3HnA%T+U5zVm8&8Y+{lQKTL>C$-h*hg$MV&? z;aX|5J6coUQ)ASzYY1}KkHCYg+{7n~!!wSk>(9D?6~@BXI&xXX&n(36^-m-WMh+qG z!5^p7I)lP&EcW2}u4RMTsXw`bqK2R}HD{OCY*=2fv`mWUwE68Qm+gi*N;eUi%zInwNQfRqi| zM7_60u|zCFV3kQ2)&s)Gh*6#0#Z*ntE@rCZxg#F@i)sN0B4p|fqFXo&!Y#N#&g}L<}`kx;ig+Ydy3Fx%B?)B z@#N;kMK|6$`?|)mnazubeBq|XF_FcG&uBc-Zn{cTO}?DdoG?H8IpmtW)7#$Pa)PN3 zgsDDnEiYk)iQZ59*{`0V=^Z|w4Z}-oZZW=T-cXa9$?dwn^F%~oouZcdsk<#+8 zgIH&UhQkz(`P>>JYAj@Pk)4}*Tm3pDOtAlF)#&}qJmeN{iV#^uHo_mkpqBT{N%VcO z-G`$l+;fcy(~ruPOmn{BW9B5p<5!D89tgzNRT5jQJ4Qc!>g7IM$IEzauCM!%mRb8pN|tu=Gtee0dsnoIQo|j3C~#1<~OHh6M!}!;3wiN zeVmKHtrmRK1)qT#aIX>IyUYgVYVh|>baHr0 z{kzog7WSnlGOk|TS<5`z{@o_Lb=yBnqzISQt|C4`eFTWPNwDqS(wb$J;AUcQv&XQgK;G0zcC}>*L3G({$k{+0XbKsQvS1c58clas~V7 z0shP2a!x7BfaQ4nSG)1^b&mVIQ+3c3eg_3*0wWY7%sw&v_YmX#H-ADf(Byh~4`m=@ z+r#hT(sfRyC8)KEOBt+nW5gp% zyCws`es6|q>3)liHs5I+p@$37S zAgD!SWI%-&(8Y^<0fpx^+!C!ia7ZAH4#nr8jJ}&0f8ENb0@y~jwOQCkjuLDL(rSi_ zg=NL&7x`iYzTtA*&P>#Z!m)xKJ)}7Oe1@l(fp>A5w_sTxa?ZQ%+H8)>lKcvj7&Ot~ z_lvps6(ptcspXnKcrrM6YZTz4dqbR$K?}dm#)Zb!;@^ql z--#^Xsk@B5duU$Zw>*(f0UGV;@EXj{Bw9*|a#rq`CU#62urc8u01wz5eyQP_AFaMl`(bX6og&`(wv81XHi{f<>tdDkph4S!9` zdRdHeDOzo!#LFLG@^Xrh`xx;J1VV*7V}o~+pB&-Yta6DTWDC^`73vMvi$r1jYVwa$ z{x6Z=Y8te>*n4Z5kbz`js#J`BYG0Du63Ei$RtknbS@H$?u*Ht}M+eh}Pz|fQ2<49? zU4+sBwF0&&#f^ZR_qrLAB%+|>HEJD5S(T^uvq=IP#9n1;7kdZ&*?5K;w0sQ0xbBR0 zadNra-xTQ==qxew*^J;35iA&%Zf86R-DdAIl&<8ST3#pKnhNwrn;Hz2OKj?aN`1ZI z3r&lmh-kd(t2D8?t7Ox~vdFvYZA*#L40&t8{(`Kx0ezpLv>iVV=)3zOV_W#7JkSln zw(ug0V3k*A5iI%nTzXmhthV$)>dPaN{!<>%<&`@DdOSVpjVBB92mur?e3=_H!uaA5 z|D=mdBYTpm)tp`ljZTC-3K&2)t1y)v%3oA8p{+IfC-tovJKg@P9^@|h06(xvSn;C(<2PP-2=AZ>plY>5c1s;-xg)ENMB#T<1>~qCH4|Mzo85LI0mCuH z6dYh?c%UdeV`pn!<&LJ;>+;*#IWhNTw6p`o9CsH!VSVZcm?^$vB%$eb4O6p;NQwRk zmpigC(wo)=COgf2-G)L<@bTlncv zw6nTy^wyf#f#{zXGu*L*!`=Dk@VMvP`~x-n)<+tjV5y{$6>KWYEgU22kp66r>F36V zpu=9S`J0qkV`Q;PiTC4U;m*wX*9-g{tF~`_zXndAR(#$6s142?Uxg?i*p5ft{FkX^ zPpW_jz2M^X!Qce_XK}yoI5|J3EKVNG!pT8{lPA@7@`n1`wxhqBw$oGmhCej^P}+Nd zpRU#i^B3DCa^_$V@oclT>*WAc;-; zC+DIDcsGv&i8u0N1swDLPx&1q`B0`)WVp-he?ml@ROTl5pXnIJUym2jjYT->xpWBB zI_^#f*m-n_Gl4n8|1YsWGrjN=ZZr*`Z8foXqHoe6wkU?(&Nsv3Ho5tKui4kG4xwEv zgCYz1T}!ypV7}y6;H@jorFj;3obUC$vMm|^Q*GeE{R#YqaXxuMB0- zZ+RYKpm5y25^khN#38W8O-8yRL)m;Lnka*QGn+T6^%(Ct z`MXo`ncs1Uji3@SnuIBK4aK_gbD8Ye#q_%PifX>gqAy8Y7jJdVBjzaL9VBgNzo(@d zl zPqH&n#1``arnOes#zXRd=que(uGN9*A>47a1`{Eb^rYVNYw2nYDP+wR5L#WB6|UUr zBvz?lMy%EhgJ?#POQfcfs-vQ4*}xQtZI1DE9g@-%GcM|2u>&(@c{i zR-BxmIiqc+UU_HDrHx~FsW#RJZ8S(>g=DHUqh)GWy&E6G=A=7p)d}l*gA7A@JyN!p zlDKCGdc-(;*!y3VnXxnXc(T3o1-T^IBla_WMcKW>KgR*lEoHB8pJ^%BGH@eGcPPzd ze&jV)54_md_X_9I-nKZ2yAjlAZyQ3DI~r5TX9@LdZLu%W)my#iFQJtuWyNlnoR@r` zPDyrs=Oj6gH2uji(7aK&F=+$`_Ep6vRpDz?xL>Zf$rQ>;l3wB#csN75({hh}!tB9} ztG7}qMrq=sgLYE>6YOU6)^Y-ZDp{uzXhDU1OH5L>XxO$8|EE<+<4Q_DsIdB#jsjYG zyczKf)GEPSzK{vNogavkiuf!u=h2BpX)Mc*v+OmNoNaz=$|IfSi|Je39pNn7NULRS zc9zA$1t$I|_NiQI zOqFn)t{P3A_~|I>9p0yuiVuwS$jd?THY~O)QU2F(o_|%eG#4HSAJRM zJXXKceU}L*_*b_3O*X$)o2_7*_ni*|81}&|$S`teLDfFbj86?`OREDU>thUJcNPmi z+q}zPEaq?wrzMJ-(36t?*_&QT?ajFb8sEZ?lqlCKQAoW&lyuR!!%1uv?c(Pf8XIE% zju&-_A#LIKmAt&P%TvUB{kb9aYNI1b55vER<5(@hlJ>is|WY-F^1&V`)RkBv^I}dr#;;i(59D~CTMt73h(1)x3`EW4%uhEn-Nt> zy)zmuhrFuyWDx+4@gI7koAS|B;(fm6VN1lTD~IRaXwVo9|FFG2Xo;E{zh+y3YEbj} z?wzA;vOxTx@&^g`W+haUy^$sr@cK#{1t!9V+i9$ z^zvQa*`@)F_x1$7)meK*Pc_1M^orA(Ur#fyKx?VUKj7wXavt60RzBw}A3^c0?g{(d z1RgydX=2LuciRt~=Z<>`f5=aumCPPdy>C-DwFCuc_Gv_`p+KYSgjQ3-qsd zo#k@j*Tk<>Cdb+C35SdiL^$!4pq5bk{`0V3hVyZ!Sct))Ep>d>R74q>hu{Me;EXit z^qj9E{BR&(!FnbsbIqDUWxaG^F=|ugW^ab-X*_*`jl-^%DvCEud2LK zb+DCpLkj6v&XOOA<|nYu`Esz%Ic_`l9cP)GDx9^a%lVWu`sOk1Zw`p=J#SD4?TdCUc2*wAYd3L~ahb8k(2NO+B0HRD zvk0hj`BtX5!$qPb-`Afb2PpnUUPca3{;$o~+LC^%w2g;W)%qwm(Kns;H-|)DKaU`p zgZ{4C?fI8gX>?U*rG*JlI_G`?F#0c=<%3X7wUIej zQ+Ly+a6~EThx#6wGnwC~o8*pC(*NAZoO8~7y6LRwn*-b5Ji^pJWYCMzKcCnB=K+Hb z87xq5o~bwOO)qX@ zZM%gAk^%p@Wyga5>J<}xh79U9^0PTDbTpl;^=@a`U&#^M-<}>2eXflR(bvw4ZjG#P z^JS9D0+CGVV%kDC&S11@;L~bH>TrFe#0&lYsaW^RB!N`!kmz%JDL1yQegA+=;UJAz zl`HD|tz%Y{Rf~ZSxcbjKPkE1sKG)&r9g@i#d%pd^fJ_0w>;CJQ2V|9G3kGke%nZ)b z;9;B|zzj&;?Tz3;Xx{A&=B~>^@1|EwB~6cY^Prd6^)oprLWxpYQ+*#QKb|21i5Pj2 zH6+mArig}xqasz8rR7(_iM=fGt{cHSv+==8JRv=acTWi8Hs;CbYYq{gkQhvM*Klhq zhhD_y7~d>&`>;kJWh%C1Y+WurP=Lr8%ZL!~j8E7kMdoaq0C=tz{wrxB@Mo>h68U3| zitPfOh>{*}6pd?h#N6=^j#pQNHXAn_eara$RY$76c!(CZHk=~RTY-HI-}?;5a>fsB zyQ^)xMHO${v=7m4vkrgh53#qtunTpKinJMI^AgpjKY|`M^HtH!m?d)V)7@)$n>q~9 z%EQP{^Nrh~x~2=S)f4L+g@=AXf%m<9FdeD-F%kRoUUJmGD2|8d#-i2@ z-j~Um+Le_h=T`KaH;w#^5DH9*C7+U5{`6jdQpGSrn1fsHAu5n}=_&rJ$YbkxW?Qi3 z|HR0Dy*ymUKKI+yY(9v6im1O>=UWK=|HVziz@J)~Q@xF^d1Wr|TV`Ei*pl4ES-f0# z6}Z7J`9C;$zjl*FTk#VHm121BWPQ)@uExg&)SUWyZlzgImVe(PFEEq{2UuzOF%2{0 z^9+?Z^w~cRhdbB1Cv0)^3m?@(eCRq|PT0m^cUy^%h@l%lJ|d5EAlvhk0-y0edZ2jW zXI$sWm)*^qkZft!seKiDGKYD->$bmHK&UwFk(o2(>61urP9jR3?j|mN&t-AT9lghW zcc(jOx4ZLz7D1)!w7+#OtB%|jxb3eOxF_sP6)IjDAOBq7vI6H;sl2(Y!VO(F2J1_r zpxtnpfMVDWg!f}gW$<$yz0CX6+1MUCa#_n@$>Qf3i=Q0%G_?H(aJPqyv zK<}Ji$i5y(GwjUM}1-bZ%ad&`8W1m z{`r~m&$s12ar(ax|G>V>fBlRA{@3LMf&asYD8IXWG(+upj^fN>yx}UR5BbRKAV;_5 z94O)t)zjEWvwu!!O68)WG8UIaLF9pedqhukQ?0l1KyONni-v|<|Qlc`OXsAi_ zgG{1Zln4!_>IQDi`o_V_HQ_BBag>zQHbhd9b{_(*Gl@u+g%3P$TKE0&YTait<%|p} z8=}e{r3_lPcbpPcW)iK4`K?>bjd!O>1RC20y3xIz@9v5f9`jXsIuuUlvm4Kg6%M!0 z_2#*{C{{SYzBtdmD2-OV@IAlUBB@#`s(acj%^=MMg z3se3jxvdn~G)bnQMB%-!u$DhBNfo>>?ch_p$}Tnhxxj4MHlJ?xU1GbG3a!tc>O*4H zim&9&*kH3$T zzsQZ*`C+u`%IAVkc;qs_6AtCZd$3-B`Q6Gu4SmiDicCF{0V?ap%GYm8;N@SdjT(?TNr8iX|WDCg&~x zEg^kwABoH_F-KCZusGYwi9VV^R=RN)ECr8@19A{M3&_3G06MEvB?=E`C;1a62$Dxj z3~29Ysq|xd@dNuJHH#O=>cw5W@L?Ssz-sJ|$!YJ$UC%yi;PfZ3=R^>%1(uhN(P85)0SN)&R1jGmtq3vOxwi;#;!!PaZZH z&w@cCg|GXTE=;p6wh7d;26B^OGlLQAWhA%L{c3Zc1;c-Un})CF*4frof0kgl6lxnb zQ;o%zetWtxTsIM61fr1 zTQp2L5`He?$`!zb=`fFpFS!$5F#5&O7Yk$3qoR-9uOv)m6V0vM82WkBOj$RWvi!`O zn@vKJP(Pc`RDQx_h8KT=|DF|i6{h?>2B*^DXx7oKW@?XhpmdWlcn&tUM{jL~rXx~_ zauOYUCOgq8lPK5)hS*s+6Y)_77~U1AufF)$jxaPFkjxk78U7lb+c$;VQg3`Fk7b=Z zgN%k$!ThOPPDx-lAzky0yX_3h>JZ(yy6chrj8)QvWjT=LA#H{SHxVuaL3yFdOJ+Mu z3YZaw@u4aXZC)1O*0)kTNc#*kFs|rcf8GH6hw1QyNeH9FY;N9R-*c+qf;SI`axG?D z7qG_vI#P9mUN>AW#L$=OE8O_QYse#al@hn|P~&0oI~#zZ@`@1+SWgSDh!s+4L7DUy z5ZvqbXB7qg3$w~JYYgf0M?4{^Y9ucD>G_tlfLT3TV5<7`?Gnq8b?EDWHCTrjy^42| z0)%k*NBbHWmt#MQH$@&*f=E@}R|I~EweR1=`5H8Su;tH#Cs{hcztU3hX|sjXirLEw ziGMO)RT?za`1PA0uWKk6P&YN3DkMy72{M13x575x=nsrfeYRf(qgW!1RRO$9Z<|sP zpE{!Q8$xHp!{BdHU-_{MnQSpbK64xugjQq^t1DomK ztk$$S$Rqo8h5`St`4LG4x1AcTx^eyRy!=JSVN1sH)qm)H{HEK%Pvy|bd|5Qqa%)Uj zP4#DtjIZjz3K#$SKlx?PS?5q59@9hR9~$4N+{uv2nS%q2wY0CPnP~(4r&#^RuB;HQ z;UhxLrs}?s8cb>e1epHcUH`x687(5^=>JCj|BB%i)FcgGsf{Y5*Ze>ltt%f{I8FG~_hq*NfM6NN8FnYxU8l94Z3^?UB~8tc6Q zZysa-xfRM<+sY>1o1GO;D)E*JAi*1dQj%~c$xnhL-%*n9lVo#Ylv^37*wk?cw_^7S zYV=NG%6qIsNVMYCmOYKv#fN@|uPE(fbokrIDJJRIPwJ8=JXo&z@j&bA{`+=8gi4@- zVnxz~aOUU1JH1v-ANx_8X_;!cu9zAwFB=mp#{4?QZfN}L5`c4`I;d!DW4b!MuueV+IEA;C~@<^LW8g5mkT=hwt} z$&n)7^3U`oJ|vR^5n{_6>3-)@kzbTSu6PZOl=he>{GeYlBK)xuAg?pfiDKU4b~ zG-#Y>6_SUvtBI&IpO8Mns3M(7LyK{TXGZH)Twq2XOLg+mjrL3reUN(Cf{c4oJpEG(PN z&3W2c7XjbFeXD=(terms|L=X9@n?HX$}i_SPUIqg{cxfn-}jGcPMi2u%ilz25zg_w z#JyG|fMN^FD%c!%n%Z3+ijUbMSK7f>NucpUM;#$XT%n=bz$JCc#(d*&iiL!;T3r^Q zMq;HgD}B9Fp8V#S>pi@eza7w=*8FF!b=5kLR#(*KZ+0GiE`(F?@;U$tCDzG>Zc?m0 z)V>#Ay)<5Qo5Lq;&9-0c$9{1*X|3m8c1zuS031?@jia*2S^5$RNuOzmyP@b8gtHjx zwA@9?z<(*S|8S?Jg%^wtKYx$yGt5L2lZ&)T$TTHzYmBzj#Me6A{x%kG20(3mP;tvo z=GTljKX!*PKCHDfEpUu6mq0sHCB47)m@!wcC@X-@yqEkr`j1Lkr2REZ%_vqin^bv? z$9mWOK_k#Mi3PI&a24;(AXU$ecWf0f#|y(MvT6rDR!%}5)#8>l;GTV$J0$6~Ibu$^Jnom3CA_0VR%w3J133J{DmcN|nVX76L zDuL-DVy+5kSrAT){Lw|j@-9xC+b>!*z_j56ZI@bObGC4y$ejJ5hh1dhOO0Vz{9YqC zV()RnZo=_Kd_*Qq12|jY0)$?;&LH%xV||2rL;oynDqI*xho%cp;kzNqNMP|Q9_3?V zW9sz!7kO$FYv0Sq3A!t_7-L#VOq-X4(W%_T}7ul{0R-Nh>_ zpQqXPzqRjgQBv2wYPYYh)~hpkg#pyNg?bT>#>LYgKhEP#qHwiMe6kW3k=V*kGc#PF zQMaK)$VW>sLeGXzlK*q^XtrVm!nBtwk{@Amv-BSQu$jA_24W->%k%eHdZ-Dy##*xZ zz;PI@>E>E`OV3YJDgf&@ZtV7n;whc77hCD|Q3xmRRn1*X-_WdY8<+ggCg-Qfrsa}~+MdV8uwprCdW^KwDxqIJ`Ze;?MN#;_Ol8H}> z-Ne^TwfK_&L~m0m@7*iJl}a05)oJo+8z*LI%vjClC=0sH)ZVhP{(7I)GteRM_Ub_a z@DG*(t8r-aGip+p7p3%(QHBoHdZp%Skmv>L{{cbh4JV5C)lXDUeotD401L)y1(B`) z+ZQ5X9gD~e4llo@4;=pDQx=D^a|bxAmVS|oMb|XDH&lAV)>uqh+p>54->f~?KK4MY z|Kda7*Pu1S`MqJ{-)4C5yM6wL#_#NZcE>L~W*D_6e*gLTKJa_lgihPnjTBiWIU})=kp~$zPJFHp zH2>w3-OwC=NTLeqXyt$jcd2bRbe`FL<9ZSXGHI|rFW;T&3)dflf9G4Y+R;9^U!fcR z{##gnkF}8xAuj$sEFXVUA6Q;C<%6(1U%QDSG*FtJ8rwInci)?X>yN#ah3nRy5;<3r zfd5j-XFGFLBv)0cKivmd*1hz4{ry)k-diC;KO>Or`CV*`l+LhmPie8~#y$}I(fZzl zMtTo?L&(Y=>ijtY(X+(o{$}3{zx#XfVP$I!$i?2X&vrE=wo2Fu#Rx!nEc-M|-S}mU z1)oRf&`=LLFDUh|s50ic!d&Ciiqda%FE;a>+dtgc2v#N*q6NuVZ3ZyKYAyBdnnH=0 z{+7wD{r5w6WBaR%T~ZxJr7z-UVrcV)M)wKDzA&pUen~ySXc`K=hjBpY$t|?6!0Jb_ zbpkgOJCu`Xrt5rR!%Symd%-`P*=;D@w{Dr~yj}R&hlg`N@s&1KEsN)zPOwJ8ZsBa|@o`G+iwTX|K? z|7(hf4D-oqNfjuW$t zEw{eI|NW#Gy5m71;O&vS>~-v3d;O?quP1ld>lvN)T9wzcMZE#`k6P!}JpH)E`mHb3 z@6-zY-cZ!0%gseQbP)=;2nV&!+im*Us-GA1vqwLF)X!h_vrj+inUg?7oB7>peqS)Z zd(7`2&F^2$?>_VU|0Dg|8>#B;U+d>Z{ro{c>-Do;KkfQS&kT$8z`M^aJ!w(DBzqs^@3+bbjW~HebXW>LmIV zchF7TLdgYoRMCZw3T@s<%k!S)s!8Cp z8VgFzid zm5!r=%au);_xq{tnM}e2y?@{T`#bMBznqg#^>kHN)l>D10$pJX=Ed4 zWBE9bW}8U-`msVJD~PkDv8&nOs&<%@W3q5Y*MQ$i0Bg*2WcnHxqSZunZ=s1Khe zkMK=j-7)taJ`NSWjD_~4_2KLHUkzX9b<~HS?1qnt{4)0)J`NSW49VX-DnHNtMfr7f zL4EkjL?b^Y;mh22_&8MfG9-U}_&oRL;d=w$c%^q9y|UE5J`QPa959K4%zeiJhl+!Y zg*L|yh3+#tz;g}b&^Z6y@U;*V8-9ixJ|^MI+;{jmRQNI$+85S`&vSn%d`-H=hM(t# zk4gA4_Z>bC6}}9~ubg+~=efTWzUJFw!!L8g$0U52`wkz63SWlguMeN+{!;kihT*GB z8y&QvJe_dFh0?B9`4d_wu|0ax8nQqrY- z*EKg>>p~fk-82ajiH?Y#;Qx-eJD>dJ904V+lN`&v7polBx^~K zT|Y{iRQsa=nw_=^gw6fUGjFbGo=|jcf?X_&Aw%p!`DELNN-gBy&?98-o#YMf{F%Ky zU*YV-5!2C{lRj4i*H(2~buv!_-^pKny0CMmH*i@V`<7C5k;AylYff7_!I%46NlM)* z637?W<_-K79ZvcJW^azSazu_k19fPA_>&=ZMRL|SDvf_P3SJ!njTWQ6YC6}Xb>)z3 ztJfJt#g|!?2k3;e;`6Ou{wmp&oM(SvP8X^l%j%q`z`v}(F01nN@Y=W@Rhmbwfa~?p z9Bn7cAsDSwn8&s#FFsNJgjaslta1Eee0;!(+Qr#cn&&oU=ZsisjVD%MoCe}jqd>rfd_OtRflCD~*(75#cy%%m>LA=sWuL`U(R+9=|jm^`&8k=VnN?p4b>RxuCc0c44 zvYt62-}9MfxiPf3hM{8Sb63mAojmtWd8^2sGWX8t z){#4kkn!hIt@t|rC_?7W!2P0klASxb+B4+3Npc} zWEeN&((CW!nLAf>GweYkbF zPOsl>4zJUsqf^T|H;>Rw+)3+un@t5wOJ-PsZ>_|yt;DaatabLV@7abhO3k%j@37dP zXc^M%?_fNXVLAb`%vhu{CbDrZn~Z;VMqwF@!c-QWQJ#r^p5kRi<3Ggi<;Gv1xucaJ z{zL2$iVf}*e;@JBBmUV9;{Sxcf=B$FQKH>GHvZ0d@$bc7acn$_H1Qv*c&X-f(|@9^ z;|&!LRV4NCpJ+d=&8WCj{6`W0p|~h&5dY2JIq`Q!q4r=s5lw$*Joyscub*RMYE+d)*tdrXhD2^mSx_;Crfw6j5BSH5WCBe}=swBWC9$-k_APKf|q?(d| z>YDDijD`CCh?3wWHwhx6@V}e{apiZ%=k@ZdF=%3p9wWaTA&YTq)ceWI9R08#Py~(q z`Vk{PR`2Soo9;8n&!fn1Ov#TKTjy-u;>wSOp9Gt$7o36fyG45%L?i5&8AQen1g4^6N*8{8+uKv*p}pke^4% ze`891%m(tC@8Bu@v5@>SB)|NqmtVL3mi+beBRUyPRZ+uqP%pxy115SPb8kJ+O=L1| zBk7n*uL?kyR^2^*?e%(YC<2E9{e%P}ZWK$37M~wVfRqG5p_Zj5pQRFwK zn*!L?kyR^2^*?e%(YC<2E9{e%Q0jImeP; zKVsy^s`_U~eqAHK3?siWB|l~Z`8T=pV9fQoXu*T|2F{4)2JUpJA(xQ)oKANDL}7SMnFh>;(wYMof@K7;%`iu}fu{Fn{o z-{8uRh2)nZ`Q=Bw{JQnGLkBR(v6*KnO@^wUhSs;HB^2?7H`4zLj(hq2&{?o`fZvM0Bm3(JEt7FE= ze|?~e{Ksune!UMeOA&PPU!T5k2P^6#$(>!TqiWq}jQo1k$d8Hqcoi%ER}uMTf&9tH zFF#`BPyT!Iw}>x)sw=-tBY$eV{7-e{$8A*pRLO77<0b!78^|xKY90P-M1ENye=73Jj~MwCv%i!7I-M#``>zJy$$yzf{`0{}~PBmsPa}<3@fxiu`)i$d8Hqcoi%E`iT6pK>iHmmme|m zD`tO3{?p^jpXbUi)5xC}PyRede%wao&y)OS#sT^B8ptoJY7OR%{CX7m^{9~_6Z!Ef zR{k#{^2-AG^N?SD#K^Ch{T=yB$}iK%UlvdPGDm*gM&&P){AR`i`O6x}FRN;e z?T!3;6#4b2kslNJ@hVpSbrJbxf&692FF#`BSIqv7{NecWC+Lt8>V26;{)EIh^?yR5 zkp;I=`4bZDS!MzQ`4bXj>wj5QYhdp_W8~MPMt)4>$E#TRKaa>S3*=8ol>G7|Mt;TY zZ^@q+xBg4em;H?VNv`}!@#If(WRcr?`IGEfX7<9!pVUD9B)eJzd-oYfe!c!d|3|?& z^2@7O`PW9}Pjci>lKk=`R{o^FCx5f}@+Z6U>#RlRAS_6Cc8AtwPSALl$|K(Mz{GUbT*8!yDf3oD4AF=W$|2_Fz#FszSm0#~e8~Ib? z$)D=TBDeMOr`og3?1hm(wSoLPA4UUv_ZdfiEh(D(mucjeSF!Sc8kJwK>mz@vZ8BhK+M;5uQmp{#(Wo9po{Ams3PqV8vpm(2f(1}{tSDTnYA$TXEcyM z!>-nV-hIZAKf{$@rjcJ>#mc`XDu0F}e}?3jAF=Xh{5|w zrOIz7mh6nPI{M*w{wx!*$!Z7JAn3zXw8GY zB6``?sw_>lvet6l-3olI^V`EKqoKGfR})gL9>rKY{s(^5(zH%pi+H0KSF%mOTBnZs zVZH}pxlUum-Rn}`NH-(z4@85WZ+!Ic)DcfsAF;J z`(4!4c@eHq$GQhoW_Hlz`%2!XQLEqJWdp|-p4aw(fYL!mB@6ki?DO-DDm@TQsHwW6 zJr{w?l_{Luq~#<%$vZOI0?^&c+F)hrV;H|%fzEnd8{;`6R(Y5*u$vYeS4JE~1=1NB zMvA}|OCQmwl&|dQ2oOrch&j&4CuhrnOq9dFJE5d4@~QJA?|X*rEA?VK`V#-Wf=EL1 zbj*$hXRAVtQhwAdv?t;=o*5%Rxe*|DXzGL%`+d!mTD>xKHD6aT{x$Zatk1Jkw0Wo` z#q+WqYUX))o2RGF?ar_gSDFnu3(NY*F)_M~`q`BslfZgd{eVryO>RvpYZKsK`Z6F3cYOx+Ao}>BO|GPaE_6 zG0yXrM;_?aa(S?+-1VR?a{?dM9R+?R(kb)*Wr9`YE-7)%eX;1 zFJ79X&^p?1!u6$YH^UQaF6Ew4)QHecm&g?eH~@j?MOuTOgGd0AL|jz^o8^n4u)kcVW%4cdEo&vzka_>rQ(e_IEaA zf0sQE`@5R5zt?^M`+J+P_g2|A$==)4i&EZM_J!Ct8Nc%H$s<}tmUw9u%~G#YFM|`M zx|5qq;Nh7$Bx@vrwSR_0A40`F)O@|qQ35%UIz(PcimU=VZ-7}kq`|4;29pEsCm~h+ z+1oplOXLv8cbOVdztm^aE$yOK|1jahy3vV_Bh@!MGA4A8;?G&7gyH#v4$&T`v#{5f z&yCf;BUZo5>$(%M>Qg3fjAeJzAnCcUu{_9FYQEL6tc+MLz;YL9(ns@?j^&RL%crpX z(y>f-EzhP`Lv$*ztZ^(AcN6BD5zFhae8RC*6Jab5qCd!!gRq?8SZ2twous@uV%bxc zp;3xWo@=uqVsj8S=g6kawdqd>8xQ}`>+qo**+@R)+lvvK&DeC2|JS~zdP8n$vr@Gg zCLxmIA+Bh})Jbr2PJNsT-JnxbW=yi%6jbd@8EJMp@LeYDg+M_fWl5z9^>IoXDy5>O z(&uVi`Jy@UstNVx{NQv{OHCV)=PLJ#tS;2pJNlvAao!kk_Odi6raJkzF8z@|nk>ZF z-@i}$rTVx-U57`T@PZRoWPi_}*ms!oC(k!+ulPUK#KV%*#DAamE9=r9-`Ddi>+avD zy~2N@>E}5$MgOH~AOmFUXpFr7z5RbFO&XUIPnr%^U7Y4=tK(Car2X%&|4oVi)q?*o z%R}Sx*r4$-_45)-XE5t4Zqw${(J-G=d&ap+_RQeRt-6=$x#dY+d8WC)*}CJ{=!IkR z!B_uoy>R>(_sVydslD^ec-i?u$Hg<_Q?abis)-uvc&6Pad%YZ4dO9dgGt4l|Hq0|D zG8}3+2EK>C=7L_DxtJ5Vcr|iS6S-I!x!4f7*rp4sJVb=7@+FS3+eFWQgSydm+tm+! z|BtOTl0Yt##`S-HPiYJN56A#{V5puiGu|w53?u8f&t%uH>juLb!#Rd!@9&tfP**Li zz#dh98J2&GhQ)iV#9!Y3V@nJD%WEMIH08DDuuyW2P6i*QZK`(@OJXXsPG2oD%o>Oovu7H zzH)v`k-z2lv>%+`QsnQPs|?SKpPZ{a&y3%>iYW5Iv5GugKYmNuem#mj{c!DX*EG`j zQ&Ac9q&+iQs;^hp=lc?d^lby%TJCsGTh|kGxOiaQFHb5%*6D5DW|n_*i(jm#>by)6 z1b(s-*XcO5@$;R%&-(CJ)RE=inriufOqFAO?`w&!7i%`^Yb)!ky8ZO*ZOw1&OCfwHM5Q7josglsJB)7l&<)S%=KA+_+4hU4 zw1xhC=!kQ35bqBU?!t@omqhK)(#_Jr(i%_cC5@b(pCOl*WedZ*)QF?HtQ3ol2a_9m zaDkkbUM{Dl!=+lD(otRIw6xfGYjiOt2KC;K$di9J6ba*p3RA~OSw{Ekf<8$C^hwc0 zpA=v8$;3kj5s^VmWHcF-tL1&^Xn9{cLEe{^;=Kws-YZ$~UV`JjB*%LbcNs)p2Ct>J}kWuu6a!X`2QM3fn2(iZtK`gXU98-4E__s%136*v0n8u!l2ZWTAWdV_oC zU8*=moNP4NRG-RmMZ2}kd9d^jH@MRK=D2qrb%QH?rpCSViW^+%KQ_2`-rJ@NRG$J8 ztagm|OpO}kTvU?^b;H;|AJ}PS{bc2?^W5^HTbi_|z~f(t2f;R7yn$Uxp=-*78>_4( zHD%nVvQ(w1dpD8hqw`<&26h)_t>M~R1J7RR%UaLHg(UpwE4IDAXY>(1-XBn{JG#04 z2W1H7=Lwe$)rW%L|3fwUAEjrh+AY06)o$tKy1PWqC#_MOqwu}=#}PWLyLHo78SuE#Hn=X7>XsH zC{^>+;*+?4sNvsNM79u-EktAs5!td=MBZ?d*HxXr9+wZ#vjYE~t+yb?P%M}@sGlp> zT$QF4^sbm$eK030GKZ*nE}cHbWS1rqhcnMLN)sA#Hkr#8!Z&z4(P-cEBC78<@>C^0wnYh)&4=JYkQ%$0hikb(~#1AJy z%AFQ5NNw4g30TeMux?SQOetSP{yco?-o5F%NelNm13UY7W$p&W#+fD7i^|Sy5t(a_ z79#sJiK!Q-$i5s;+v3bTjw~!vI_qdo(Pz$qb!N2mbGDhJG`TQG{_4VcjZYVEnsm{{ zJ0_ttHx8;8L7&a#+E}F6$mq^o4<|7$QmS;aa=$1( zR9+nIcoBHmJWx3)M`e*WPV~C8Cc1vNDmz-0UI`bw+>;+(tF%>O8t*iv9pleEPQZ&4 zhNjPz@JeYjgGR#Wfehy3G!;j}C~tB+X(UXVNf^#7l~S36k=m5WEB%Zlj8tomb0?B8 zQk)v+j+-#$i#F)@!^+OHdFQ(FM&-4aWuV@NXUk&AfRUoAneVG)_;)5xZR_9JZfep; z&9vhByLw}+mR9O8|MOFQmHpFvm4nh*9;pS(M|eFqtOQyrl;YsSg}lo>!t+@^3E%`# zIbfu2>Oge^K_{N*n1s%T$Dtjm(vKBblyj>{t`99a~9T zPE;Kk^H}s!_7`H`zG?dhu>V!PfapUp7tWz%5>KT;bEnAC-KP~qWr)h1f06cqbl9P( zU@J?DmJ1M9sg)vQ`%jiumH&r}SB|AfJ27W^nnI@j3@RU4V8wxCIOOi;^nyBP+C9wP zdS-|Hi*o*Fb)RhbA5FkYeYb0a73iC49m4{E6-ct&;}803aiy=0Ke%zoRaW3cx9T}F zTc6h^iR~FmM7#DqCF%cM<>7pAPtogbqSv_KxH@ji_b~I}K=o#w6DW*=XLtkB67zk_ zh+AG7z!MF|>GGnUe4NsXBb& zhh=?MT&DHw5-r~>(YeE=l>?G1yH=i+n!B{*SF3ho1|P4!ZrO0t?O9m&V^ZUl78X)e zekKmF?^I`P?>Ln88EyQZ9M}I1^8a(|x*GX!3gwdadqu%<@?JvOX`g=e+QW%f)(*#g ztu^SiOa23`l|MKhnT9^x@L94@&|iaS*w)XX$$Ml-z(mcD$blg zpRMGHStW9}^pqTDRdUj}y4XwY_C8Lmqyh9tKH2Bt{AIh>yJ)!*A@pYbtIvzgtIstG zL_RAsBl|;~WhZrD)T*jy6ZaV0+rqm{NM>I|Q_HfE=;ObN;wbU}(45Eh^^+{c-_b0y z8wAJxMf$#b)Tj6tf7Smtk8#q+_!{G>o>#4)o&xccM)%VO6v?lW!E4;=I26&hh}4a z`z;ZB^&*u!YW`zVq+vSS7pvio=ZX77Jgd4E)zSF<)%^MOLr3&D`SX|br>W=T$M2(P z{Nmal`6u=R{=|OC%BcVL#q<9A^xN`H^!d2)8}Q4%?T_ppyMHA{|MsnZX*te8wK3|~ zXnlI$&u16!{e0Z`Up+oHe*b0t)9Q{rVd=I?D7BVJ zxars8AJO!SYk%v5(av&Q`>WSPpI7>*6RIsR)PLI1X?MB;v^3nLuQv=HbGenOZt`RR@k$Zc`&t5jCX|L77QKi;Lu&MZc^H|fK z{Fm{wkUtOk^P=*bY_rHWGXrFQ`gqg9snv@#_(Z&6XHD@RivL6Ke@IjQGxpLXgnEHY zF6G#ZpJ+Nb64@gbL0%-H0DW z_A^g59laq$Zz$0lN%Y1jdJ~(Dp7Z@P9fus-i-?pWFQMhI=SxYfZpD~Xt&|22ng3F9 z!aR>+=6wILrorjpGf&zb`BG!Iw<0~a2PsQArYOB=iqg{&^>o5lfs3u>Jk>=#a?b5h zoYJ#K-v^y{l!CJF{wAi^rXC}`Vp@ND{+n(nMsq{2M16KHqWw>mt@>V~PR`CPN-s|C zStI}1Q)Qpnl>Zn11^>r4jK8xLRUgjG*7pN)2d0*sX;n^Ch?CMwq&yQdbd^zZGBT*> zqq>1@+M{H@wt1Jndsuu3n;)|^`=nyTj_FE`1uM@?x9^m-z7|_kUpQk@;jK4fQ=x8z zrc)gGD^qh@^O+58j#W%Nch@xf8XxK7neiNY)*uh8$~4nIv~u-frm0w07RifqQ%j2F zS-Nu~-Iz4wOE0-XQgxS9-AgXmORDvoj8vyZq{^T_DyjPGVo>)gd%k1e#Su2xSCS)s z@S^N_8Dz{uvTsUkz8^II^#+n39hE#L|Hn0wEt>NB_>;29Y|K7W(_m&yNQU@#CQUic zse^*;1KN=@XTUVsnG-14^Yx)gF^M=?$aUV9%=2&kGyHud+xw za&CscBOHzCymS)d_KhTF33}TplAy{9M@@8bW`=#8oWzaAov+0vRA@#_`dr^Q{4`~I z$v~6kl>?=IV{}7VpIaXvi^Cg#;rpRKn*5FCpNS6nmp)I^Rtfg{4g1c&-LJ+*t8P@h z{3~h{zxq^Rb=jV%Aly{ZH~&bCpr%w@HAo|5(idOr;}=sLT1KMh)YyL^eVWeys|abLLTa4e`iK4vxaao_UsL0r|)t&{;x*3aXcmj7TQ|Cf8qZwdm%u=704qDcScCT?y_ zdg;&QZ#w*w@q5R=_6|QMlKweP`hOxfal_yJ;-81#xcqe^)LWYJ@wtXR?mPYC>hIC` ze`r(wd;c5%RkBr!Gq0tRm=-D7H&Yxk%=hV3x<}}}74@=84tSgDOlRR9b$47#R2WgETFJ2**QqowLmkltzP z|LOR^d$cj$-qu4^gqcK(e!kC)Z#>hlSFKC^P&d3$^~?BKz8$TFn4>czu{Zrf^Eu>P zPjzb9&Q4?Z=aYSk-bsC5SM=IzVp9!fhrBO|;)#6DwUsL7zdA_$54BK}(n|EfSksrf>WijZ9lPTB1}Zl@5>`CZg#X|5 zj~{wGwtqbTtp@$$QAb6q>BLAhLVwaf_RL_FvT+(j`)4KBMf+yzh}HMa-2R*TXY@av z{#l-`vXxTVar&P<*HMh?`=8P>r(>auGrQaEWZhIp%s%P4*d(p%A5|lhe!UvUy{Jh2 ziK3DN74adu8dB0`o=+m$FMr-BjH=kK{>o=#0|`Aze#O(z!zf)wKh?QYM_`C44^hpl z>+Tiat(G@6Cr$@CZvD{`S^6#`wsE?HEgOol@A}DJzgZ>s zGq4JL2$p~a;GbYFcmuo)o&!&UN5O;O9#91;!3;An6pI20TL(!l{>f6x*ngD}fjyTE_IHV^{ef{ox`U@ce;J_1X@Lhvq_ z2i^p)fak$eU=DZ)+zV!bnc!A%3zz~Xf^pyma19s^E(aHZ^FR?82>OG3&>Nfrjt9qp z?%*)c1#|@Mfd{k#DIfvt)>&KjZ{R2JJ=g*^fiJ=5U=8>fECY+cd*E&G7I+oB0Gs=;gEMeq!G96Su}2X}$nK>$nx zrQl{z0>*&rzzA>!xCC4P&H;tM0%w5JKrT2D90!g9hl32z2^EHmcKWGV(LHJ8y7x)j@214Lluo3(VtOcvVM_?&f2;K$r zz?=Rt^vcr<=`T49w-6>L4S}BdV^EI@!%NH z9UKO_fR3O&@PJkz1tfso{}O%!KY{PT7O)9?2|fpFz{g-2SOne!Z-ckMtKbFjGxl7xE5RmhJuU1`QU8e0|P)`&)`3sJ3a}i!4{E@CPz_!KFM?;levPT)Y$7PJ8^Koa;vCvDj~ zz%SrOPzSyNUxP2er(h-c04xTz;2rP}@H%)2JPV!xkAMfj-QW&z8<-Btz$7pp+z3X2 ztHG7vQZNLZ3kCr%=m$;*r-G9}Hs}G40Np@ma1dw*_5-P)8Q7zPw(OnYSFja)2mTE< zfc4-runK$#mVgD|pI|O{1H25L15biS!Gqu)Pz5T%3{Vaxg9%_PxE_oI!@yi0}p5gQa}ROt+Tf5-@s4cd$0v;0$+m9!5Z)}SOyk>_rTlWE$}LM z0Xz*J1GB+>;7$+(6~GUsf}21w7!9rkSAn76VsJh<8~DHg&=>RpIp73vEXV?xper~S zbO33fHE0eJ!S7lpwYP(x!4JR&o55FL9ry&S0L#Jqpa#qb)!;SoB6tQo4ju;ggS)`( zAONO;QgAaU0b{^*U<9}VTmmit=YT?Bfiu8qAQzknjsr)5!$Ah<1P%mkK^xElB!NHl zy1%^x`~rRib>JKDHTVL23RZ#-z+zAf-U0sruY;Gsv)~Ev2zUV84ekK9f$5+OOakM< zjbIeG8e9o31w+8OU=Z+ve&BR)DmV#bgC5`r&<%732Z45AKadKVfjyrHJHfADEBFrl z8*qMty&il9R)G(}60iXL6U+r~fS18@;7RZ(co5tJsz4=}0m{K-FaeAO*MpH@7`O~v z2nK_*z?q-`fECY+cd*E&G z7I+oB0Gs=;gEMeq!G96Su} z2X}$nK>$nxrQl{z0>*&rzzA>!xCC4P&H;tM0%w5JKrT2D90!g9hl32z2^lB~d;`7)Uw}`+O7H<#3~IqU;2+?1@Dg|yJOLg74}iPD9pE-F9h8Ad zU_7`Hi~?7KE5W5;2sjrE0$$J$oDNO}CxL9x0~`UmfzIF{&<^YeQb9AYXN9m6{0g>$ z@4&yo2CyD{23CO&!4j|l{1eOtZ-AGLXz zTnGk(v%s040OWyQ;AGGf91V^Hhk`>uIyeCA4_bm`5dK)$1^xrJfe`o>Yy|%TYr$&p z5m*Wqf_K3@@FsW#JP)1%bHGF3UN8&H1h;})z!WeMi~~1-Yrt@DIk*U%2a3Qz&>!T3 z-ry8)JU9k)2Zw*Mh6SP;fCgADj(*U;yX~`hXm80yq|AflSa9 z91J>uG|(C}2Z`YK4~6aEXYd2C!DjFkSO-1{ya=8FkAsK7{opQe zI|zVjpcLE;O28O!9T)+w0GEIZz&W50Sl|qB8ps7Fg5$tZ;Bb%uI)MX0ThIoy07>AF z4}=}y7w{vf1K)tJ!583Duo8R#7K2*w4)_On9lQjd1y6uSzysiJa0j>zOb2CP5*QC| z1f#&!;7V{Q7y`}(gMb(G1E+&i!AT$+^Z-YIZlE(b2($zHfmF~8>{%}C1iyl<;5+bd zumP+GpMh22L$Cxa0RIGY!5iRZ@Emv&JPIBJ_kb!;31)zDFd0k$W5M-cBp3!R0~dn9 z;4E+^C;)k&7dRR81V@7-!J*&~kPZ$2`-7Gs8HBY&WbXq10oyJ*2F*bt_&+rV^C1}1^=;6^YC zTn(-Smx3YSTrdcDK|gRhI2D`(vOy1U1n34jgM&ajupdYT&A=X=lWOk-zk;pcJMeF? z0jvj~fmPr`ummgs{{(Zv8{lQ|9C#8u3LXUafGSW4W`J@q8B73U!S!Gy7zQo_7lOgy zEN~_$0C}JnI2rT=M}s55q2LgZ4h{hOgO(r}gck|Bz<s=;gEMeq!G96Su}2X}$nK>$nx zrQl{z0>*&rzzA>!xCC4P&H;tM0%w5JKrT2D90!g9hl32z2^Bz8ZaDO4lV-cfg&&v^auH%H#h|x4~_xd z!C{~a=m^>a4`>BaKmyqPuJ9Z9349N>fKA{_@HtomJ_gIcBJdt~8@vTx1uuZ7!DC=H zxDVV3f}jHU!BlV)C2WJBx7y$Z$J|G920FDJ&AQN;22ZIhE4YUT$ zK_dA5pTc(VGx!16U^Dm%tOK8b6<|4dAJl;Ppc=deUIfp8$HBwkesCAK9R$EMPzr7a zC14D=4vYX-fJ?vy;2cm0EN})m4dj9o!ExXya5%^Soxp*hEocK;fF$t8JHig|3-}S# zfp5Uq;0y36SSd8#qsRU`&x}ob?~im|tkFy0=3u;+a9~~=(1yV2%Zk&iz;b7Qqj@Hp(HQKV=yyvo>t3w@n*7RIozsuMP4%By)wEuRo73{4KIF%-P zs!#U?lf8q2$@x`<(`zOdcy$1HVaH|pfnEMBrP>ed(=jh=w)nc~__1C2zbz;$nO~*z zznWP=uf9m6<6k)U#j50`$k^S?OU_hkIGUjSpE2>%hUjsl*>v1txD2zuI(O-m&f{|H zcSm31?2e9Zjg~fyZ);U*-}FTaDY9X@XN`U3Q#!$|%AO>n>ErjE_tzSI51xF=s2tMW zydT#|Ic@7ae(8=+TfVEk?SHFHDn3%DG$xMiVTC{7xWn!1t=iqE>sZ7@EAex)OF9yd z`WQK{7X{YYw-F(u3daBWQ{4QoyHTp!xOkZO=~za+o76C+w4e1L|HiIWdey1jgp0(s zC5LJAa5jabrIc^fjm;B6de5lmvWD@IbIdac%;|4NTFvvE=_z9Y}vib zeG$NUzj+^DvX8sJxefc9lU``zjgG8Iu{Ba?-}{^EH)uDmnVbYN;g3}+#lF88+%F|V znW{=Kwf>+X6)#h@qrETR5Y>jtqV9SdBD~rPq^w-KUxL5SO`SN8rKJ@(WT}2D)q;KA z(}msc5uzQblI>wPhr^+Ao!`=_o7@+-^i-!Dq$_s7SEOu7KfpZ^zhVBFY@=vjYXcwk=Ho^2lgQMw=4?*Fz$Ud`6zJWqAl7fd2c z)uoA6?k}F1KPZv){wSW!$TFT;iT!eF$EM`v>>S^I?jPZVg!#HH&4^YO{yj;a+xc9K z-Vsac7aUMFqAI^^$LSMFEdQQnQwMsg^O^<6lqnvk$M?X$sYUIkcK(g0*KTana=CxY z>9t#$x7_95aC*y?^UeDw(V+aBJhhwJ7?;hB%a*$WE9dJ?m6+(ni=uy1*V;|Z^<2y4 za<5Zk{=|Llw_R)ZbPa6VzOviO@^6v3<+esrn_yy_p-4^Xw2u!xy3hLiFXZ36`~NKe zF1Y%C^Dlj2y!`(A`M3Vz|2F^p;nE3ed#6dcq+UANd&XfZCwUb)(KmFRm!gb*l!wE5 z>1x6;PC28@1$NekoBLPP=mF`ee_2_Dl{mMdrs|=v4)NSScwa*IaJYPz@uJ0hsAp(@ zEahW=y}@8oZiXGVqVZyW!L4e~dzymlvr!13I_>2&|{vWlXlxed!tjn<&*XdBB>42&+VD0B zp%3+Ylzyu+JVlOv(%V{cB-?|qeK|j{P1T|=*k*rU?gvvMcDskk?#}!gJGsD9T_eZe z>Bd>=Q0ixz{`2I)g^9jgW%K=thN{p@5)%t@){Jds(yt(A;rJHsB4uchYQdyp%NNW~ z^5rfZf2ExEOH9i5*OXC7MqKF}q&>}w50$HCw79VTP`81~e_^;Bp^W7$WKfTgT-!}Ta zSNi?~+a}WYA?#w)_cq=5|3UgLd?1>>bIqkm-fH=X0XG!&eN_xAMrNhkNmMDt^%bHu=P=EqX=L;7uBtl#z3 z!CoEYhV_F{-Gi;*SdIL8CrOLS&J6Y*ppoE8PQVWQtlBWo>iC-#SfRqe`Oj;%TGRKG zZxt5@?9n+-l?mgHqrZe(`!7_N9Z~>b)#j?s+^0Ee4#L`bMVcN_bBWdR9fA( zTj3Q2%HU3g!J*mxE7UyO>~pHVTnRX8-u znjS8mnZLN)$HF5Rma8#RmV;%*k2`>{z26L$5GqhP1HnP!l73f zE1Tl#&8YIKdl)~BB-Fq0|o#FT$uqAB`u>yA#;9dRm+Pvcb@jg+eB?r_-A zgZ_~#o&TZBw+Yq0QCCU;+bc7wB+mTYt;p7J4CkNALkY!gX!E+O!Yv&#`N;b5mpR;L zes8(3AJ{E_HM-MS>cZa6Auayhiza`mX%psWWE)c1*I7W0^K1X8cfKg%ym#rB_Sv!s zJxp*K9m}~%e|yp>oO4ezd1-aNMw2Lw^n3dH$)h7RaqgNa!>Zh*^!UG5RMqe{Qx$wt z$q8yw5}o|b-Br@9Y%bZDpm~t#>!*4=)q|Ub{R>w5Hzkg!3boceS_>ZX+_hlZYJDjq zI4~T#w#u#bt3sNaijMF0Y6Or;dMqlNVCUS+{{#`hIjW>6#XZlCDnEpfY{_{`>ossZWp$<&wDr?;`o%Udd z0|)6=o5-(Z{nFt>t*yYDCUibrjD)Hf$DP6y$Vg<_fNz>fRJ{{S>E6Ftg5Au^xdX0E zWh8Z0P>}S*JMNbrofGEeza~-FsPALHNC!%Xjcvn2JvPUfGacs=(PUZqB64t{)Bc4^ z)W9u~1fk~MmLJLV+_Rvt*-dHA_$RL{e5GgFB#EZ0iN(#uAtl+CK2(Sh`GJ*%`t(EK zgTg>vV3!rx9{9{Ylhdvng;dt3y;qY?o@q()i0@RQDHVe=uO?MEa6hl&oy;LJQMVn6 zasd<7{7BW!=#TWs548`Tna65SSEcxj@J#y>FUrCLCZvl6#c)7LbGfPt9f?AQdg;zp zCGC8{5sCcP$R~8HDc`z(bxB9LbQD1rUQfSYapMjA8fxV__69!mNi%K5j8pC>a_Ie- zXpSzKmieq~_$v(9J{5>pb*WfSNvQHne^A#_)0Q6dkrFF-w{c9SBdDc^b#!z>x_gbh zTzf0qN||*)uN9nT9QpzaeSt0Zi`__FCjrR?5>FM9QZk|=m5!cys@)V--Keh!xRKX^ zvJ)Li>t0tVBdQd$cAh)+ z-xN&yrkH8MIzD6+QNxH1)=D2EYB)^V(O3-;twtg;aIk{T*BEqtTI0;fAQ_Y~WCqvD z46nMV(VPe=YkYwflpniSchlXRY1B8rZ0CRpJ;j3Jo=*AUj>gGK4{}P4bZBbKj}cXM z&Su43-o`GSNq)_7O<6D-eJKgT!^T_l$yN_s?H_R!bT9dF}0@4@`x&Z|p0#Q0%J zKhpF}NR!^tNYTY{m8yX<^^=hLiUo@5X`7tMHEF_^9rP{4X(n)fWaN8hFNoxZH?S=~ zu(MxaZQwJ`7t>+)d*#DEs*e{CyHWKK@j0OC{Kvw;4*Q4>aU2CxMxSn$3ann5wck82 zGHY)-3ueXbXA@U-(9~gZzF5&ui+{PpV|x%(u<1X0^ofQHPc;smFF43y-L@TjFVIj& z-T!-}eO#wjLG2?){?I;dz*Kc$Ox4+`Ztb_t*w4<~Av3Q+`Jwy$D*9z!?Nc+@T|a!P z9Wsn#eM`jr_Nl(n;CG_Yir_n$Wh7IubQ@#iZI&9WZT7)4k>h&ZmOEeI15>}*^S5z# zrt#L&f%U2;jL%tXj61v2Z?X^0%zRaGQCY|}WyHC5%7}A)8V{QIYeH`3SSf+}}zq|j9Y;}1Scrn^^_6sTvU870L{D^m7wf>l%Kco~gBBy>|cO~`H_ zR$zA>%U1GgMDc~<)g^-z!aPMprKF!)&P&uT;=A3_csb%a-hckGT|t;2J-i>;I$3s7WDGYOEcP+)Ppa zlHn7M5DSW->N=mIPOcWJuDbv^oGe~#DzB^f$o|Up|qzH4b?&$a8$mC0v&Ubk*Q2L-8LhyqByfVMK`Pd^jUNItG)Shv?ekx zF|`WExvNs)2~Az<5mhz%IE)Ug<%>Rfb+2kD)VKrgjK6*-_x<0i%P|Tq2kJ!8=^)J~ zv=s}A;eg^R>k8ypmsgdXK`k~hk{T6q9Zik<-5(i&?Y_X`0v+IgfTqzIs*Kd}USk%j z@tP(lPI>c8bG^LUGu_rb@`lgC(EfRIS59qbXqcpWpGbw?Up=L5AEh({!~0eE(zT=FmwGS%Li|jQ*x%@*Gxd)# z=*=M(d8nR63s!{coz20=LljKrP75WKHN#SEE=#P6z**E)o{g44(p!NI6A6k zv|sklNc**(YNY)8`$Uk_IM52HIJp~YufV+M?m@+vC>7w)I378eLrTbg07 zx4El63qhOw=%LLQ7fL4iPXFsiM6J~_*mt6{2cOzm19f3Gt&?(vURf4sjIcRFW; zTIbKtmfRlZ&)8Me-dnx{pFRFO$5CctsCoW7xM5U2QIYZGZk>{Dm4_W?ZRAYK{7!FF zL{8tsX+h5BVzm*D{^XlMe@Nfoa({c?-kdP@z`~%Wg@fm4x#?~b(|pg}3qs8bdaj1D7 zr>!2}EuV14rO3(nR7YV#`qtHe#KPS7^F5E&5LQirriu0|(1E9Y)qd(nNo)P^Oe@nw zZRjj3*k0;#jwYX+`d4kDXJ(D!;>}&BbrA zcqeZrA0#hI4-f5K<{CevO-;(qqfGuprW#Ms6jN)am^KFcCRQYOw1Q_S&~joDdUtW6 zrkKn%MZ^l1qcWjqqEk$3OXI}MdDyBn(kOmYJ6qBD+HqZ_DXlcanozboyZ95?mb|AB z@Rq;O>+bZo#$S{0JFvr<*StYLv}ou2xWfE!*GLBIhYAzzv8vIu`WDYr zLCoO~eZk?GJDka{L`E{@-_wp#IhJ9nax|t|;~IXehqOUvzlv#QvS372-n4MB&!?WR zFL&9vK2&c@jk^`TfTp|M37=C=R5Q}LLF- z&V)m8SIQu5DtcZeQ%#y@hNh%6`%ry=O2*rij6$=(x^7%w`Y2=iY2Kwj%~wEi_)61F z^G;}{0mm|X*2zRby3{ye`YB^n-t=65rWZB&a{CF&=|WemQ|a-jN8)(-vAi5%yj-XJ zvwIm|5v!3n^m#`1l~Bhb#Ipzyyi5hw<535KhetcrH~7gp^qZOz-1cxJG3J74a`aXm?ep=f~yB2JXQ zRg~X2-bsbZlbCmtB~lMHpISs&B%bGsoh_d;K&ro{`|SR zq25csl`0@pT1nRV$LK~VWquD_s*Ne~1^Y|$YU#ohXO5}3B$D$AbAjfxC4{Y@Y&GRHZ*Yw14ILJZHH%@|0BR4><4y;N5GCsvWotsV ze?fNNiopqqb*D&Ic&Lrzq;U>)ekD-`L*A*84zrLXa1^9ntJY+wfd}J`-i-%Hu*U<9eY{PE1v{v|O4pBAc`|vF+u=wi(4o!^=o)(F=-mL|;I~SM}>d+DF&3#ur#+x7Afuyq+k! zrB0|mYH9y)j#HU7?u4RGLzJp=Q}-P8YUGdl)pqLFR+MvfK8^0G8N;OWX?{<0``&Mw znQdy-erPQHFO++B=I6$ll6-NrTHSE0s@3^DBf9Onk=)zlHd32@?o-`erW?$W*2pZJ zzO1yLH&_%||5-KeXeTk5Bnzfg%2Tv(nEbU&Vmki$G^8xk<3{!Cx=3@Vt0FL4pgytHH0l|7V@>AfI>Mi4R$Dp$jfjp)CbkCH3Y(D)$NbT zuf~@#{m+w`p=rARNt$>o53u|T7SZd`(6zARdZ~K;JF?IOOutXGiluR^Hc%9HTc^do zRU5tG<#JHm!s~f^WAAZ4TK=$S+*nF#?ZzbS=VxVAoAVZVx35=!Oy2!a7+7KUU#zm; zmfG^?@pW6Srb3IYh26Fm26lS=TM~UOcX`c3p2AJlvgx?yg~6K=nH18~TjWmRZRs3m-PZ#85bfy>?srpx7EfE~qD&X8b3Q9im?M8xCLec_M*5iEo~%!Wt9{bY zsrXV<)|>muxIxsIMkfO6v{+_z7G+wifrI^ekBGuLZameFr|1)bFcCM#d~Ta`Qr=8- znh5Eys;Op$xr@e0mj+YtrBJKnKW$AgXCOj9d|sXq}F&yG8>9Y5mk85iieZDLY`h-#~)`ZtR*VkREW<2n-|Kki( z|K{cVT+(9R7^QD0WnPgC^~EH`uj5YCq*Z}ikw(M`rW`}SsV3lYiLMOF7Db<0v!Jgk zcMWl-wDxZQVjg|nD)~xh*U=2s03?u>)r&KS;=jo%wM<48f+;JGknhiDMf5<9B8g*s zH@REEW}{uhJwdbQB{){Su$XN|susN4zw;%oroXB-#;d`FFH5Dw^jr(GmLi%m2vt&D zps$vtT%fgq zzROmsdV*^us&?n8l2V-NJF}5EMLVQ?ea(qPK;!y5@TxVx#QRRAOp)vB5U9+Hf% zWR|vNt7mJZJKIQ?A3O&$sV;@)DL6K{39+JRilN?$%WKy3!?KwxnFy3 z_sb<+DfQjGwRNgUHhMJG)~2P#2UJ_?hNp%=kT0uhdwIrzLm# zUstMwul1WeW^;3_pb*W!>0!^zs%CYelAWz=ZRz#zXf-aQpOindAW*}8-)TRhk17b=z1!FI{H<=MezFR27%xit zcN1OH({uV(`D->7bgRt|>!s2KYwUjAY6`lo%A59E@c=fr`FG;lna#~#v#Frlf`Z)T zV>^{(&{b`({MFBr1NgDOhW{H9L#<8cGSoew@8kt)1D}Vw)O%A9Sf0P8j==mo6ZJN2 zL10x?fwVKJXV||zQLVbVW~#fCV1ea~uqoGS}&)M*5wOexBv%r}{UMFL_4w(;wFUpibB~(91mOrL|DnxW-ztSQ3XVPd^Qh z$0kZ2Pnn_}?qfCghH|Rg=qjhRX0tD4-V}ts@Klyl>AujR7o+~c}f%7X+{m% zW|qY0=d1dtrP0p|UH#0Fes++49ysn0D(7sYoNP#lQO-YHkTjS zYA~yf)!k|e9qlZ1)C%X0c6!%rD(tpEgT}F4OEOVN=lyQoDCxjYRXqzWG_;MQp;`Kk ziYoe{L+U*%3@rDqsVnSO>veQgvpiIwj*8-ibX3D&C7Yw8_Ikx1{Zyml=x0tt{d6)a zMnBs-`l&hddIjCUV$VJ_R5i3w(KU{Ww&-kBG&^0IH>tbP&tE&4Tl;Zqq;6Hkt8?v- z^IT=5af#K&lGruL*fCI}{k#4>?LGe2(8geg{0lVFuWbLbhLoYs%J+P2TvWmA*HW9v z*Z5S{nSa=!eMnaBnz2QVB-CV|c^ky1zK@yBTcesOWqb>>$QOETTnl;ng38}C4Ue3A z53>hV^T?)DhwdOxo2g00^NtPsh>p*SN~k#&jDK%T52g04xa7b+yj)NB@|IQPo2D;n zzsq2Gqmx{%`tH5cn4I*yvR1bb?|0qu;r+5c2pwSszP46{Vmf>#fE1tXnJW$Kb{-2R zYuPg|(dx4lmG+mb5cn#+sXi@tYPY&iAAWr}S#ubf7c)bis0D(|Ozr>EYTk@Na@xOQ z_M_dNDg5^B{Z zz2bpr(Mu}lQpX7e4*l_*`DzQ6_@0MdF>`YU0GmNo-Jn`+Bqq^5YsUB6ocYhM7?qWO&p4j-r3%cTYqI#>*;K;I zO7ktxJ8Nj~x3A;o@m0M^<6Ze8d|$}Jl^%D5 zAFaN;-PBmEDba>aE#zk{*Cd+KUu%XXhoHiGqe5K}EuKn~I?KE`QMID>mmh#-?PfJ* z=gQ{dB)zGzM>Upb+5j|0+n34|BK>KVKvq?RJUZ1HN=!3jb?-Glz4w9o(zScqF>X_( zKS*<+n#t6Q)n6T^x8rh`lw9Vc)O}$8n5wa*DspvYkEIGxCsiveX8O`z?btD{JT7XN z=h#)tj{ZtuwW`k(1HT29Fcp2A`j7oGj}2Yw`aVYA{i50$8PEH3UCS}?{685>1)!R_ zm>G&#?@f#Jqw!Q2f3%h;j4S(nj zd}?XWe7EIZZG&0!v$FhC$s0*#iSt${*ITv8KA@Gfo?6)h54 z(OOC?tw<6;BMNK+tm|rO)7Bc>QmfY1Z>1nC_Ll%cKt(=M`AAiyt=x5~0#ZJ*O8)PA z=FaZTCEE7S^N_t?@64PtXU?2Cb7sard`J24!&uveeLYy{S>?muFRN{<>W_LYF@Cub z*JaSKEPOqDqq3g6DjP4WFQAu|6^?oE_wnavn_|#E>X9FvIodf~Qf+>tY%lyamnFKr zHqexi!}8$=$_v{od%>O+l4D-3_CID~8Bz?b_1Nf>v3w^oF3zX-uuLEo^Z6k7m@oKV zY4Ba7IlG?zAy0YTk?QlLNb}Qco47J*BOdoGuj>GynUnHp4@w%LYq5?M`ld99<)NHk zCjV_$qaO$KsyfTx1?l$(r{uaT!Pl|56fxlB4W^6y2#zm&WARr@g0DHdR}9YC`Jl~Y z!2sM-wVjY)yP&{O>2D|ri)LfjmA0xYAqTMm=cFv-b0&ZB=OvFuW9NWHRqZfgkoc>h z2cn2psPIUi#}R)?G7UDPB++f?jFB6@_XiIuD*V`n>c9&;enLxk9f=T5BMPUyQ0Z&*q_LfE_`!Hee-u;@KbZw$IfqHBXC6- zzWGpnbEIx})x5$33;X%DmSlsCDX;LPz^Dn9mWIEVTE-z%+21&L=~YI1q+uic--s?L zSsG9I{+mM)5+ZFS)`N0dHXLrR7Izldf0f_Jn>Nh>sx2 z@Ug;)WPfy6WD+0YJ)9<2V5Io%Z1lbNAcp*Eba%rTNulPKu+xaKJdBjl=?#`n4>L0A z9QCEfxA)G{&&FFUS=Tr(l;MsgGS#WSh%Czyy~GJ^}TxCjaa51o7790(Ns zeJ>7GuFf!n17p9nelP=}EDv*Zl#5})$W0^eM#x}z>M1zReZgz8;X}vcmIT}3G_xwfL#dePG8n$t9k+z|~L?fY35GXb6LU#wZ|F?u&7D)uEGBiw=}Dk`zOjLSbiE(t=LykFO` z;MTyVo+S~RkJz9n_T`e`8|B9HfA=*X`SKOvOCB%T_0N*vTc!EYlHg}}9`iN->&qpD z@67*NN%-!()WUeR2mOCp;XfB-jz+ifDf%l)HnisMVxwV8tR8y!ek4G-`vzR58TZPt z{A5)YZ#d{VS>-7W#!KMVj`dN4p1!y*8{JVFJW~>UFP2ssY%VG6s63BGc1if^RHOzE zB&?}e?<-c$OhuGv^I7O}oB*2bE8Kt2JwU?{{)=rSzYCf!ye)ofNq)zq@Px~;T@?bv zS}5v)HTdff6{GJ#^wrQ!52d3oS~J1R&^1}SJ!$2HUXUo-HwscY7YD22bJ)k%bYRkN zh&M4mxYt;5JM7!o<<(ho6ltgcWvRTV1fKedD~FtKBDls3PKR~b8+Nw4PNaqJx86pB zfRTZz73+0emLgtB3X1W4L|#GGnynXbX}_@^$2F})rT?Cy@O9oP3xmSj%|oKBDBu_JWeXeK3@K z=Z0Xljp^uskp^X=M|@H2xsjOiQuM_XeGdJe@ITO${2gC+qSaXOIG;5i!a2p`7JUSI zQ?X{Fo5VMR;>GCVd4w#wVGoH0>rZ{a)|>6)?hdD+b@?FmG#9h~@C?}i_q1V#hd^~! zoMtS#u&QT0cvTIN7lvW)AegC#dV)jWbaF^3IdC=;EIOTFk^LC)7rli=!+U~7{z2#V zgVx&7=V*uM-=Sp^_1~=cGoJk)e0Ka3IDKp79NAx}SM@C1^;-NTGi+i8w8dC)zwoQi zE4O0`Ewxz#K`My_yDlU$qgMP5q=Xj z@Ls--osS{(kjWG+8csXS!m|tgbQ{spvS&1m66~9>5rg|JX8zX15F2x@c}C#LR8EXd z!T{>Rw4bCiPB!l=cK;nXT{8d4D6LSxjJ<{)`mua4WSH1*(6uE-;A*_av|-j{Qh~1F zT7*v4l5%Jbz8``26StIRO-2AAT#aS5XjCuaE#(LASNt2-T>g-cMM0G%G7R&Fr~DtC zQO##A$H2f0&&;}lQCWo?$`x>K3yrl?cuF{9-g%rOX|~MsF`NtO*c5z8!?u89I{Z=5 zDU3?N93C1bd(cy`3}}F_WPzb4#>GFuG&(Nt)L(Ahx4BSloq0Cdy_aeiCIfb=gk6 zOOZTgy^d&nEvF)+=Ols66H1Vgm3jkm)i)=uciemhH>g4N*-CCZ1=t|pllMv5(?f;ns39==$DwK{5W-ggl z9{w>MHwd_gj2eM~_yXqKkja#NZmzKenI`;4AF>4DNoNr~Hw~bEN%;hJ*+e>!Ud1OE zuUyUm?L+}E^+`Qq1bBqH-2y(jPyARlNk0}_LFMeymA7V12E%*J|C$fWK&5}TO@hh^ z{_ri#{5oci)h8vD*$9NqDg&Ei-SMY9*jgSu6#YL;Ut!QA43_p~V)@j%}$>y(eWXMz#lSFg|^8-z)XhPf-_{%6}=oN&xRv;?t0E0geJA@UY@6t^k z&Nu|_!haV*_A09Re@PfdG=grio+JNVtOMsvM)O(dnorEs_x!;RBzV_uUkrwx#6AMC zDoa>k_^{Bktg-cX$?ZOH|6t`b*2i>mg}Q<9*;_KGsU<$UF_YDU zwEoNdF*io-Jbm`Wt?Ah_7hy418VY-9Nz=c$!Pmc_<+cn@Pk{-2$))T+{e_1rXOym- zo2OziP(2K`o{aph;mFyKVe|izJF-Gj$mC{Zf})hIoSTLf9W(P7GJR=D;GYI^o?C=$ z4^&o25V+2plj=%3!WmoBk^N&mv|#*~#NR4G@IuM<$ty3(jg|U?ZBYHC!NaAph7R+I zmY<^VA8QgN_W>(x$6k@ke~zJFtXu_$AFmvRszU9sw!#@XEbGbcs3aX1&IT%?fK((j z9Htk7m)$)jr)`hH{z9~%!}OvkWOt=l*t*A9U;WB|sa?Qse2@5)#x52uI_x)P-~SCo z#`py?IG52B{DUSii*xXIn+&2wyrB=;ZV`RNbExQ`ZAuxgfW9>ucxa@77awMj7mVG* zryM`u4Z9vD99+4R@fT3;+f{G(KTA7O_F-qP{-xOKFSnzkWNCZHFi*;Y4B6}tZXm0X zMYF>Yzbt_g&M?GZcSDYgB*#i6sHFSum094S7`#(qA5TZa>NNVN-X?8%B!a5|^DeUX zTzC#=bx=W`6#haf{6*32%J8>&sQ9;mp?`rRV9#8*m%+bzRH92*blV7n_IVh$uy{@U zq!b%#-j?={O-pKfLOTRHW*W6AxJUx;7t0ELpHaI6kfj~`dv`jV3!|{a{`Z;q7Oq>d zzCy~FgDz$!FfZ(2=h;{vWz@!*tj$7Lg{U$+i1VgYaPP8oCA-=pv=b>_IYIMq9(cHD z6W3S%hN+*nzJk2%`a|jJUc*ykO@q9}+NsfY3PPXStU)f+I^O2Qbv^C3m6(1MAVulU`i!E zNRkMH7ZJ*=FOq16Q9YcH0cyYfk=6bT1S4=d-B|GeUx4K+`5PV!w*oW6cTxw1r{>E- z!zFkdLr6Mj&chj>c60;g(L6r2-s%PlX#By)$JaV7^f`0b=BFc7goaSxabA-1YgP^I z8+<*7?FqTDr$`n!*u0*_wXUDSuWXTXNkxExEBoqm}No}1E>Olj#CrL+htIISdjn!6xFalPda_unx{`hB>;pv}J}N<7h0 zu1A7)OBuyvMSm-$QVOx6R#Cbe=`2S&K&N%1`>G^xkX?E@+`3ZGX{Di#$x{!2F^b;hl*?z9uueUlH-yUE+Td^J*MgyQ|G)04L?M+Rk=W_ywlwp0sMsg4gJpPfLSa?PZ5p4*HIY z>Ovjvff;sHYT&Q|=J(8&A!^n@?BQAoUr!YcM@#|IJOI<7>tF!yAos%=OX4Ve1@c$R z7QuJ6-06-A6%1o@qIaTIl&*9YgYw7qtuRrbxA>i_G&KVqrD^)&(j0F`Y2N(o+|rch z`5_O#a6iyX~*8?1PtwQp0v~ zly+?&e0VD9J=OkU_K>g-(D`1ZKh&>U@XMEr)N>eSIv<*Yxw~Xc7+;n1SNT_hr{836i!HRAvi_Z^3!-^d4#8#VX zu9w_Dx8NomCxzSZfyUX(7?54<{&0FPe__)CKN?2w$!Hk+F*9$^b;K}Nvy}~_`R*QS zf~R-o0DN}U?85!V&v9BwG7m9JTBxYEm)MP?N#@rhxRqIwGu8`oiDrJrdO|LD^70Y6 z6#k9-9R6A4h_QCa4Je+IgDv1-Y!ew+htu;&_6&lEgY6$AWg4{#@ext&V70uCm64Gm~>0JeJI{*YLaxHY!jEZotV zMU}HL7v*NrQR`U*$YBAy^@RL_U!Y$-;^l*KDO{<=WpaM#c@(>IOMrS#{Z<NidO#b!$sdmRcAOeedR`CsVOHeRtI$4jKdP47vpS*{Q*v5d${0E>*e#PhwyNB`Uuh<{)OuL7SLrMEC*5dE9G~ zSjNJT=S&DA1zEx}BO4NOEfW!TWFm!?GxLUlCHyLv-P%0sA&gkcQ6fa zjvCDc9XmkhV17Lk$S(yyv3}o2@na-0UqbZJH_cE#R_;Kvu>Vhf(kG<~8`zEEQ7NKp zW8Fa~wl_hCCqo+w+AOH$IZ(@^+b|)JxOa`!t;+_ea%6G<1c8BnB)U8?74Pt$UXXzj zeV+f+b}m9@UJ&MJFRAik+5$RN3+OO}-YWf^6jN3P#0y-t>lHWJ3#(JJ-K^LghgHCT zTa+(VL}xl8<}Rs#XRi<`RrmCVdWke=Fk%2Rce-e*s9f{81PQFv>w$H(%A!xKenXYs zJCt&PIU%g%vBtbhxky1xj1>``N0a##q`+Zj6Mn6!7%Gyx^Q6fr`Vb~-)NR8UPUK&0 z;?SuHumM0!c3LlC&`;r7g`^~dS!@Gc%l|CO{~Vi7v$$E%5}^1m$q#&hHZg>Ua1|m1 zj{NA(HWAAheUh;ZE35K``E4%>7Z}Q@8ze13DkPwog?UPDM94STHA^oQ+P{QAlP`nc zvH4=u{!zY$tG*VL4Bd8HpOn$tto4V^c3`uY9u)h6*i2Wd*e=Mg2dV3sXm|Jc^yMg;V U}Q-LO`Mi!O13SuvY z1Yc2*4N?mT{$WAxl+bRHdgUOxDSkmrYDQI5iVHGlv(U(KjgJeVHr_XZXEHV}+f@$UxC~ z0u-K`X3!IZt_IK1b6Cp=u;taRva1Ix6*$i-drwu_8!siQY@`!D(wZc2>;{P9P(7() z#IF9Fwsk^EjV+xhn&aV79G0xk1p8$j5dCV23U)BH1?uUUR1?>Mvvi}D&*+L-&sAmtht)Dpu7JlLJsvn|@sP>a8kS5z9%)~$j z>-R7>jq}whVd4OXOccDxxaUSWV53(M{iRH zB_ztj;%1U9PzxZ@y2Ut$@zLix`IgCU#ouO1S7-i)5L(84#2H~WmBEEo8R&o!0<#`Lcvu+P}bOefi|2!+hP+Zzt zEGcrUDl#p+C>wh8ID=%i7UwdrL@gk`xibT-+s?Pijt-|~$^N@Z#n(Td3gFTsO~ePE zQC(Nq{tYb3#?09Pypr}eo*lK+U)Sa&WNTVpvEBdRW8A=!eBnCwHL%616Rbl2(jxiM z3{pHC10J4)M2;AMuY;d}vR7bM2a108TtY=D$i!@@DCh;b3*VJ(9laE!g~g3~??FAk zjuvs0E#jy(xf4y`wc_7~C>6RDH3+44i zMA^M0WfsK|!c@TRVnHY5%?H84az2Y5YV>8V@iWvj8xF3}7#ZHLi>kV>Nh|_#H?6`0 zN*6XgYwJRZ1Ie^iDQ>KR2nUM(SnNSp5h>Hw!@YHtV$TVevY`AfxEZnwoimp$oqvED z3AKPN_aHyGg5KcfqSY5-p#Sw-(JQxEd2MGABU21&stzOu>j?bZoQoAb{m;ioMne;2 z%YG&WF?2y$-CxPj_|*Bu zr6^Gzq-Uo$JtczOIpAT0fA1eGh0G>=UQvK5MHzET0`Gr@_`1^I&ZA|dcamC;BO>4!*ux*@~pDqq@J9dPLF3Gb_0~Z>j{BVfbSFe3LI+oGu#IYWols1@GNZ z%>48wI|`J&Kfr2^X?%W*SyVjHNWl(!l*g%|F~<52)cm)xY&i&lxg9({dRuUln4ZGH z=xr#F8h?!g{RdO$f2}mQv84HQS{cqq9l=W3-VK4}rNO47CB}<=5zLJe*hf*JHd~}3 zu|LfRia$_Oh`u8kArF|~s;?;gk{$3{4`au8Y76XPjJAWvn$M=yova=Pp3l6@=DGDD z>_xh-hk;heF35q58qH_Y5QdGlXxOV0XREyOZ~UMuN54Ud3vex_i0Is&x~<$IV;E^4 zI33M-%IZ2`3C_eekqH0Ku)c}nFd^;XV59r8PAIlP%X(M8O8!NybZUce@Ke(2=VMM4 zZ4liOJkS{pg__EAP${hwTB-n>CU&dLhtV8pN|!hZse09a)<`SR?GP)uf-S)V&G9r8 z95K2nr#50(nNnR4o_{*918S=o!e_iVTGiGrGhC8BT5S?-jp>w-t7)^_vOQq{&5hyj(~Ij9O))Z^mzu9c=PBcJ*K$>XF@h$Tac1;4s1ZYpZZ9~R0v45-o$J< z$wtq{7syDB_o1lAjbo$P<{tOaVJHq+zv0$Ie$Md{1?&8XP$I86@(2{71Jds=QanE=u0{Po-A%g||_^ zfokv8v6CE|4oRD}$vXVrr=UXLir|UiVSUuy<{&9U_&DPy&r#W(#7Li*+AA~>JeiWY zB6X7=Ivl$KUy@gig&lc$v43^~xNbzgN1<+D^#DfwpQ+PCk2f*XYDY*H3ya{~&7Mux z(-~+#+n5Iy=oVxD0pzn+^4aA|T5gqm^Gr_Uf%>2zsy>DiO?Jb%UNv7`QOd0;oUjax z=gBzKR%Gq?7*?yPL0h0`-IEEk6J~_d>>O`>EgwrHa56JAVinfsHGwG3idZ+mIb^-~ zKAQ{+AiY%biVfdk`27$RQpPf+5=79V7;LyYPMcUo-%E-<5Jc-1^r1@^3l{Uk?AmbX zHeG95@fl`1i%veFdUCiG`G8y7F3KEz(s~||-6(o>K1+jQHhJJb#Ka|osBO~@a*=KQ z03fs)F5Y1WNalI0-3OIM@bGJl)X3V$!c zioPYP{krL6F^gfcf_u^$!EO`>9$#55j-4LoiAF~`sgd zj0rftEGD$xzDV50SR(02 zUT6}6+F}>e3+8x-sU?pYzUf@@=qkm;7>>k114ik;{+~%3WRv!%WcnD;t}wG*c_zfv z+S<)2q0#AIpdzGwU)#BTv);3^c%bk6q7IXu~A)f~k9a80wwWpu`#5|dV?>$6Z|1zm`EACN zVkOA(%`7@dpCef)E?cK}C`mv+Wp4?G8R`{NptD$p!Y#&fHCk1offhVRa>5xz)QCn16SAk=9&EsQK%zIL({|3CO+);2U&tb^N#pZa>MaUc6q$x1SH=SN%Y zmmNwqW=4OUa7;V&_ku6({~$(5xwoD^d-i|t|0XE?2|alU1_<~c%J{N6Com5`h#151 zb(6Bez7#C2g@0i2MP_Ko&f2s<(d)mpyNXF3zK$WJvBrb0q88>Aro}=Tky#YIJ{$0Z zbUfzPD@3iy>T~!{nAnwOXadZSVS%E>k{V{UZ}P;j$G}2Z+NUu&VhuoQm}i5-5=Fcz zJ5V%DKJ003rFEDR`y)nt$Kel%twN4ImE#oo>3=1Ef_-MnPyg@WCr~uNMh7#Ba4%v$ z78lm-xzZww4EgHlZ%A4nb8E&YH}zpQYToQa+@N|V;af8VRs}X^ZnFOR+1ZZh3ti|r z(Qo-K{T9x6;^uUWzUV*7d5d+QFkkLRLb2^hO{My`Eyx^cz|y1jPLvjIthxsqdUli!M|Hiu;2y4|@`cC3-|!81+^cVZQ3H$g@)L-y zG0Hyi1;_S{kU-q*$3f@toU$wW_}63r)=|#v3$MEMQ&PN+pV9g}YGQzq7+Ie?(d?X4 zg~J*vH(rDisb{l79kTOb|AqE}fuq}+>5=T{75!XY(3yU2@Bq37ESw0|G|3(lg&U3KOPPN2L2ULltvgl;rgz8w z6(bN?hV|KnE%3<0M!~q9(@)_Ec-I>n9{Rwb9gmVh7oZbI5F%38TH0Op*#=s`vSF0j zx2(J5w+W6~8TGKPHMjJ{l^&PvvceE_#UpE3Tq}jsUC5P|5XB$vc?14HAas04SNwSi zUzK9RXmZEj6Jdld*1V}%GyEtyBl2mIJrY_X?D2Pp*3AM7GSZGSLJ4zG8_{3DCghwd zCZT9Z!6pHRCv>M2`NQem14U0Xl2K41nn69#U`xIvMh&h8Zd0UsXntiU*p!R5#SjzC zCUwtFYc|@t&8CWW&8A~ru}Sgg_e#GNlRp^9^AF_EWO1ic7^gy#r0Wzx2xlz60bb3U zUshdKL4=jcpx1ClcmiI`*~c!6jDXPxf}j6-%zw8ti6Qa2J`PZEi6CFffP{=8AjkwEe5+g@ji|bC4*$&W*P8ZfmD*1 z)!0AddK72fORAhB`8wC!^*&Yr;^SiOj9qLR<=X>A7fP|yi37e#*|jYx_~j*ORQAz!6B*T++=y;$SYum|%Am zhEMhoBsL%^%>^KSJpJ3YgEbe!<6Kq*3cSCsLm)oi*vR+4W$Os-Xz6*@ZwI*$$ zgOmQvSJnG)$w)M%H(o>k@w6)!VX@=~1BV93MVhGpDn4Vu2+#%zU?&CIGGECBxz@(L zWK5#t+H(>apF6~s`tiByC!F!mV>-Su{yd%IwZEib(eSLi%8pO@5iTJAZ3rVtR+KfD z+5AasKjpt!a2wJG>*j(tC?6Q)F+*3P?&l%Gr|^Pm40h;nK|3$t+$n+&F8VrL)=gFL z7n8H>5TrR5UgzOie!gt8@XBoN9MT=W+HUYGwy*^DxI7`Fs{d~Lw^Kf&bCX?{6jJEN zQOD<$Zyw5br7GW*=ag^x7%3mZA1E9l1cjh!6_|w!J=O3J&qw(dW@EW}cw#OFdAaLm zu|E1;h)IBMs@ruJ)f(5il(Q41RPy_TSLAmpd1#V{rWIJHv`VqWg7$fLZ(53)kP2tC zFqZjyN9py4W!LYW-cWp-e$EQS{t%flw6U#L9;+>!@oRia-WFpl^emIWFek4s2xt8~a%0+kc~AuXJJG!1jE|_d*A@FoAtuW1kbO;lkD{Y?QIg zc9}cg)@82L*!u*#r@^MzF7q^neb#|}hFF?P);BfwBjMFA1>3_6dbmFYxivtcZ+Djj;YM5DEBh5e=AClGL~iS}qX$Imqy zzfACLKTFW9@D&Qb+JWEwSDR_Xdo})A!8f|`ISOCpz&AMY@qgLW4;Fld8{gJn$RF## zk0qXrXZ{h5KQ8r_+U**6*>BPrBwCNwE=y&7W z`YHMy_&H8|MB|UQQP<|U@r??9;&hV!QBHh~#%~vV+k11$V(Z2 zR3P5OTJVB0hG5_$tfJ3o3P=VBM8=VS!x*~3&ZJNE9#+zt`^hA@u`+f4t_t}ezNM1I z5VX$;7BZdI!6042VgcVNU|3SNWzo)nmvF{)4s6aTVEY40`}hN!KfMI)O`=u*98vHr z2mCe`pB@X=Pou`~-p!)NL$3O*QTSH6itM8Qmim$7UE(V={t>}P+<33TH#qRQ)Gu`0 z5uc;+w+Oz*jgR*c@~1iQUvcK&_D`GsQG)ln@ezg3a^M$|^{hUjU*nJO68i6R)35NY z@CIr6k1~Jm3@7w!{CdGh+<33TH#qR0?r`Lvqw&iGU*pEd8IuyunC8GAX8YFsYx{>y z{}jP{-S~*YXF2eN&hj^Ed_P5h&`rO>x5C|{>3^Q`lc;}P`+kCA>Y ze>oceC&Aaa@$vH%{SN#`tiJ^Pf4AwMFL8@6&l}7(eK846~4iN-x~$~0xka3g7y1lKx3=0I&I9q4Bo}KH|oE6~4iN@9D(nX#6O_*SPU<2Caa82Ywmp*ZQYT zg2z$+?QaVGZhS=HvmE$M%wM;kMvdPn_;{V0euZzv4!2tV-(vl1{#R)HeS(j;@m_^* zaNwsn^Uu-vTLfR@#>X)kK>8i{%h-N({k2IXHs~Lv=y&5I3ZLb`KhFBcq_(PmjcC?Gd_>{19Qa+^flt)G#t&BX2i){4eCv@U{SQ0w6&io&b@DIb#(NdM z!GZrR+kb+7jsKJ2Yuxxaqg_z{4*cy-d>fW$2>o{n-s{Fk6h6y=zl8mdmY+tApD6hF zGB^DS-x^EOe{&1)iT1DYy%ha!yjS5H9Qd0kKbrqJ8ozrx`B&q{#~Jbf1}3VBKY`HH~k9V`eBm(3u!-aMpWz{jUOfWh#T)! z_yz}lE9uwy=V<)#Z9=~rA5T;CJMb562A)xF%)hP8rhmQQy>5I&;jLRwzQKW?y%qRG{cC(bMZX&#XZ#B4-+}+v zYmV}_N%S@J-+>nL&+EoV6h6y=f7yv|)cD5)AHUa4zrwd#N%{@SzplRujh`?0h#N2Q zH;4>%;IH2YJi`T~|JV2#g0FGo=d5rxlk;7_pqX!&c@_zjd3*#8>e{+iJ5#(NdM!GSN^2)wSp9F5;7_!>7pj(8r@ z@4&x8{w3u9ZJYl41n+g@BMP78!2kO%z-#^4sPQudAFpxKukfw^NYX!}$w|M)k5Kfx z@m_^*aNw^b{}S|T{D+&#zZy3_j(`}_@4&x@!YBCO_E($!mjv&1<0A^6<-p(0_M_#m zQRD9teEcpq{R-du_ayz_bmA*Cexl$bZoF6F8yxulC81H;Mkc(@np^w;oE;e>vq>^RGhV9}#@SjrS^i zg9Bf~@@xH*qw%*0zQ&D@GYkgwJMi0?e?tEE*z}JQyw{D7D14R!-_4nSqsAZKDD*FK z)35NY?7ktEx_bPmY10N*+6ZC8RGQrol@o~ntfPM%5|7bsH`>PF$ z%f$YhB6zPGA5r)$2fmHvPmF&weuScbp__h%Z#|f#|9sjn+^&8bEKFfiB@Lk~b_^DCjCkj5k zz)ioxx4xI8|Hk#e>-Jlr@x2uNZoF6F8yxtdPJE8WA7~=~YTWoZ<6lt!4*VXP z|3dzG-S~*YXF2eXGk3`^}$3GgsOz<^seEfu>-+}+ltB(BJ-mvMP zB6zPGA5r)$2Yx8^M?(HJzMrE14mbS@-+CZPzeV~rzCz;Dj;Gd%Y(EM+E-KPIXg7>=d5rxlk;Gg?5@LK*FHGYiXk06e1*ohM}&Si-mCBp4*YM}ezpG0(fEymuW{q!#})k!{3EPC-T$_2x9Q(4c&{5D zQTQwe{yFM@tv?$z{t>~)Z+FwL@U8oj^q(dF6ZNn0^A-JWyjS5H9C(BJN4MV`jh~_D zcjMy->t*|Q;5V@UOw|82oBk1sem6d%@L3N0I*y;T|E5vndnx*V;-+8WTlXgE|MhC% zwf$V7@gHIfPsqO;?^XB)2Y&p^z-#%-(fF4HU*pEdk1F~d_*0Z0U4LyYHvP*4?{(uN z3ZLb`FK7L0{xxd+6v4-T?51DgTi;I7e}wdF`K{3S5sH2{-mCBp4*bhbe2&I{xQ_g* zapU73EBYPyyPWv8tv3BH3Eu0*M-)EGfxn6Jqvf|zU_9lKxa@{uLTO zQScEr-mCBp4txviU-K_V<3}m_-T3%Nihc)vJNv&x``=>IfBY5l&+EoV6h6y=zuK99 zqsFfneEc>y{R-dOnxuaT^`Dl%3XNYT_=p?tRrm%6et@(5IT}Aj@HK9H{9lTG2R{Er z{19QYeva`3-V;}5JQ|KdM#)35NYdy@3uME+_0RiW{Z2|nV+ zdlkOHfxrC)NBMI!{zrnZapU9MMFINHfj`Xh>-^g`+w_kSyw{D7D14R!|GX35sPXM< zg#I78=~wvH-AVeFJ%{|Y{;JUUje?K3@m_^*aNw_S;&U|qKEc5#~}R<{I5yB)*o#fZTjyLyw{D7D14R!zn1c+<)=~OCkj6P z12_E&-?}qNf1We{3XSij=y&723g6(sU+&C5N8@*|CjV;O_;^&&@4(Oe6Uv_$|1{h5 zKPGsu8y`{lEC>GLXMs=DzsAoOe0;W>euZy+D@p&A)c?BwsL=S!1RrtZy$avpz`w}) z*ZJpYd@n`68z1Mk7N~y*{^6&9*YS02O*Z|zUnc*&ZhS=HvmE$p+K<|Q(x~x|2|oUP z(y!y=5bu^TVuX&5n5Fhsq zJCi=;&#;ickW3u$aVL=ozP%ma(#eh`G<}N5WOj1ang6pXTqNKd1)PkJJD{*%cVHhU zgV?|r|E|%;1)Y;b+wt!Te&Wq!);lTR+CHk$`1OKsyVWHh6$-!FfsawXbpPnp_=g1F z=*H(Le3b*gg7Tr;XZ$ZV^$K6%#KxBqTh{gRQMBbB1;??+D6#Z^|j>19};}qEpGZ1ezgNXlJmm@?eV== zl{j{M{6ZTgk`Rk-nO+-M2(JMg<{pC;(n_>D^b-S|d@Khct; z|1Qq2==NKq@%JhDzsXI%!moDVZ$1n>527Idy&C_B;2Yie9EGoP;J@Z9e|()y|9rt$ zxbbb=H3#%N@MTXTe{CN{H2yM0zZ>7E@F%t==})JB3uH?9Yc#%_qW`;Y`W1e)1OFt) zms)%ly37zcm_f)Bhbe{R+R@fp4LIAwj>!+w{BfISOCpz^|u&N%KFx)~0{E zqTh{gdr#5tz^|cwn4n+dA5-)TUfVZV51Mh=AZ_2&OHxJoctHE6K*j&R3;Sll61~J) z;{SL51{rXH2^b%Fjq(3>CVhS`nXH*fCOPbz0jiJ>;#=A`*n+9gADD)$h8(0zI7`5H z3OH%sw4(sX=Q;=W4vl5}{~DV=qXg|uqV4#91-^93YuE>SuwZobmA{ zMPx40xb3${gN@L-(+2l{O2GSPBse5%H)km9%MNVDg!}xvF)bzf7QVxl^ngsz zkm3X+cB%e$8@?sC)!OKJC>_tgsw}{^iM=P79ow+dn&s!o#q;yAceVKnk1FRs?l_LK zs+&Jd!!ZgEnY%tP^FP7vT3Pd(VmRINOjhOB&G6KMmD7++_?jc!>c6=iXES26znOTX z&w<^vmHQT92aA2tYOH2PIo45SSy!^D**DVvNYfjdEycy5R9i+j$p#bF#!cMgfUI&B zeWWV76#L@;SZtoph=Om7O_73s(=IsLx4YmYdB!BRbHWnqV^)tu+3TaToP~dYjYU(k z6gTy1z5ar=6auW=kM>S(eIU%_{#7ri{cq92xqsD8)-yJ$YT<9#{>3SB2jzKf-ah_v zw>Rzp9KItJ=cr@F{GyTE80y>HBLNG*Gs;5Uu-nxp$Zy3j$fgDb3r-n{^B=y=1_0Tg zn2q(zJxy+1J8nMbBIv+b<iN!kopxTzn@Dyhn zebrv~xX$J^x46RfNM1jsuE+EG6{up z0gK{8J%vj;a16|X@0#J>NZ@@Wkd9q~ig%hJTf&xZrr^mTIh~(C&I*h**YyVy2p<{4 zL!H4G?p4tFTPqB0r(|CC2!j08thPm;9j7PS+qFR!<^Qyj|3OOrSE3k{|0Vo|{L3%) zP^;%XWuCH5dBnEYko`<@_a+{*NU7i<4I=+5(GvvsQ2u|Wz|8L{4Q8ZA> zKeYygPvvJP8}_C8vDLOen7$pn7)*Z2X~#1-?L24;&$M+8>-);HRP~Gy0C_#Vma>j~5Avj7&D-0LK2`BeI_vD7qOJ>Gkt_jNTpnE>tBj9q^gzFB9i; z7xo`bL|-5-#YLt7y5q~yO-w(!imfWp-hJUYBd^CMFISe5HB}HO7S^4VsE6@nN4>3S={%>$y!yS zji^+2!U+ z4`;0Sx~N;BukC)Na)rr3s@&;UQRQOv(j(R#^7R(!x0#L_nWYr389c4zAJgw0B3)5* zQU4{U)M+nnX1xH?G_#u2b%I%tc(92(j*&a7@T<8)l)i4VugRBHxVD+~Q}X30-19lV zm*>!heBOfluJ|?4=GRp4>)T^g_w;_pkXk#3N$^ROeJh}1##ES2w%s_POFDPMScDoBrp0lER^UE2uTuODUfud;XI`0pST}Qg%9sqEj$&5JW*FoTW0p?4I$B%)L^Pk# zXyYzh+0mCyCkCyF-c|3veoU0~<|Q1zE;7UTljxrU9oXOYRlMg(2E8!M$~5X4`FUvS zcrz7;8TMZqLjQG%30a{TzpqAN^PYhQ248qZ_m!a4fA@iXyxgkWS+_ zi_vKm)=Ovel6n-m8;>r+BZo<*wjbodLOgU~q_yIybHskET4(IaRhHxcbpK?qs(}EJ5B=bUeW;zEG4=E zdDZ_fCGEwM{F^isk_@;whclB&%rFf0Tn~8h=V^2z^DRo;bgD`zv;CNn~xSnVa zlxy?G;~BVj6{@`%)gDpR9L+$7>bqse z+HK`HEo;RrsP6K793%a@@6>)@^Pw~!Xf7YV-Jkk4$0oBV7}Nc-(Janiw>1_xV&3WCo0X>t8Wj zK7PS3!O@X?fy8p`94%WcR0o;WMZtJpSE)$wqn1FN-|_udN$rs zY$YF7`82#`{lK(0mQ7%C`CG0IXBGSMcY^+OU-N0uzY}$yDs_%cu5j>0bcU3obDgu} zw0@51!YCreI{f*nR{o=UKKFdAgVK*dKSPmHIN5lf!Y?f`Dq;h^!x!xPIre>%eNTnV z_dD(TmG=EX{4zbE8|fXj-+S!$r|o;Pm-tMw1^E@&_u2M+v3)-h_q5x_lVj*Rig_Ps zhA-&-)2vTZ-b3l**I0`_Wi~#VZr_yhW(L2&c=}5^Y)sBGmZYYTOFX8I&*_HB+I``J0Jf9Ka;~i&ca7)&l$~ z4eq4f`n0@kivEtru?yYXY`R}ynl{}{>RRaDiEGl$_d@smVtJPbx3iV{nxmk57cN2f znQoQWf$o{TCzl7`fTa(*x0l!LzI(h+%s1F>pnF#d%~8<(&$8ifmi3HH#%W)ZZMv^S z+u30}_&pMQ1O8xqb{i>f5sIznwg_b;@_QhOzd1txPU~lQWj%mDIHd~1O;3uo6mQ`F zcCzPk&MzS#*YpxlHQ)fAk#MvPn zq6{)m&^ijK0gJix5ZjfpW`lebI6TbkiE{(`dw!k)f7ecQZxTbxbPU$Akl` z7Rs{E<+xyL*~jPT3Yu6SyoMduLTvcnqvz^}CUTtiTW}vXN>0NBHMD3R(;+^It;)+x z7=d7V!v0&k-Nr)?3Ia&c3&@rFzznaJ+!J8xM+bhP#)mU5ItCjj_1mx?k(N+_BfD|= z0+I<7E&P^kpPSe}4)ZIEGOfQhQCe!HPaqqm^#`YVjI|AUuK+YVNN0Af)C-z$FN|n% zsnZn)=Zy~(jgUm)lu`pl9Q-(vGYBaxcyLic>_X&&C+e;BedZTlR6w22PplJofZgmV zX(A<%G}bxfdl(YHQ`QmJq1vWR;Qd)^IK4R#`Z=({!eY|ij zTfevztO#d3xKKt7);tUm(rQ0vh#+T=TDLyR%IGx0lpz9l{T>A83YNt^bD$Hd7a z&=h#qt@3(f&E1*Vm<&nt1&^BfJJ8YHJpt!`{)Jreh8g=Wadt1B{fku2{AaZT=0EAFfV)>I23S6Y@Bvi;bya zU-sud-^9aZzBwCAy%Ns$qdZqPJORh=-kWNyx!jL&?N#CQlKS$xrn}3a+KbBvZ7T`3 z2M*sW+N{~!bJ#!pEexegPHtRM9jQ0rEW7?2 z)_6{C>{f*_%;??qvB6U2|FNLP{dD*K$HJ~PQxEV2MphI^50C8y!V5rnH#gxEJEi5L z8cz@&7s6j9;lTRPfsyc;HsJ~GTF1T*r|1#7X_VA5%uQMIG*Pk;XlBHG?#X$n;Urp#m4hE`H$E2>Qb(29oNh4YpALN z7@)-Z23}t>apj}w#BwqLHYvO|fxq92F0KbU@v7e7MX&k$qlejkd2Iv`9Gs#tNGHxw zPT#;=NM}QD=H=_aKnbU)wVMzdUvoRs*CrAUC6M&L)dqS!1_cB+eT z<;b8*Baw7?f`>K6!!u1d*1Guto`dsA?&*6~c*uEIhlgBH9>C~~dHG7@aScAG!UTNy9*l}X%udtr@5M+- zte?QaR2+PQ3VT$TZWhL?uqP;NvRzgo%@Sz1RbYh5LM3wpPM}18waZxc15u)Hnfb?H z%bjH|7-Q}5q4P8RJM0|%IEf_{6NC1d>V_@65y?M(%LOH}6=g;42hOa&=V+6XqeTCb6Flr3{w({T}->CzrsLTDs-!@aB4<5~9 zJ(`7|RA-bI?vGs~)5&Be>S?t&##jM!pgt_06oi|jf}b2Lazug=hy58GF_YBZYtgEW|> zo7sLg!D8|U_j7*6`xksgrFO42>dj@&o3G*q z-oNnBmk?u&V*Z7`W}Ig7>pRm@N)Wb&iPv2GvC1C%45urU;;QCidU>E*Gmgzer#*Ku zomoTAzL}P?ZaBWgzOg!u8xv`uaOsjjG0LC7zexNgz@vq+;{x-+2S3ggNP51)KkvF* zQ=YE}ad3shcgjmSUtk`zZ~=P>OlJGY^(i;bg&g_P~ zQK|egfP=2p3{WL()^%V8DZ){8!lZ+s$a-WITbBOVIu8y%MS$W@TZ3KV=pC?kU8Q^D z4P%X&#j*8#Tnr4nKa6oQ3k&eK-@?IS9|g|z#Q_<(uP(-cf;bH%(1f#217|L%&cNk( z-cRNIfQ4E3+h3ke=hN|+Z<^8$52Fvo?N;>_dg|w2YOBXm6K#?SW)Qt1|54$R*{=xYyp5}-t zGh~tpfx;P_S3nYAWhbAAz*{doWV0gn#{{wJ{E3UHKs(8>oku;=@5lMoGktN`Dk4dE z3<^x*jDM`mNQtF`9FED7;>pjAx+hr`3_F2-w!dH9_4iD_zod+FK2^&1b^Rqi98ise z(Nqy&Xk^@s59_-w!@z1Bkk%>xv0bN%_!5|^>v$Nmqus5=1{2nZUw?-4i>>%YTL0WJ z7y9GKBCS8Hn}4b$3(;ZcwmijR+9wYy`{X<_dFc@`$6=owWS(LB7xo1Wc>d!+=(POa zdl3FTXqBVXDo3qH*E7E#W85Y!+4hg4H^8GuQ@ zg3%MROlG%QKnc^xPCuFd;so3-^wQ0wWs{YS$>Vh+m{wACeFu9)Qa@O2jh}T`YcAAG zyyP}8@ed1aCeEW0UStidSDZvAhubLn`vf~h{(1hmL%+J@zi(3hl|r>vKu@p3xX4+c z6$q-gu3};G6NULLj3sNZE=;EN;DdIJy3Zf~Dbwmy1_UUkR{a3=17A%Q&eu7eR*kTj zi~&`c(HAX_*63944c|eLI7Q&#(X$Isq{t&q^^PQl;b{cUY}BVt0#8R*pZk=(nAP@x zUFPUDUFm<-zAIJx9!X)yr8MO-{HOq#p#JaXe(3iebO_3rSCpVg`)xDs&m}x$jyDUZ z7aI>SVwGdzhlQF)^HxbJ@HL03c4cA^M*UENZ0|5Ve(aa#Jc!zQq7nG7gp4@!@tV#Z1L? zrh-r}*e`8-k0XS8F{@epXpZwE|8_({L|Mjp;PL}Mfj~qjLs*fG&;`E$aEV9)kS+s& zmH3rw)KM;!?noLaQ|HL=dE3nxK5wq-EaGFsokaZmTEyueYC-!^Dqc{@2pM?ez{;|zs4?g_fd(=^FH?6U&ZOv4MKH2?4`vpc_9PGb;n%!c`kqP=}7rqEs#VB#C}QYH(vseNeq4;dQ{<%UV)t+Yaq$})#68X6d@~- zgk5P%H?uBf)>e3mB*|mzwL_3f?fvSMrqlby_LnT*S_wj?fBpWv>EuWnDnKeq4Qf#l zSLH*a;QaFiW$GlZ8_|e&8_O4>Sb?J3 zE~YOG@$%DinVtwp-8S)7<%)ifKg(K6zQG}Pi5rSiHsqjcAq-yY*uUA{m2aLxwUcGT zxQ>jmTKO{E=i|8?7GV4j^+exZ$~vwip`(l*eeF@hfZ+f>ED@)!FSyZ%F(@WsRIfQS zlU8&3!=H7;3KPj!Bl&e)5unsB5~z~|m<6Hxf74(^UrulI8+z)N8`tEo3Hr+ ziEI#Jf)iooXWV*$-M>X9vTLhV6FuRKxi7PSMrAgVpN8+swWdFfftJlEKeA%0B8d;GO22U-cB0I#lQRnUd?B*+_Q)WQFHhU{<-zTJb9kr--(y);$yfi z%3bRR*wEoVQn=%%vJ4bYv_fw0 zKya|-mzrR2wDD&0$MXIJUb6+nT-X^i7-~5ZgLQgMFv(96F!6AL)NUyj9K*5C^s1r9Xb=5x%@-Ffrq##uy9DCTGouW6W} zJIDJ&CB>N3o&U!eCWVt(Fy7Mo7>b|+O@31d2Q%+8n`3G9g$InlVwA4_)J9sD)iYtI z!PmwJwCPYO2tq*siWgk|IxF`4TWM_4zbDZr4_xSu>G;=^R5fzyxhz|NlMX8vuvkDs zP?&be!-Yfex~-TG%Ic#ujqSVzvEv!5XCeCszt<^y3u=qgC54y$5!?p+>sJR#9Rm3$9BZN!MnAIA#kXyVjQJg zV1~Yh=)HC`^*wt!>+GjfES8z6{0h=4EN~+6@_3!tnoP)oam1Fo( zEuK8K!@WAottJD?rRJfQofIFYdwR8g9m)U*VwrTEHs{H$NIw;=Fes%Wu7tzIVP6g z?(||ff4ROHW?bs6v;&!RdGJGDaF2D~1C%vV!01v_B_*(C2dt!$Fs{+J4oJ{)0szT* z3R*}>4(g`{ia;bLx=WAQlG0)O=Xky@n9VK>yvuwAeMyQnF|D2cqsBj>Jn$77)-}(l zlBs?UHFp)q^els;_v?-9+~?~W%OB!Lo&66G21o=?c2!>8)apLQnlz@Q+zzaJoNsDX zpr#XYn2lUVtwxK?7*AtNeBUMxQm-3E6#)_SQ(nVnD6n!8laegz>E+&1ZP2a$3A8$umQy5|uTB*Db`#N^P z_mWB5dK%jl-0L$?{3#wXq5vWd2X;7P?R04(v#v!Gxmf66yC^|@COCsWGs8pMJ@yU7 z8PX5V-1en&IDWVYpSbPp=qBz$9O;EMJ=f(OsvWWD<55Ye$ zChN%+gkg|WKbq82a?d$7+$@osN2S3y%pRleCB6tmP#&R#yhxcW=m@gAU zLvZ-K9pBS-BiD>&VvYc-cBlrxNNDqZI(~!g|8{xK^N6exXcoS1 zEZ@x!5ceONmYI$`CWNXoGm*{s&=3@f84O4eQT2UPqfbjfD1I4Z(Z}kJgcy zR_0^&B-wYqAcLP`6TXsl!K`By`LJs8ms5``O&;YXKBaAiW_x`+*@(V`+e`O_a zLtYEy9?LUOCJfEk214_oV=&BPC4~^86V5QdYkO?DkRZ6%Lbww z{KX)m~Gtshglg8GN~5Ci#D^73;^@5+Cm z&fih~mGmE={Pptt#pT~i8&JiES+8Mm0T0Sqgtksv){6@*iO}SMC&NTW3ijEIN60_@7BF`ifxsr)Iiu>BMK+&80sM@15XMRi7 zr&QG}kClV(W4C_}0gN9(`3L9(Sb9Iij%e+wr3Qm{t2PoZ4B&hD?>b$$CtX%$ABCL^sho(0ds)yA)@#c ze*F;179@Z$o9+y?2*!Pdn~VpFAzkI6yp2%bnAGBTp=ZSDr2IpHsYt3kboXn(f8Y<_ zjF9Vt)xG?o$E8^@rJFN&tsl~LOVgZ9^{OBiE@v`t8*mRP_XN$_xLdN=N~g5_T&u{HL+}S{5L5>sE0584+?O`LHDUsj(toiq~o^ z>(7h)RtQ~re!D+B0jn?%BPP5ZfD!zXfUIn;uLn8|hvh zp4mUenb=5qIE@dlWoi;mJsuC48WE}0!*sb>eN^?V9~KhJkB?`lTau;i2Uc6%26+K5 zqkR9k{k^pBXd9Ua@|XVw7rJz>2vwylNHIy3*zy*~LzYe+?z3qnBDESWpjz<-CiIiP z5bY4}jJhk4K2`fpB2a7M8caPv1iP>);ocY#ABDruvL;cH>0ncM)5(Ew|6^A}8KO$q z5SRcPLVfh#=&$@ih%)YIe=seCp+%pNY|csKnJyBEzQ{fg89pp2d+OmXQ%f|`;MayK z_gbns93;)6AwyLX-fY0U2A5avqMn7@Berna`v9tGw-Z5Yu2opSu;Z~ z*9-AG0%976{AE-HCn)bw_Qd%mWBY_M(`r*uox>?se(JF& zw*Lz~uKGJt58d)w-WP*uF`Kt(H;!hx>)l;ZVg5a+#b~w-{sZG$k^{M5G&I3-wG6@) z;rWDpb;832bxpN_%3P&Y&4zX5FkPmMHSb@d@zV2!8&2v?ro$#BVSR2PpR8RnZ7t1| zHT2M3ipXB!J6k*cmr;4`Bp-j}^(y$H7oFvFECO#dC$c9*kwG-i6g`AOsHOFGE~<7tH>6sWgq* z5(@`H#1tT=M|j2uTBWF3=3cPNZ10bbq$N^U%)5fg29y0UKt++?t_P0N%2*%|LB>|lm1MdN5J-Qd}2?qJKXTMt}rvF4N}j2 z=rZ^}KaAW8wu-rJe!vSp-rYk!evTgx#K&z`<`nEPn-JM6oQn+^dwUh^0|zUn1)y+_ zA{V@Lh4V4q5{Z`a>{YNETTokh>4G4$PxyMM^6>R()CHQ|Uazj1_1$_ zX#=!Tf_DA4L8J+cX~Zgbm()zRZpRL6Ulv+j&mS4aD?RAh5`(HOChVwdlz(WUR2xw zQQ7GF3wGud95?@^r%O1wDI^!({Gh-1cg?zDApb0UsoBq#CA|RcPqwc>h(5|a!wo(N zhKB~(#z+oY1Nqmf4{|)UvsgQ3NPJ>+zIaRtVjf`>dq|WJ&V^zl7D%eq6 zv#xiUpnd)qpgG|y%85=mmqK<9HqKBdP*j9|a{^9lo|gC-FA#;e% zu{i)HVA#tMZm*0MX@UIe2TQOiI4!NX0v=+gAMN~6KhziI2QjwgtXG(SqVs13o9q-? zov}UXMHk55OYU;$f%(Gv^b0u)4uqI3`)0UxtqNAz7M!+mDs#n@ht8wXbrIfv-aBV| zk~k%oVg~I*zlaUG@Iw^;o%4ejM?{ii-{=>F*`RR=oFhnO+H_6@q%yo=;LXYPx)dD6 zMkKV9VBqcjm9Y&tH7C$@OHl;dJ~y`ct<83N&Nm`|l7dIp4+jA&@IS80(p3D-4s<)3 zUFDdXPaMa`6p}NU;rRAXU`{0IEZ7k1vl7rcp-U3?+)Q5sm=M0n&O$n$*>xUB|w!Rwizv%oP8IJk^-6Ju_kNQbr{iKt7s3})J{|Mwy?5o2 zZCnmcGbqX_SX~5rXzWRNI{h3hcNlBSWKaqwvQmpUBlYN|(wtt&L?fx*my?;ww7AE? zid{{VX*{qHO#An3WijmvI?`?Hb1KthTF7+BJ%w{3>C}HXaO|)7H=UCBm;9@l*N=P) z%)FSNQ=*To9*$zah5vEyrs7X9&~0+=|@;oMYTh1I&XtO|P; zMuzIw`b>}efi=rNE<~0I8Z=FVp6`U9UwfUdZikL2yKakNM|<nBXl%yU-aXL~jmj2Hp6S`0~u2Qi<~~l6rl;1L`%P zL9;aINd#eiw#TW}W=33hN{tnx>o23CRR6QDD%C$1264Px76cX2Kbz6oVQ(<^l8X@E z8!4RNAjG#nItl48uapiqHCWgsCGcjCdb4uU8k-@)buQd#(}6)^chNxGea7Pe8&fi> zU?;^Ynj7hc17x3UKawdti0cR*R0F*b*%=!2CE0Q`+p)mhdaWhA_$*yP{-4wL{Q0NS z2gPt&`sVR_u;TC2Hw(6{kG>^1AOVAiEE3Zk#DKnMG^iniQlj*QuPKwhkG1~LYmcNk z!9S=j)I%@@6_|(hG6*I;R7NEQLm3e9`y>Helmatm;1Qd+#n`Ha2Fe+py{)+r6)4Yf z0vsk~)wN4X1QQ5+4Bwezt`A|for=%RU2T+KEi@8UZ_Z(me9E^g^@G4eD@im8AX`!6 zS7Xr+L=U|H6kZS%q8Dq>2AmgS&O(r?BlGBRM|2J67T_rnt=~gRe-`QQNcvG>UAfkW zgE68?I5{tu^$0GBSwjN{=RZG$w)QZ6*HBp}_w;Tz_=49$;wZK|)xi!+rt}v$y z{lPH&Q@Q7PAQqIyfFY!>Bk02}C3-f9eLZnE`vF!4P-*J*AmG^+5cR}W+-Ktmi24#v zqn>P0R6RdR*QnZ;fkke8d++qJR&hsNZTS>+9x3`e_RF|2X!{^^BP=cd*U~<1Mcf>G6?nV2GTSf&h0Y>iM=IC>=W}QYx=qO@VH<>e zz&+0knxwaR)VH*A zzJ8pG^1WAA1=`A2x0C2^PAgv>>6GqV2Q)-|yd( z$B&gheMS-5H0qB#{f3|$t}?nKUf4a$idBeRJme!V;~UXmF@wbl95m|gGTRe}6VH1` zkA{d(!vn=YVVO3aflvu+7l#bOqUso- zEmSX%UlCzBnCJ$`M7mC%ruF zo7!X(ctngG6av~dH;CzUC{6|>>2nhLxyevF7_#RSc5mIQ5QFZ;Te*;*o>Oi$&c8mv z79h7Kw1OHnYvJ({IXjfuT*BdE!T!AG76_ipw_vIb5kgD)Nzj_NWpq@a1siviW#a`l&~ug5C*gpF`RuK zq-T8=+dBIg+)ptF$Pd?2S+s-bXRh|FQt1)38>$IMJ~Nw1!}0N&TW{uerv@ErD**Kw zGy*}T#WU)GVb%{mMNnnDO&ZgSZ=&CY`=|QjA@Vr1FYC|xcg(*GCAYB|gmO0&(h=>A zw;4GfxUh&b-%t)E+vNalR(8QxaEE#HVtSg;Ls^_sYVZ*CYs4AZ%Of2BKySEWa5W${ zXMYp?Y0xQ@6=(dJhE)2_W&`l`!E6q#RYYike+X3eVu29l3P+4ob&~>IA8!uh4pTBg zOfB4xXzWj`XujoO1=0|X|EyQMlsHwpVrgB-9p(w<56rSP>8-v(4k}_m*No zDLp=Y1gjaQ7E+a#Df&NNaVp2T|Je$V@;9GM^ZO@;lUJROqKZ8jPQLu-YVw?_O&zCK za1-$pId&8A_F%aET)YG`4&x~Zj4FFj9pwu!TMt-gkD$F@BS6fSY-<9$%b!x-=W&MxK0BRC-hx)%d)V9JE zT8PlDapo1=n!?&kK<#0Z`t*<8#JH&^YqDtRk(Y^>B8b@4m6lc%S>{2N`QX!EXwVc6 zWRcD?(0&n@v3tQhmIZsvSB@QlvfzY*Qr1Dpb-!ezlGN_9RrnwQ$Z|13wJo-8eux+Tg7bKG;c61$>&hKB1 zV42_NnPomYl|FhjfXAt%&(0t7iVB>jgvrc|o-o=L@QcEU*zPd_{o!1`fndm`48;y` z(0Rx7Vp zMUqE*N)f{QA)Wvk16t=bq0=dzI_A}rjWQVnvhosxh1obXrDrhk;HpUZHXHTW3u`r^ zeCSs(Kr!|D$Lg5kgcv4>e4Xj19TzpDF+4Txn26IUxozwhn_J`^A3saKAZHY!1zLEE zG$*%bl65e6L~gT^U}NlV94y2)p|uHX%%*LqSJt8U$BU?Lk;bvHbl!ZI^24r;tviQv zkya6K8uBU@*|0;;;;p8;I1M@r*$g5iKTa_FxQ_r@A|diD%aAVkO9cOw|2zD>N3^Lb zZ_UoF9{$Mx4gRHm`eDmj*`!1c6Z(nD?d}D}lhQWTQHzf{iSBQhFeK zNs-6OqT7WD|IY(H_*z;&okNzU%!o5bmd9!)Wpv1aM3zT&63!HY*7i210fg$_p6~Dr z8(rDwJJ=czMqv8CA39Nehhidv6 zumG?>^&OVII{Zs>xOHQB+EmF7&ZWA35l#ONhANt#U&14n;8Eb$C1ngaGm6E(+e`01 z|AG7(#fCh=^pN^a$EZutz{I(X*qkM@WKd zO`%ggn!7#=6SQ|Y)-$%e#W%t^>6Gz;E-rAGYK-gEN*3t;0l~8c>dUA z90)NGB`(+z=|$MqC;~Q%6pn)Z&_hOV=sZ6~zge<_Jz`%f-5|TfEE-RUJ0R<*%o~BA zno!bpW^9`j&x7DDP>Zr~RI29aGGoE;A;yrt#9eq2HcHuz*9&pSpSBNL3{hsVm7^xO zYV=KyShkS;$Pp28HGtQIr2aBX>0dAd1hC`g1U5!%SP&LF!7dP-Lw1&>d2jP!MxJu~ z*ZpJu{c*#{dfBXkopNvUZa8e4ZB3rw&q27_>-eY>+P_*F;VbHp0bmYOp+JM7->}i_ zZmeA3;<$q*Nj}AiY!WHo%AIqO3d}HL%jB*E1ZA6o+xGCWBi0RB6C*K2!77Jq2aL6o zbn|~kNE9>{6jj)f+#4QworGsW7_hkxS+vHfbV}DIYd6OaP?fsJN&@$Co>4-wA$Q(AJTpW;q z)mx0^i>ZjRo59hF(vxv~@?|1lIT@So&cxw$sPmkH&8C+u4Owun#Fkmi)+_FCuece< z?rxQnvGZh>Vi?YlZ|b$*^WpBc;pD2=(m$&A)jN@QtqxrC!S`-N~9XFQjWQ)P_ zT@PXLD87mEnm{ShHjDlvm~m{<+f;(Xp#*bP32L|487G2P#H9+N2qvdm0Hf1zq$2{t=Y zjNRU4_LJmox_Luf>fMkb+F5Fqb~wEb#+-XXDVK_9<>N{E*YTxnk3wwE2&(;^lkxtT zoE+T5(4(;8_8x`9wkPy19JoCRC;X2&7qye!qp(`S;exURC);$BZE*r-@jG6>v)y!(^gNv#*FR!2 zX^1_45A1+F4I!)y&lyKdD#T`P6 z?E3=w#j1+kzgwgR3YGxWzBrm3$bXREKov+D^e&PHDj^s9(|2jR?TeGN#k;F&Jxs3U zH{#?Pws{~SkJzTo9FE^#7g0CcD6xNH^Kt+t_%*Xs#Y2x(+bb{ukE7d3rNoRQ?K$GG z6yhWv1fet5bYL%wXxBbAZVY%=#~Bz4I{+ z#{7(Ywl15miI83tX|SFL!wfQxjK*#>O&jSOraY*n!LR6fF?F)bat z$caj%U&>_7l%}k58RwIL2{`mX1I%XR%!FC^K9vtaJYd11nz1uxp$5$rGOf%{xoIjQoyT+dX4J*C?ToOIjG0x)1c6;ZP%wITfmd50-)o~3&v zLRQ)@*mfM3D1DL=GPxV!W`g)qVgoHd;(2~Ou+Nfym^=tq&*L_~+{uaMz>HRiDk9^+ zF6S3rGjPwj@kkLmRy}Y}18S+zF$`$1u!?rk?<9_Gsu;MZEollJt1!L^{+8#=vtBb2 zEUXfNd|}@m(F5;Rjlc`>SVek!xUdyf;dm4}7SBXB?7FHE)TVtYtcnuZu?zi#F^HOq z%tXEbUST{h94!y;27I&|5m-%*40GovAU=?vju~r`DzSlgYez65$37~Q!G*1;9chNJ z_?WQkYDel~?)iA7K)%5#c;2^|^~V%Lv&qRzK{A4E{bD~F-enTS9}--@5&{Bw^9OtW zm6Ze2wfp@k5Y;(0|QHHM{xJU@v2e&71oZN zOaGJOQWVQ)1STV>dLVyDOlmHqWNaJVY~24RODXx%Mo=mdH>l}On46r{H4Q6pt_W7S z*j8fBzy~}dzeC5Z*aW_PY}sWvO(kjvmO$CJ^^e-95xD17NJhZ=uP5eV`Ar+c;XqQk z!+{|yv7~B44j}~6ZOf!b$=C#}0wkz{1REo`a~S#Ne@j8Z*Nj8bDkB0dSLT(USj84E zavlOUBA~L!W~32bH;nUQ19)9E&c?~?zF#DR;X81G|H*RL$qb5I`2+O)^_L&T%C5+A z6-D5UpmC%G|FdDU`pL2BEjcxjY&+6l$@II5BK1L7QXqdLoyMbt)kIEL;u;!1b>|~s zdz8Af@VYfhT^+oxcGOko_01Un!;;VIg9tLk<3mdX?26{o7_Xm2^GU+%`{NRXgGIUs zQi@HbS~4i8i9JG4k=XZp0f!IV<#W%q(3FsW_;1g^F*OXVgZTkQ%@~EK;$0O<@+lI_ zp}4AV?FgJ@Vh(~uxcV^vOlDR(9W}PO9ZrAd-mjo*u%?Bz)GX8mp6)1`ntAwPsKBu} z54S8 zq7OFWbFV9RYKq;h)kmfEl$j?f=*PngHOj2_@v>a_7eZP(C3hj6M$+zqC_DQZ0>`Z& zWdfsq%!wT&i06rcC%ffKSFdV@n9uly7|9u1$2S{Owtg)`k(S+Up2B82pv_oFU>?OD zKoi_0%4-IKB=C$t{wR^+Q<@sf-^rFAvzn(V|37T`b74FEUzGopVwfYJsZcCnfibWd z?rG3cLSa6%Up{KT>?`gMU$b^3F(zt;n?=K6UgNf-KE7b)DakOF>T71;8yO$wul)Zt zWKPpH5^p7oSy&*-14Uel*OF~=DwBGqq1M9Qk>6^}0SQAz8u_`(C6zaL!Ed zj&r*YPIRVfJvwiC8JxHtVLRYk#tf|g<_qmllRMhoXg;?ptYRyTIEKV*2Q2-sXVcefYb7Oom_OkrU<)?8RCDa*P zuXqJDA#9LwFnX+gS`TJGs8bvlgqtD?>T(_xC|uH^9|O~=TImYzHY?*ho-fZGHbt0) z&W3Z2%ot{ej@B7pKRetPfXB;?gRRE=89KIRG4CwEW8HD}@wXoK+=MP7AnxC8i~v9$ z6qG$xM%R|JH!B1SFTmDh!NSE3+7&EACQv6MF}EFBn~ITEsen_9Q_CyPS%9fCwnpR% z{MH?pjK4y*lp?}Hosrjx4ya|}*WlLcD6SZWrJy0{{jY@_oVV8}sOfF3(6B;0F<;aY zU!GM*q_hE39r@mu>d^URr5eptKh>60d%0s~l|R+;GE;SCswGJESJGL##a~M2s6V`E z4{r{h^Y4L~JP020nZo(&q+nS7#9z}_{9kP;7!U267%8ARI^zRt z&c%O=cTV4AevSvU-(B>>2*=k!W@gKG$|o*nqe(ts)j&A0uI9Bu^6Kd2wS;-md-Wwe znEN%SO*nzaFa%#t%F4LT*GN(>9Cs_2% zX<`kR({#=0{aK{%884?bco+KK#slp~dV_@H+cB^G-zt4_CTTcvL8{B^0?liSg*FfeK@aI+E%j*iwDnvB2>E(peJ#hsY>VKo-&!u=5{#=L$ z)<0c3Q2)rx?BAnQ;akemKbyL|F3`LhOJ0M$yy`J8@}~wK%qyDHk2%QcS(}sXFh`x| za@rRsrFu4>rK;iO^l!XNP7mV2+^9J%U`|8*Ic0b`J*7EKl$_RXaP*B~POSf%@xc1m zyaqC_fIqMGwo45sUZHuF%wVY|czGScyOio@JeY0b!Qs`~wdb6~`M$+N|9pK#)(1O5 zH=$!zFH`eeMQO^eo;<4v)X=2XXPs{vL24O96* zU+k^lp?~g(309n{SEsODQ7}BQ+_aN8q6|}@y}st5=Na3k{J@orRQBZflKTn6@x98^ zXa6%3ACK92jF~W67U!m%v=p5FQ36k!k~P7MuL5(Phlq47tT?aBw4-sK#>I`U*DX9N zF14hj%d}&0sc~^*aJk%6e1iGjErHPMco@;OpyGsJ$@<7UU8b#s8D66OGty)FD{g!b ztTf`w>G)Dk9zR;O%e39NW;l*t13;4JgfGKEeXGU|;=S;Q>lU6C_l3lDolrg)T3^2S zpR{{3wv0J%#QKU8Ktjp-Vljm?wv2~ssT{-L7TPw!X@c@WU5cf}2cRc#54OSS8S);o zzZ3CWy6-Y0&c;W6Q>u7$nS!A8qm$Eq`$Y)%hJ4AwJ1_4 zSh7l(z9}&0U*Jw)=I8voq;qevZ${wC(oaWM=FjfYwSu?~VCG`P7j%9!vX0{`Mtm`* ze@?gyIJbIoc3@^cqPqr`nhO zOveQg4&gzzFu96v5-xu}?ws|!W(8A8gEe3@c#L7gNNXTLkZ?aSbsbmtx0%+_$FuP$ zw~lW!XGB8-^0b2eY~PPXoYHKcUnbi<`v4wpsqn0ZsapDE1pP$oM-ZIii>?Aor5R!P+rm6o7jHOKaRQo7i;M%~ z-$E8>O7MT&HvVcBAFU0JE8C?0%tTJ@V<9A*S-w(*IJvYKLr|P0^i)g06f`_MojU2e zHBP_n!n^3V?RbFvcIrl+IF~h(Lv>d;AO-Yd4^~qt7>8Ce((T9d)_WjdbM{hbdKu}? z{{tk|t;*BW%ze;2MW*0PbVuJ=wsL*=Q(atoghtl1eL7lwF>L|!4%=UuG{CeHhooi$ zj_SaU#If;hRu*ByU;eJZOlaRY-l)Tkiunzh5kA&=t%e&XU<(H9*A`Gc7?SCz7R!{% zpZVCyJ+))p*t}q2!>^~wo{io735z3`-YU=LGThv89tg{^*qDEfz(JoC5tz9ab!pM_ zl1Vm(q6Fvs%lwgcCO&uLwdPv@?@cLz$IVvvMo(J_KGjj_VLc zU^P>S3Kon`31#kG#SgGrWXUbKD+&8R!*^lM??Gkx_rNPMyGTlXC6+L!3kC|&C6$G^Gu7;YH;H7p^cV|ViZN&#m=cL! zj&rWelFvXGTEuXSF|d%_L9&v?G^tE%`%IEmR9o0ZLLL3taIc6SD&^1obhW|o&u~AR zl#AEXX5oAyyu~OA^L}Hp&N)F86?ZDzu5t>3^1V{!yE1wd$oEQN$%}elG~|1!yt`Qu zS^J$Kt32ph(H*iUo!lt!X1m&1Gk(k4--cV+e!!`FXwVZ5ROC^d@X3PXF+BuQ!LS!j zpbzGWHXo^cclsS8D)27Ln|Xn*NX3a)@R46hLES)noRTFz#n_dCtGW8KHQ@`9@81IX z=dwZJ?iIQ#;KYbrIET3XMIy7}o(9>37W~xQi)nl+D+n+T9>D&^iKxO~c2ZhpVheqe z$$w2mwGjzHc~Dc3)2mlRCg7)hrd&PV!9+E*fk_!E*{ONx~8hMAe0u zs&rBcPhvxvvKuw$?Qd9q8FRw^hH&!7b!acruL1Xf4d<3n4)Jq2%P& z#oX3ZRX_N_Hq-lE%Mh>4{P$wpW@g~dI<^^+o@r}WA_LS7=2*aRLxzWT&%ru} zH7O~OQrs@L5tq}iEan8c2qNHCwOJ`$-+{m@ZL$Inu47xO0a?cQB)~~k`2R=-a87Gq zEa~9YryX-xp2jLnxghU_!a=izU7#GVOhNyM`>D_f@-VMTC!)}*1a<&uC1?KlM~O_O zXvr3p8(TB9`y`fXu^UMY-|{6}sYp=fVQ9Ht7ptZ+EoY(Y&p(EJ`O68>N2g{37SsNO zgO=#4;#bPDWXRufI2~bM5?cyp2=K@4AH$^=xJc`+nq&~;WLstPGti%Hlr2ltkFq}u zm#t&l(l)2_Vt=*%?D=Yai2<#SKQZ-}1v(pR{ecZIr)>SbVC!%2pVnU|oGC-r+k0|Q zf7#N5(%lpJn<|Ox(=}*)g`ix>%K?B%QXFIfCD` zfgd#$JsX%NUb>lo7R_LsZG-*Z=$=d@9adf?%u|a&2i4}!#OW=wre3VdDsG1nO03+w zXK7!3(7vEeMzVwEAL?nZcmHT|wZM{geMjV@cjr!%&$*ZOY&vkk(M}2m%Q^X6b_`4# z;&D8s)Mp1@Stz9`k(pWo`fou(t^d{nHVtg?V1Eu47x5P?*54wqX*Vtx58*d3eVbGR zIx&8OUa}+J@iFJ(!&Az$I3ZpSl} z9b4)3$xdxwSeDv$;-&uK{UBdilrLyI{()-giz;iURW>%Q9jrvNodZEE?SZ<>%@w@h?y+#6pufR@S~Kf|2I>1eEm1eIG89|03PFEaBnD~tCuoj>)wuP2BP?yY zMaz*_SzuFejk=te>=P$qEg17w?O3)HSM@PN>0i!5mZ~Eqy`7Kr&6unr0aJX`+O-(c z2%$P@g2R-|ZepJ+r5{%iN|59ZFa#+wn|>1+2;^@^8p=U#RO$!PCtSTldAK%n!&U%p zebe=1n3|o_>_EI=8y=(>JMh4Qbis9b7@Q$f%zkjZ&Qh7rhny?{vwN}4KqDsKTaKJ= zUx=SbXPjc|HJaq98Z(VCa)tq#;0E*dv*dU3fFH?k?7V}k44Th&()N*^@t8%>X=}+j z*N7?}1>3!D3~fIJt+@f&k;EqH5e@p+}E~Nn(s{elZU+X^>6r@D;UkQ%If&Rmf zzty~<5pOa=TFoy{tNw$1^q2bYH`ijQ#FNZhHEgq?g_~5S{`-&uP)h%EtXi13HkTEV zlZM0LAWNIAA4a}3GS;c94^IcSRvp+C2Q^VYf!YC-Tnws`x1J=m?YH44a*10Xh>_ow z8o!G1BEPW7Hkjj2iTpnBgD1b~e))BCpSI$A{OZUT{kSaADGiL1N=u*X|4vVT13&#V z``F|CHT^gMNbHZ$(Gna>4G!Qq^yJNd2nV*{Cz56DmuUN4sj;gV8$fd$$eIWy>H>wP%_-}&kEj*aRM34c9iR<+_!ltkwba25=>HE>` zcf{#Ru^Mc{@4|(R_$i8Xiq&B6YRn4!#Bku~0^z{@-~UYx1P?n7sQg#691!uZ=9dC( z|5)58)&I|u8D6ykf`0mGI#LE^#?lYBPE4tF3A}lf_K(l%$>8Zmpud~d;E5YfNUPt7 zpQ1?H82S_6)tD9diQwGp4bWdFo{)zB;CE#<{8)3q^u@SRYaXRfGOMaux&v>r-PiIH zZWW=@FB?We`$ka*=TZmfqKlMX0Uf6dyy2!cmGq*|6xoM-WkH}n89~v&1R-#@n#KDq zYq;P?(FjIG!|tEJx5J~8-w+dajYMFF0%1eXhmMcX1v}V%3|6{n?U|z0+WBhP-XCJ%h1=;76=>cb}2Gg?MK)l z=x*_^k<9;h)k&oRnqbat@gOV>R2{wfqKIHXa7CM(K9v)>e zHv+SI$?9)#jFRM^mqWp=3q=q(Cd^L4Po$Hs-^NOBoJN;pG)#pJqJKL5TiE{bo-)}! z3T&U?*j}{X$98Ix7{03$+rG-N%#V(7g!}5mRuEeS%K!ajP-x#^^1m55I!aWYW)#WfE(~rO8;rZ3PwbGfTQzO|Ls1#{=>xP+QE*G!Jkj%qj{~;DU2h1 ze|3H_?Q47f#4NS1RUKeVPNr~j0>9RY70Q7oYgZW58}Lhm`cwI}Td|;2UY2(l*yKIx z@*^KsVkTYs~kNrP4g^{J%Z+~iniw2|4EC1Xr@Yo>5AqL+nnEn{46pfSPbvkYD+YY4c=2fj~UA*LIYbAJzDxWZ1t9-ar`RHQXd3-Oi z(oaNddjSJuYL{~4)$U6BGAee^1z}m9HWe|{3K)T*^4;)Ds+XfKt=?^R)Wu3233m{$ zQoBG-|QFH)_^`0@8M)ik0yBcQD|m>!Qxg?{@*nH5UeD>c;m*N?73{k;u48&P^v zq2^He*aqx%JJ329V!3K8hPO(z^1S&SG1YwY8>o_??Nk!ua5*aFC>`~%!Tk7x)B}uG zuq-{=;wDjPPD*QyP&hAG+YbA;>9c_zxe{i1H%0=c=OZ9rHgfO51|xbp6ppmhSXO|a zD+ay5PY`m=8K4X0PtegxPAMzpboLq52MU)s@+vL6+NLeF?1B7y$!3())7akl#Lm$? z13w9`o_n&EVV@_qJS4T;3O|txOWWs(sT$jav0nQf`mj{@FQ1oD-K7YB*|>@}XP2{; zSzNyq!KDVMoF9Jqgqt5O$foq{+gg#rkEw6|LIuljVZ*6|z>9Evm1;a9HgPx(MO{Jv zQq%GGVml6yLf4yc=06c(Hk`@AH>{~}^QsD5+J3-c3KRbCCmh_xgq!!4!Z9wCS>J;@{Idra zh=tpQaFefazX8Hrsc=tSA=EWjxLNxE2iJ=@GsJ`2%EP>yTR6srGGAQas2hX?mbyjA z)uZlWgqykwcOT(?Y$DXPRk-CBcPZYQ%Z0og#T(?|P4w^%4nxWuaopi*lZUzC2}@&Q6T##WlJOs-_>RWJ zD#Wa%n9C4hDiIUs?~XsLJ}Q*K z(WAE{q6cI9A%LSNXbU`;|D*~F4-6EN?o1FCPWs6S$f9G8g^ftkohSgQQ2{yrxT~?A zNMJcwBZivfwg@-Z3k8|Kf@`Lu!c9}SstVVQ@+jh;;lV8)ij-9?oQi*;2UiCPEZl#P zt7BgB@07=12@%emL%5CNVbZXc!p*NN)a4t%!S^W6Y&z&b@l+?LJ~{gs93-!5pEWe zrf}vU0^X&7Yq;hUj?YoR$2`D^9^k<%kut{z_u*rXzFVSjRbt@=5Uzv59RN+Hn!*iK zxG&>{zICiU(I(YBxaoiceY;*)`c$6`bAX8tNc~A$TY!8WLlY;m{uUA>oOurc=QSil z6VD<;VJD?yNB}z1?%)QqEZlF2{6m=)C0}@W*$;Sz1l>B&0yV@8V3ufva4w{FUs9F6 zEcCY8IG;RVBYc$QU?aSbxMwQv3nUb{I4PUBdj5rA7D+ILt7BI?I`eN4%~`Dnf0Q;66qtBA!dXHmD%ucV&NXj z5{dm{o+EY{vKL}s#e-?DnD6#eVs|U%irayChG0G|358gR^kFi@9AXwA)NVAWQO+?q z*TbCRFvk&dm3VF>_OO^66tgEW7rsh5TSYM?l9=ddmB9?*`shSI>B7K+)F>_gL@Yik$C_L`!G{M8{<1o7u^BTqc zv5(R@RWT#C0<*hdZh6$BQzCu*WeE8z{xyK5x<|Wt_y-4jKU1sxmN?wsh+8ZU7>T1T zZm!~vA@1gvN$a2}u0;B1Wr$hGqDN^xdCY+}kfh{q#9@9z%sjtVMAAcD_ z{w`xKAQiomHnC=!- zEt167rR%2rE|;XFwSvPu4w*H{iurgisN0A%BNj*hGaL@5%4B zhdllca=5*T+e~p^%~4uERovHZ25t?(eS|4hKS-pHR)(0p%mTDp&;}mpFi9%%i{>G; zeuD?|MqR1Xi!A0!#k`o9^ZrZzo)yKENFOFc%xH^g>og8#m+E};Ad5@PDGqZSF}o<{ zrk+aYBE@|FCSW!d%*B#W^q@rg_{$LT_XKkRsTTHMVsuiJ?qF(_-+;rdMBI(y`jI%q z;ub0H0OG#%B5Caq#g#}Otqd_UEoiD%>i4qIilDzg;Ap)C*$aQK#e=zAG57XRS|=#x z*HAX*Lcv@k358aP^kFi@)UudX=jZQr{GH`tmLPk<{0$FgkGPX0j<%S?74sHiu6u!W z_K9Ljq>sN0A%Ewy?c8AAScvame! z8)~UuEeHDwQ!9TjbGR1~w~FG<3o3u(6!!r-^8frCX&oQMl}I103^D7N1!%RGo|=jd zw6i27e|I5!p>;bR%tPXulGxN@8YygiV`APVm=&U!66wQai0N-JtxnqK*@PR4$R=Xm z?l4CXvx#E9dYRI>RWV=SfdG{R^FB!^awL&H{xXF8-Njr$sx=G0^}5x5Os)Ja0fe?2 zJecRiO(pR{i_1Ai+P}n|1K%FlzfoL?^wG)?Gs1$VO4`Kl&vg9#;yy>~0}k_EVzyVz z&E1vO1(Gg)1eRx=Bbm!RaG`-#Ks=wUvB?1j8Jcrf>iA4=kdf(d6Dkk^QScM4$n zD0!{@&n7iGxZZl=_z>UT>k`Js%$=)YH$9jV+>3m~M}ikD!@mp=^T- zc=B5a zJ*bHeYBZs~7q5}TITmU-phgqwL%1P@GOvh24fjJ0H!rY|Q3gKc)m0M@D#bws2z8f2 zon@imeh^=oP}d4nW@qDK>aaa zyiXFl3fkFOPhF+0>8*9`O1P>BnbsmB8lnE|1d=7f0zwuwr1n7FC1<^CRhI6?tn)S_&M=A zN$hWdA64MC1fBz5CiH(%V2Sh*%Mdfdg4(%)oF5(N7qc9(6&&Vq;F$J``PIcr>>|Zn z!3BXc1oLT0D8x#n50fG05VHWGDUvqvq3HaNhxrJgRG$%ZmH2@q-fS^nR?MEnTnLXP z^nX!Ii6o{s|HBaJ|17LkICp#Xdhi~PzZW~)3y7PoxQ8xM`AvuX?%+In8v%Wr$+Z7V z_seg(30SO#O5!TnM#o`Cz9gdjegSGkem}y4^nVFpOJU*+L7SbnQmMQFfGWSs;GY!A z>?#>(cfl`w>}4AB080(_+IIS}Cr4F0>|A2AH@q4T=2``=W`Q>-@IKC|UnZDaXOdFE zlt^NF^2-pB-}-*sTRhzRnOx;J;D9R;xL90F66a>BEPblLV+gz%K17)Ri2_Tck64D7 zg)BRWwUzqrb|=3LBq@l_93P1+`;=pFG=Rxg;g6 zLmg&+VkRr*yPcHQ1Re7{fhm4-{4vrRiegHn50fEgJF@_xNmAa#B2SQl9_D_KBy{e@ zgLyI@2?`T?Sj;5FY);IXf*FWnN~Dj!3?YAqT3Fj|KK1P5Z6S}pQylI%;x<#e;$xC{mBma~%!`RR z58g|d|A}Hsqz{uJX0*k$W6A^GK+8;Laf!JYtQ7t(#DnRgm_KGHogEeP{XxKNDwvBU zp(qH6^zoM=UFfm%~IR}#C-|QJedE9;!32C zR)(0F7SvX16R*+yKF!e@0V{>pZ}4C)SImnz26 zU?6aReuT7+kK#(Ck5-15b<6^^T0{6HZ?3kpBo+PZF#8kpp*Z31MHcf>#cWK>y9BdB z6jLI7m<%!fEvD5EKX?lb8zz%Y#M}>73Y~lLV45iAruItb0>yk`05B^F=6#Y--4?sFyFOPJW-;=Zi7ZHYSv&O)$%qqq|3qm?0M zgax(od)yluesQ;>wYI~oO3e0(`Bgimb*W;mz(En_48eR_5(=#n>BD4*Im9fYgx2;5 z&Gj(o>ZH(lv&Gz?m_3QP@FCLKDvBwQKK?R<{GDiF?fm76KU}jpILYI0 z2Z!5|xY>$(sIAhvRdGM+2i%r|yM!rKKS-pHR)&~L7S!5j?KV2lNs^SZ^ggOjXkCp5 z^T{7V>tu_$TQRRD=GzaF)=Q(966wQah?&b`gTGe)zU(Q&1P}9Shj|4tuTjjZ7SkwZ z1dDy9yI^ja=+P;WKK?R<{H?z+v7?%sj;hN+dmOHhTv-?7pw1%RX66wQah}q68Kq$(_{%w~hzd;Z4 zYgC`mxdRX8$>Tz24~yAaF`E-}reFr5m=fvZFGI-Rp%&Kiw~l9@ZJXfn_jZRng1F5T zcY7jm5zg8K+ls(z42AFT{Adzl4jwTzg_8Q!^9m@O> zAK1c5q_40HF&Vb7)&iL9jSv<~QWo|qlu;_?auzm$g)K~crKK`xuwu^50p?Hl5p!G= zQzCts3^DHsz1{-Q9pZh(nS@S~v>GrEq26)6F30mf;L*%IDyW?->TpGEK-BSq8YfBN zp*}lJB7utZo);9uOfQRTD`xk5u42}VBb!L;bb#U1v2f;{c)(=Jlitdt_o*X7Z%+$6L4jKU*xVzS zNl{FRB&Iii!4R3h7;16tyx-oH4tHCgC;v+zJp%j^9!xU@-rhnfo~6LA^#E`U0e*xj zRsJQ?M=V3kUS{S-CNHH%a=DaW&d{z`wB7K+) zF{3S}t=fib9ie8dtJ<$2J3{9UJeV$u`D1gXbAe*MpAF2Wg1J}{s(r^uVtVrz{G9sb z1akqYcG~3ocO2{;Os)F+c85EHxEp^JT1Q*lMT$FsxG&8ntsSDc66vFrA!eopweuI( zcw+qf7)NVuhgp@Fmn-JUbCuSmiurXAm=_A>8cC@39V301{M^*?6I#zBbe4ztAIPfk z_i;R!J--N@_gYK{9`t_vEyP?`NILsOF(uN+Uxtvs^I3B6*P2=#5RSq@Q`BT?K{ z+nu;KDQ+!`yH#-yUk2RXg1d7xnIyDIq>omHn5Gug8kI{AJJ81@Ddjf;Q59Oh!Grnr zu+aK=Gv)86iaCXtpWjPbuZv=nmYU3rOqu zD6T~MXl005$1FgrZL1G?mD*X7lD|)*c?f^!;lVs~Ncek^#e|b1WvMYS?-I-kQA~;S zVKT(@x0v=2|KGjw$%av66EQnD%$CG#qL`b`Q92V8^M!7}tR$HCNkWk$iS+T8A>{8a z<^oa^tl5LMr1IO3sg=L$A*w>_yLd3q9TZyoTig`IZA;uav&i3iQCx}i(aI3q52v7Z ztWd`rpL}tV<#r&$N(weH6E4l*n48eR_5(=#n>BD4*Im9eLs2y`Q^%m}O zJQ@=cPYl%-1@=7q%k zWWUfl*R#aK1_y~xhyvLYbO#e{m>Db;9>4W^AI{WS#;29mC`X!KQxe}naLNm61y;xOkBvz%f+f0oiYTrmrYxpxNXygiC3kv{%1 zg#2B`T%ygUf;TK`!_>;(a~y6X;uicQ{5{{|<|=M&;@&2>M{enO#1A`6(uL!>nn#gs@NCPU12W&uLoob_tQ-=K$i zwZpuEm{0B#I(t~m35waAm@@@45XF>8AAcD_{tmUUcBtD8{hrG2wwpcv?ne_5TKD3? zG*jH|O_bKDiu>Bdz^x&;k1(a`2Z{92$`G@cS%6k6OKX=n&|#94{0%wGyNLNlL}`i-|dJI{AB66jLI7m<%zaEvB^z-&p1_%}p#WG3zx^zoM=Wp(Zsx5F;6yDS{Eqh*O|b)P%zg>LZMY6 zeV7a}wJfGJ^n1PPFlTv~0f$+Mn0tza&bbzIkz(FL%ym;qXP+phMEdy45b}3EOAh`z z`(d$zt;y6@{{lkzdleqcO^SPl#eG?E4|fJ`Z^7MpBbg+$N~DighM1-n)b{0*y}7W* zBq?QS4608sZ^nc96=x8lP8T*({w`I_Da8DI3TeGAiYbvkOoo_OS!@t$JMwqlbcCjR zm>r-B1hXX`%rwQk&|+)Ns|x?M!oj}6)XLwTj@Hej zwTj}dZm6_wP}~PP0r%(0q;-50S0a71GQ_N77NFJIqLsHh(9V*S{Jq6tUQ5h}eh~il zwwPNLvoSI663hxwOo{YiGQ{+^n6^*t=k;$JZXlb8S>ojAH_A~H#r&p$()p=kzHlKh zD+%U(l2GJGB7OX22>H8(H3{N;_Mh%7yi2h(0LPu5pjjbg6I0OlEj`LrYyS|!ql$q;jh zS%6TBIl#lr^)PRD{2f95uKHf+oNF-;C}vM$E}TRpcE00ff-{5*|#p;+|=7k1Fm*9f8|YaF;Np>IaGR(aI20$%3Y+QMk$*OHGobl%=5% zRl)3!2lL5yLhGAnD1YPBU-W8XzCDq&UK+)eNFOFc%v=^5{Ixp2`|GaFBzTzX9i8uz z&TAC&5{sFjn2`>^>@JvFuJ!1YNFRS0LjKmbuvRUNe#ODw&(tcv;~nm8#4Y|-Xx;P= zr8P-$#}Ie(U8HqT6jvgBv@*mjWYIyZowR%6zYes4Bqe_bIR5q^fAbXc3X7Sdm?akg zbBJJmdyPk{MEWopV$Qdi_>S}QAA9pVizF#Ae?XIzI{gX{rkrAalcIE{DrO-u_uff5 zZ;xV1q>sN0A%B-K7m#ZEx5#sj)HY0Q`Rj0RBW}Sr!rz-MZo1;uChl#5dt|srt3>)} zWr*o+LGAv~CW{>Ca!E>Bt2xZ_#7tJq-|8u?trhc$_P{(ofwYFAm=fv3WQf_$EI_EW z372_w8uT!qaB}o8<><*hLg#dg*-Eka$$lswB){>g}A4lr8t3Cd< za=1;2+e~q*THGwfeXSjEYY6TmOsV=oB7L+n#O!4jpw-$+DPE-xlcePD8Z=9hrMK~5 z-q?sF(2UFYr4b4(${S6Oh_ zmcN@kS$a&8QkHr;%u9&*>z6|7j@nA=1jU>}%+JS?*6X5}66wQah9qks+cdd z0%j$_yiXE}97&{)zYHONcQF@`Dp!Dn6Yp8zVEZw(^7kBv+laW&?Gjq=t*QK7ptx;` zJ7+ZcTQ7<$kv>`(Vn$d{Ir}i2_{HN6^ouJUt;?Vagw|K_VA?BYU5mL$F;}z%<{5(d zv?LT-CDMn<5OauGfKbcdY0o;$To1F4!|YDXRi6u;PhrHz114Tp%$~$tcn9fh6~&ZD zAAcD_{!X;8)_yqrq=P*;*yHclPzBm<@L;kP_gss+RB=B#54bG_cL`Ifevn8Xtqd`h zEU2y2O&)(INm9zv7>9W?F+cf?wAz!FaAN^7S)=~%LznzfQhddm{!_Q2hdA;4s&N@O zdk}~6l)k^CEf29u!Qojr^Su!JPoBWRTR1GsUgU9Yhhy%r`6F)<9cN@kUY3hJK)|2303j9>!r||4UoGF4!SPE+g3tQuSvy7ezJe(INJ!MQx%EJY22YA0h zx4lP8BIWfA`V^ckm>P4Zfys5nkt4ezkClb%!UVrpX?%dy&TGyqi*Q#N$}%beZHN=KIr^MB3*YmN#0M`y8@vf4>tB~}PBzyj4M(>n7giTHlX55vY*VI%) zd6B50J$-Bl4%(Ar)Gon8k94!|yVH|n0zO(qzKT1+S)>$Av9H44EBv$-CV`?03j0<> z`7;JoB%}L+$^i*^O~7(cF#rT$B3I5=%;=etSCv)X|IbR6_qvbE1zr&Z|GF~pFOA}N zJf)(WvZ5_MYMb(xih57=vnCZCpr|H!V9a{f<(oqxVS=Jyj|DV{l-C%z>Ph04YLmw`?% z55T+J&({MFkl*>Au&@oks{$<CW68{&u*@i>w}4`-`c6B=x!!oeot zaZx`FV7BmCNS=!n_Bf?}$jTizlzbP$&7d8?2xoRgglVpLV-@d@<${+0V^8o*3lHw8 zBst&c#4UQhkpfO~fQg?7pqy`H5~6^K?+|buLBg3^5Mkc_m;@#+!?PSB2r4g2$2U(Q z<4|UE$xwDB>UJb=|6aQ4&xyOs4yv(3Iiv;qCuzZ2}g{+DeT)6F6TIQSH|u6!-5{!-MFTkA%E0Dl2*1-)EJ?)!`GOc#V`l{g996_j?w<-X4Nm)!8#I$%tF85PyDKns9z@Ls(!Ik^@n9z zm-=P(J)&Q#1?2wEJ}fm0Pyz3vUyj$%`#*^vjvtH6Oe>q0UCWvE8g&Nq8mD=EjU=JW zN4>mu;$6gVGak&rt&-EZ%<20ZwN!Riy|xUXm{SYQ=~>CCx0lnuT}}@&r~e=)vl@1% zJ>(ZxHznSFKU5HWM<6uu>z4xJspkk02X|oxy^bLE;LyH_-QB0;??nB~&gh0?KKq@Y zVKx)`&-cwuG2iU+zG>_Grd!N69~Ie>nSg$ibxD9lY7+C!&HRQ%HIYS9?6^(yI^ml? zmPCu)&HH9Ozj-Te@MTA(L9zbg5}Ffut%T#^pTT+(fJ}zC#q8h z9ux@5(_y@e4E%@(^V4RLfte`mvI3CXW}~?aHZ|+9FOGM`{Uf~dA>5-J%Yhb((@2l; zyFmCA{AK$_quLZ)wI?3ee9eNbol{t`1`n|f;*{YUxS*03UE-3boN&Xr&sL1L2W8rd8jrOj;Rb~ZptCE za5^~;<1T<8G+mQJWfmUi)S8ijYs=|()5d79G#Na8Y%H%xY8 zWQQ9GQNi(l%;SNx4Nvk1_nCw<@4!;%yRz28E1)PJZ{mK?f`-3WCB~OMof`NK?}D)l z59R`5KnV?p63Sg;);|yWri&61`|MV~eJ0jWto`4`v%5RQ+QA2C7Iykv?Ab=j`@$i@ z!gLzIuxD|y-J{RVQnWWByaqh4~ZFC_#pnJgiQF4C z00sY!QnnxDH5W{R#oiZ`W}|3ZOSbX22!x^u+>wxj>m_p}q9P7M9+sBCJ2mAtop9#d zyX+NqIpO4vv&+YI!9qUh7_)@;yt;mZY}WfZ>Z3rypW-`8u|^81{l^VZJ*9Y5n0O~U zxWeR{rJqZF09`rGKg+g!NGx>y{dD&C$-;%i5t?L>CYdTp3cMr}T$0|6NwP~)ok9W!LG&tH(No^e^lKh3Nt zAM@}4`8cuBCm*x_gQjy&^bl?3{{w9KrN)nL3@sz*n}UTCF>;-dl6UnfE$G+|X+hm% zS`g0c#toKeLA_JV=Nj#K+(XUXnVtA}$fGVz&L+0PW+2R*bZnb#t;L z@;wD*&tm(6>gFHJI6&jAYO@{w^~rKOBLq{g5($P@mdB;WBSIbH@(%M}!Bmj0mw!Sb zAW*F8orj<)CA@-k{D`N4Du5@nv^@Z{m7T`!| zag>ozxola($eb&uuHEv%YZ$G^S_g*4siZ=0)NBy z7w3PIML7R^v5fhKKLnG7qdLlGgM z{BMMtU)HnDWxjz3vtb>J->{~_&3j4U{^h}K#OVwQcQN7S{WBJ>z6X~Zg}X5pt}o&8 z6|Ohou2i_Ec%ci13T;gPfcPZW) z6bj_!DBh4cz~kzhndspij6=#C3&*%n=7*O$@|q!mg=-TFR}-&%kKjqXPV9Ye>;BGBz+?-9OE$mafzibF%1bYK1_n4b`5Vwv2cmi5pFst zT##_h1un5Vp4A);$1kmiZ)zjsQ08NjA?Aa`Pz|OOMW+WkngdLV;h**DspbuBM@T9f zi9h`YY#1n+-{C>_=PX-8@)94zJ7>YCqTC>}8z9wwnLmWMX_A9XzsncCDQSk7F&5m8 zxSGrpdNCR(?m`|Ad=|lJp-#brxkQ1_vcS8M34lMS3tG<+%$FshU`ix0z5PWDk@BBl zHqlv%?Tu;M)$s}qXzFBR}W`*EnEbrv+-J&SUK%(~4+AK0jXq7K~{AGx#?WgnD z!w$PZl9InGc`*z5y95vBn^i*QnqQR6ETG;FRI_O?$s8c5gv=~InOSBLiwu@h`C_~f zQqe_KHu9kU>7WJ@YP>=Xwon)Y$5#{rvp~PVeRnbG6S%>CxWOjF!nskuw}QP`5|Of# z$XO`+6%Qss;ffC{WfK7RP#sWqU=S(0GYU1q4>iGTW=c?o!jQ7w^BohrdQkHTMf++l z9yoqkDQuh}V0!%&@XiLFo&OWiijrRHZxQqM)gMF501IvBNmh8vQyVWLYe?k;UU6+-bm-WCFluvCHD5_rxP-(wiP>H; zn_A4Rin*c|FwYRorzN2fE0I1-hM51y+PA<*Rh;c7Aq(LWP7ng&CIN#4R7@;LB1RJo zauzli6*Y>sQ4~>8k?cYgg@jEY>${~e!5e8&Q7={=vAX@Wg`eiXm20EFQ8Iov3x zhI^g`_mGDBUN68MEpT69O|1;%W!zZ#M0K`+T8Gm1*<_FPUa3lEnqtG8K$!pfhm5uH zkQSLaVBs485d6J<8i!ge^+Z1B#0$+F^%(mL#9C3sC!&dkMikiRXjcaK0dCYR4eV+G z_COXxWPtZ|8U|P*(B2;(9iY678z7&k;TBAbfy$!RWQA1a{@i=eytO~~PD1_qRT<(Z zU+E#j4RHfHSOmFq{ap#D>*PwTAu00Iikd>zCNr94(cI&9eYO2AD-qOEsuU z3)C!t>O)X>3aIAuI6A>4rU0>^W~mYjl$Ch!_);6xMyW(lJJ71kFSp+u2HcZ?M{2+W1h5Xc zukHz`y#(rSSWROW)2&$Sma4Bownvvj=;I4RaV_UZG)LDKPP+F0k;&Jw*SE7m%Bz zp2!TQ>9JJJR{bqtmgQ`SCObSB1vU@u$^dW2jZ$l5fQQ3+fSdII=K`L3`w|ZDN~tKA zm6ve?t2>Xj5~b)lr}0FKFJQia!2=kMv z9O-PSCV0(>$7_yiV23eAi->ndGgrn%VVzD`oJ zw_wz!t%!VQf;zG5?sh@Ep8%I?J;kr1_d5ReHQpkI1=gO82o&N&nc+^RZx=dmtotZo z?gdOU_>S( ze1=YQ$wYuS8zrVO0DV!48s;WrxcKWKG=O^)#;Oi(BgmmNYqxqBKSQ5%jUMVyg`-7L5PN3T0L7azQ5W-{U*_t;S*b?jlbiU3;Z zPzNz0ji2Fk5#qj~UbELds0PiMDOgZQNLY_<0~>bd!$agFEAbM3|4gc zHUN{rpnH~uH}@}`$UZu{!yJ0d6`0&?j{Ms6ZfG`Z_qmLTTk+j@)7N~+WxUv}$XLE% zV$BZsI^chw`xGv#r4fI30Dr_)nzQ<&7SO@zZApZXlFh6vu7Kk&w+WiOHztey9#|QN zmIs2dXqg!d9X|6L(QOAe+0 z(P;nA*<7g|{GYF&_7kzpKo$qHUzDbL-+&?1?semP=*K_9N-zywYR`o*75;Psm$0Dc z%hM2z3#2ZYl?)RCcG%2irzpCpuE3*-ZP3Q(yGXElZkdHA5iR;ZKPA7+Sn{17Ukv}7 ze(m4!`@A*Kj|p{%sHr<D!excmgUgP)Z7vfOVwf4~=0F@8 zF`|sndmYP(=8w~~e*RJXJx3<^A^aJ&zee9gYNb z*SmC}=iaRBwc8M6&#nK){3{+0s**Oi;uR24c4ZBc`NIk?tUOlplaU@V%=BA8sy7k# z#0Kutfl>23d!$zjCH;em zGl7@*Qh$(rMp?G8`u-tO>X6DtW`qF`NJh)=i~pQ2uu@oV`o#{EVYMGa%0(7$Abr5! z!KL}7DbPaI<3%%fVcD|qD0{V&5}+6TnKMwDo=^i~p(@o8f>R>;$T&+JWrc3%!rUH3TzIN$MCTs-~MrbebG7beuy zd(NeJp?OyIr@l8I(<*y(kpFzgT0Ajo|Apq&GSsSp!rn|+^r=iFGO%Wu`ldqD@pPl+ zcYGU2AG!+b>jZDqKEx;0;=Aso)&A>!pVM0_+k< z-}|yv%D?c;+K9WGU^&sX`W4N$Y5Q_bqUPiXdJZ3fL@)t3t`sVnd{+yyre zjnXsKXp2*2hv>vb34FP z=Y0VRxqF)V+dbL%l{W&=hv?du<-kY}6@U$J)M6SB4DO~M$8=(&e?pr+w0qD2s{|bN ze}#HoP^i`Gx#$c=`Td7ly#@wvfLe?n>_#$WGE%ow)J=ClgVxq#{_!8u5%@xu3UL;h57EcK;7>Nd*SO;0?;iLyN!TM3LWr zZ`R6V4KyQ^YMnIyY*rPoP#$viJ)ZR_e!Kj`$A8)#m$S~th5T7k`>9cTBWf1by_)q5 ztKj?ZLAlBbzpiI`Tat|ju?rbe-jd`=pIJTrmN_CHM$JXwiqIdi69%t388tyNAB)#M z%x9Pcf+qs0Z{LaqMb2i_s8!7(P!B#xDEJ0EJ63(+%v)yP=wC=#`+JdP(aiFzKSX_Lyc?UwGp!p4_TMNpra= zA(j-F&bK3l_@`3<4fVhdwa=qr)CHoS{vkx4BK^}NmYSZ^Q0s?=y&uh?q1wOMlHhN3A)Uj z>u21CGDa;O3pAf{liR2TRjfu6s@AaW1mlq^+98>LdphUt$UPDsYX<7H#Y7NfvpVe? z8fx_377UqheAvopT5=)rkL~PEF?Ua9B&3`Mx3a{~ytth%-^ZBnYwmFQwiHF6Nn@E= zn_S%xElFh*R_zX>_EFGL;sXn+3YKTWr*O}u3J~o8QuVA_kTfUg>9UUe7IsLOqi$N( zC5&J(7jLt+uLI|aUGoeyR^#Q74T)}K@GaL$U@?t!VmQTqAgZ1O^Xooo{CDyUfIjlv zXw)(dj8NS}LezrfPpTr%LcX3e#+@S9b3J#!mnubp1YD=_3U4KCJ(hzXH3P1!X`-ic zk4((1cj0I0#M~VdbN2$adhj0ISJ*&}Cg^vh9sz^<;4UjDi}i>dpfyYDR&QcAHZ~O& z&c(H+n2gpOb8E_5Au3Zy<$M$6bl3mlIK_6jM(F5g#e z-^ff}%p8MS8HIKCW@YN}uUHgo^~muV#%jC`CAHB0>G|6M3;GdSE+%9;iKqc-tx7W=VrNM)anAHs#XgCUgI^8gM1}G)b zwArnZphDs?FnIeVxWI+ArhRNt)h@JZ{gn8RvE*$IDlR_Dj^)%KzCQj7iLby0;DOdY z$sUZyOe4>4Rts*Sp253V^nvJ`RnZl?4>{`BU!n{eM2tzsz%YGunCj~5bU8Rc)(A6o zC>LnSsai`tmmuMWIeTRad>1avP)JR)S&Q%yB<1&>tA+*nU?c5kKHC2VN z1UvbFI8$9bhoLRp(a5vAK)}89c*Z^eZA}vamy7BEpm4WJaKo{8S|i#V;e`efmb&6B z>=j(DlPI8-1$X{cg0tL6_$JO;1yyXbj2jKg2{#)%I9<@2&<{jECYmd8+312EDRhq9 zV2*4k@xA9fy2sgY>_XSjZG2wp3=B##Rui6YtIPKxg4K5CO<1F4-(s+4^)WP4xG<$? z4X@!&jMf5hp(Lh~IZK&zYBL@A$Ef)|idLdBt-7$7_orI(tkCekwR-$gD@_2a?` z)Yxm-GA2-CFU1WSkiI84jfwT*U)2GAu-I3fjq$kxz8qY<1)hQ0d^A<_H~)qEI(^3^ zfd5VI5q0|S5N9Tic9vjDavJgZyS+of}qR-|asx#0H+R}#LuH0Dd&N{vDNMn+F zi1+jF3+wm`f8gaW*V5)sifpqBCA!nSpPz`n*Df{QYkuJzm=M7}@jOF#-$K({_oBswRid{NzaItN4O7Cc=K=gF@z2bJL+2TQT^=cFz@3z3 zzVmKM+o;~0j|~)CWE(p9N4BEx0h%8 z7ni?|krP)SC>I~}5?X)=7|XVUJDq_sAdc3XX8zHNLKieD<%?QhUO%~rGv=VuJMCjvkuDwbv!!_jvrDjzwXtfi3$KjiHIl6DQ^!o9mdEw`X2A zyLaKUP$bD%w#q7!R8)1WYOb}vANQ{tOCG>0yEt|I9Banw+pY#4Cpld7YVSgzmirF! zkIsdgwp_*)z5t^v=D@1Z20Y)elku>}~-wd_wCRN9sfc+oW>atEsbO;6rLMs>NN)_fOJ)?dVKHR?-GaF!Gv8|O z+O{sC#mDUV(YylKk3wqCJlc;uiOu^jgY!{Vh)HM8T2KuRtJ7CMk(0@7>QA?8m5&Ji zrb0v;(7Nhv!wEkdV?M0;R|~Ncx5f-fs{WPi|2jj*PpwSH$_gufn!0#0XNjo`-sPIa zQ>R!Q?x?_T$xpr&H<(`?|0Tv3aEw7?>Z?(@t^IUfV86F?(7c8JT^j${q;V!`oT)A5P=#_S_WT}PrS9UWn;g$=>rR`4S&-we)~&bTQ>L6t5}+T?!bQOO zV%&g!cLK3eHYRwAKFaHCQrqsGp>QIFjT^!Dj!atDNP zey6l^kthOnP$m?#&V_h+kl>Z*b1oLTbC2XkU@*hO&B&Wh-(K_RUK0k=^nQ|P zChl_i5TMxN^1W}b(1<#a^b*@dSUy8ByvU1Tu~LfbTv?Nfs#-GVXW(yFcW2&v#!uwR z5ArjZdVnXx;H^QSK(k@@b?Cy9z@ToM8QoT(xec#dtZH0@?FFgxV+UaAwD+?{n5Qbmt=`yD^)ukm*Tn} z<0#$UV_jKvUMd$|$aajW}G0^a{NQS{Q&-882jX*m>;|V3IH<3UaqX6I6vrU@CuILtr z%`xvIWD`IK#shs{ec}4A1}-W%Eb%iSaJTCI$oCNfcSfM?KNsL7wR;y{=L*aO;EyXl zaX~uD0r&|z0<9STT-_yrXPg}4oTkE*u)2i@jr;I}MOZ#gm^&9d;l7b1Sorg*%EV!w zGJCY7@Hz4D-dBnL-9SlUGg1$(=DhdoBJZKZ@D(-yVsg6~Hz2ThF+zVUru6W z^7j!zV=L2K8pkxH#4N%Wj_L7G8`UTQNQSW-Dh8J05k{JohF7`*7e$zvc667sq4`3m zcYmTYu|CRGn6$bO#%#k^t%g!ve;c*5Z5cy5I-F?f_~984La5#<>Q8i+y8y9DZ#d$bn_ldK(8lk!DpwTpO5;V~TBEGq9(;MF@3)FiK|-A>y> zmG}nTQx1C;v53PQKEkrtwcS!&f#h!9g7dpmPb0Z4xf_hEuLVd{k39f9`Q8~`S z5lhdgq(*Mk7I7Hg=Wnj4=i_YD30@kBfZk%-bHEOHIN?EWnnoxTowc8-E=a-)3a4TG zv#jyUffntCp!sWu@Yg{Qdp3#3KOo~Q`p@tJ^!iRZV#pshF*Y=IA1=m_D&Pq3vC>k_ z>KKD?5!|=5nk0m7K_l4LfnkoOUNTxu!-b4Ro&b`+ff3d8=NhHG=Wz)q)AW&nYld0P z5A$F^4+(G!{RBEt3qFi3t!8X61j?pnKwd_|w_#CGk`4NW5m!{5hiXR;;Q~5(|0vP! z8ETZ9{;sC~p=?gF{JtDskY|qlFDVvdm!^fg!l_MDA0ugn$N=F>Gra{9q<}1309I)> zeay;i7ARD&uxMa#P9c521{oa_K;^&)(7hDAP$s+(|3o-I#DF8npiF0~@XT0w;2?Fh zC-gNmW;^z<{5Pb*(tn16m<>#TKhQ4fh$MlHQNu|(zfr3(|x&<8l z=L2e=HH0dMGC(%Sr;rl_BXc8a_lFoCIhHb92wIvk3apiK#AmiT^QMl;NB1T>G_{R( zv)7+0+R?Aoe?&UZ`F!oK!)fe{47mGMtu4nba$D>i$ktw!s>z=V{fwG-NeF-H4I3y{ zj>~cJoK0@iv{N@c(Hxl>)RN`!Y^0zMo`(x1OGYm`&n^x;J@j|r=~<@sG!>>;lJ&XM zk}R4IzhC2>N6msuczRC{hb2~~EmpUY3aw%lPG$iSEA$Iu#q+^LtgQU0=`4@q&d*1h z5F{6HpknJa$AA$tp>DB1*^|hlj4oMCB0@*ATr9aT|0{rO1_r+|2A6m;s=Jxgidrcl zL_*t&SVwynVx>^)=c^g)_a1~ooJ}RfKmOEE196(ZhZkS^MZmwe;JZ#7E+R3h6c5D?~?5CPqC{^V3jL$l_RB6iKq803zXg4`dH~B(7o7{~$dMf;k-Q@4t9TiRNKmTIk*tRuDF#Q7752B1T4rv9>8<o8ur0BXSH+p2zsYmmK85sykeX=M#yfQVLwmbX{!G5m8oXbS#;J2V?!6ZH2iqOH&l z>sM8#V4?RQ(M$~2iUV|c;vq(!yLJ>>Yi>8FqHkf5C_hw%bz4C z$)bW>16>cv4?-E{0yfdAXPDa219xe$iFHu?`0VOl7NE z;b(?klumPgFdaV$6mQX4u7mh5MWb9451ijuTsfYWX8QX(^P4M>Gfi*-$5VM^Hzcu~ z;1qG*c+GTRB3Vt}2yP=TFcJxtB==@u%9_xt?ASq+wHd^^@2o+{bfyajfjiYl5?V+& z@1{AJsHL$Z;LiyudeshCHvRYDP`7Tx^4S_V&UYLaU9Q`49{Z?c3gqh?d#w(X;<_|Y z2CT~x-BQ`JU}3qmO$YmT+`$UTGl_OE%BaL?2Aj@Qhpy3t&@5|78D500>d^I%;a|x; z{W1Q9w+$v2{{3@2|EhVP6S5HbYGK~HyIJ`MM$PLs|MF}+8>zyPQvzd(k4 zd}~L}gpos+cg(}IfAb3CZ8!E_Viqv?!}HsM8|6% zUS9`2ubzdh2x!^%3I6z20`CqWDC|OA|+hq)z*^+ z5dJ`<9*%((qAeNPFqsC;w-1&Nflc}!1NUj}gt?h;LJyoHL7D|zB6pVASbWZj5qS4K zmr0jEonwIKe4okaqm6V}8Jt`wahdY)DaCcudf{B%cbpBOWGyU+sHe>xN+db4zUuwN zz{#FNFHK6g*jU}Cw=2JC{#&7cVmN}uKx!BLrbl;?Z@e~^{1tDpj3dp4Q;Qml(;_*5 zP~zK+{Dvb7yO#t^;Q!tEpM~#s2IfQ{v-56}QfJ`j3I3eIpC_)s`it3<3qm6r3wtKG zMmAy3brNH$R!Dg02{SMVM)zG+d=v@}8PCX4LUg$9O5~T?fhLKzwx}nlMEJFb7WHe~ z%KCYWdO&XL`Lw$Ab{=lkUHmg!9?C-U(0f^{UR{kx!5GiVIW1PYL+d(r%q?-#@^wCB z7BUXjo=v|2e`qGK10;d_!&4Yle0&2~cL(-7cfyKV9S4RIr7jV^6oi~b1n+kF%Q9S@ z$}*kajqrXUbx!Yb$lvQCf8~^+a!Ai?uEAu}Xd`WaK`i`az{$v=eneX8Zk2ovr4q$0 zB%%NiIh$r`4$Tzo$h}$FPA#aVVTVAFK3sr4Abo1D=Q@e6<7OJE2BHlo(U8BJp-%sn z)WH)9X=&YLp$@bhLPz2v51~it?$6QG?C|ucszhuCBTP+jr(j(v+==<(*chZgCD8MXT$z$g^%Gofx;zlgKp%VZg;%NKU} zBEs=mPTvRQc4z)>W69Gf?g}i56oKb6O7g#(zd6KB2SIr`S6<#3fk2$!sU-iPvE&Lo zxw!7$evxpGiyDj5BRS5<+kjS5`{hEz6C$2dK=98lI0J!#SrU zFcH?d3cs;F3HkXBQY+2efHx=P(QfO}iJVZ4u9xB&>&*Y&@Y0PzhEVb-8Glh#bB;Tm z4NA2K?3QxEr6oQE_)dUK^Nhz%`7~omIbN3pN+L)cvc8W2u{4%kz$WW3j41e_Ry!wh z!YODc+zEfYCob`fvgFrT@-2FWKBq{n-mPZc(hT6+Cv=e%;Mg`*ju)Qr`0dJ3E6ADf>i8Ik75 zov|9?81h`PmHb^b3>!R1a^%;#!Gl^uXdaZ+nHIsH8qe%PuGX}uIY`a3Zf|P6y+&?D zk6hAvTZ~&M2Ug3M+s(WkjoUSFX&_}=)X>%E>AuVtl zAk3ynebq@K2rex0dXJ|Vi?=}&vTas>OIJtyIlg{kYyItC#Z*r+7C#hI{cT+x^RK<0 zIPELb1=-#JJ(or8CVDPMy*w2NiTAl=p96@WMXiSECuWYJ*>HnnJt3{1WsgIf^)Vza ziM|6fiOa%7COANdjbXC33!wyB9KEE)mCgKyg^KE-I#LDt-`5#o+{ExXRN}D3a>NK0 z7Nr^%gc`f+&Sp{tXOlrQxT^#P+l1YO&AjhfG&mQ4tldSiu(sliLp(I0y|q zdF+LF(Bo&q1ng5G?Gp?I|1gpw<44N7j31Lfd1xU4R#=Y)3!W@5nNEq@h=D#C=FUBUYL5c3Ay-M|*T}NyGH* zA~JxliMy_ilBhsRWJ9CxFZRkUX&J@<6G+M$lznHk!9lE8_@M8uzb z|06=QpVpbkrqnjog``rX1!x%udc}bt{Ci)t6J+b>k;|f9ibD4#=2I zzngymAEX55aeWj07ypl$bL>K4HYbP3`+3=m@v{{#4BV*?x3#et7?^ z>C>A~nH5`4o~uRQwwlJocZAh?xcr5g2$tOkqlp7`Hk;c&l6=qQU>GqAgTX~*JxY9= zoDKVv;DaE`fAiEp^3ak%VI(|IUS1N&f{D8^%XrmoQ2F`0z*)0Ag(Cx%GGpNO7eHz2f65$;F(-95($fY)p=Y%MwSo@)7_cF z$-Fd&d|<+4w&^o$3CPDJ)`E>3NWymc*&%<16Cdg-@!y6p*g)+qtiVgikJEb$cKcbl zHLk$jNwC{RX(jpJSKPt$sY&FSGFX9er;A?)b?@?>P+dndBV_@C3O~>p;0g_N*c+!0 z;iNkkKe8~u`aoLQQfreiB7~d zF>b*%J7qPpojJaISdxFh2r!Y#g{TOyn+k8~GSD33FR6_f%ZhN1*+*hY{u>puIB3Ku z9TSGP4!TkG$>yM$74rjw?r^v+hFLIR3_EtrvpD8VO$)|QG$C*fFgp2BNuZpxa5BH} zv$+niarkc9qH;-QL+75(vO0(3pg@$*m3svHHv>emw#3x#_>r!%HTuvXlFcg8(YC~? zyr?m`Q_iG1S0@lhGgpakzti^?{H0p>C=G&bYyw3m`NW;(%0FQ&Ax`1XCSMrt>&ic7 zECCB8On~z{zKF^5Kq5J8Vo|+f=6QWd{sv=7GtfZKGll-dMDNE2`7?iqu|&@fFHK_o zZYBBuGQ5eMru$y{u+X%NT6NP-|R^1iy^bYkRk>`7vglgLb4HWgv%5DjG^99jbw zgymx7{7%GsA3Tu8$hpfmB#bA!)uCIykBB7Wdu(MHPDpZ3O0qk}HFBe>IMAMf;S3_9 zS(V)`E*fu3f)u@;s)W7%{>`2GbD}e99upl@(kKyb>_2tBN z`d{=eT?BYARtzyuHhPKw7+TQAp^0^FqV_!l#D$H3Qe#jJHUd(lV`J=Dr8;tigGcbb z>K=q$Wa?QiRt)~vh!Z?gqxKOHUm`40j%GK{6}Tq5>K-`q`4YyF9JCLM)(k_*BFTxy z&R>^r7k2lp?vJ1igAle6s#IR!JKVk^ax5oue;R6O|9C@&;%KAwfq@hbHcgx0TZ`L~Ahi0VPJr0|`EBhl zPCu!EEtJsJy6+JnGA8XYF_ouf$rNPy_N`B5Uy&`I|26=6n~UcUBUUrv-N|H|$j-z1 z1JfDMS=(4Qtm9l?72g)eR%+EnvAqsqbDef`wSQ-w-v#)sJ_>lLgC5Gn44HDL5jUB91bFeQaN0DJpd21F8Q^h#iH*@5b9B zX~WpoPx>D#b^dbC6yUS^;C^(KhyO@cRX|_GyTHjJm6eyLsN7b=2khKxnVrPstCY(Xl&Ni#=K^$X5 zH2-X`vE*9RtjasXa|)%!)1xsV6TwqD#psAMJsJg|>IxH!s+yff&C_^c)yIRWM$K|O zplBL3pWv<--UbIj{1kbcZ!l`OKN)v7FG|DTN$$S9cc+E3W(ILL4=L5&=1Nar&Vb4h z2#6G|Ln?bhiBY^2@d;)%Ljj4yLw5z)P?K>m3B7g$^jGAVQy6T>uz{A^e$7RWlxHI#w$uO2t`mx9;RXU>zi7XD79v(u_ zz%jh6Qv8R*Rhi}t%uVD1!gLo(t^r({Zv?j;pAWJu)poUh2m@ufo#Ef#K$g{%NAfBlpb4jMkGK;6>BPsxoIW#UQe6-13dc8AM?wc~<4SbmN0fpG zG#_$t(ejDKgNbZ4k75JQu?tP_$8c&aPm;k;Yxxms9LtZ0Skb3`6rI!GZ0gEY$cwng zCnz1pjwW8Q{w+hobjn_n{PmM0&`+Qw!rKNunZh%=DfOWlv{ z1guAxL`*%evPxyc;B zfn-cpr{F2fG;-38s?iI0_32*>CK;`g7Pgr~50~~0IDwq-l)0b|SE8jUf#Sg!C@ODM8{wCbIxnz8 zPz;#1XeOrRth7}OHXtyH!i^e02K~z_l;@-ciTZk);{qX9;$euV)&Uc9+#~Qer^tAu zskkd5ig!l}jnzAmhg)JyM0$k=61s=e(jUdcO!(K|k)7LNqPTxNCRFc1|2sUapZ$N0 zhu<^A28?e8Qi43i6uBE8hAW`ylRRCaBy&8SoG={N6G{D+f4IV=_c4pSSBEOCf)H^0 z9FCjHABd634oaIqEDchyw2+!4AhgEhjM3bSl7n!x>_q`j&nm%&6l-rm19xX=5;7P7 zhb-VY-jB<4hY_n)+XmQkC>s!}x6&LuWdjPYCU$bhN?0L>r`iQVY;1 zSqcrsG!UKASukn;OED=D*?6!uBu~c zU*h~d!O!&m#E)zlpmEu|Ck=WN#-K~MtGpk7EqY4l6@jg0bhA<#^36%98-%5Q_QZ=% zB4Q4hh~6U%(lP$+=3Ib0j?U_pS3KoI|%xfnA6?w1?HK4MZ-c zGiIQNL?N(+bL-r5?NO${T41DycVnbMrsEWI7l)O}Ql=(PXKia>!Hw#gaw1?eCvXqq zR&?JERg7CrUl1Wp{XLJBKu-)NEi|dsUDxzmh%tbEAU;>jK|lO)G>l??=lGw&pADqC z4}v85n>~|eHhEt{X$X^-)Bc2@w_p-`N`pVWkh$>-3f1T6W6*56$YcpzopMFs5&gDT zLxdiDPCyi<2#BV_3|_qjFYjWX zx*-)glMlk(5pT}S-J#AT_L>Uw_|RJrkWyW+jlMEF+#f};~U}+q=0Td^f9~KrfA&S&ktMD|& zKOLiblgXjowu}56Pp5qG6<7n?2kWW!z}@8(3Iq$d${9#bQ!mTD114`V9%QH8WNTiX zxKm>r?Vw6OAcS|){`#x+;L7b&8VhBaQ&bQ81|4@ z*f!G~%^z~qU;O!?=sobm>@lvm!LOD7MpU6WyqJw83h$;;;1>jKGe8MxsF7nk9wj@F9XcbP z1@!oS+X4O2TaF4tBmDslM8Sa6C@d54rw|m3!O>HHs@$9Ps7i5yB!(D|_J{tY^_Tx@{D>-a zJpNh#f8%Gn|BLbe?EicG^DcqxL(<}76Ch6>{M!{acm&qOaQ+4x@XALH+ViG*_?(VA8oE24BjW{-@r6S=zQ7X)5nl+BSK;2(@fxtM za8OsubA22X-5YvFm|q}%UBfxF)?jlHqlM3Ara9sFiPVC%ZI4WhyW`fLw*JC#M6gf2 zsK4|SPtQNs?4UBT=br;58^vk@a)9Q?X(M{>vmec*YBq4 z4mL~gcSW!&$Hk-Q{BAO2ToxI|^rv(~wwOekM72ATT!?9?V@;~`SOwGARaCdNEMG$o zA#_N_rM{ix4D>;Rjd1mtYQ#gVwy1oW4RXU%>o8NOU`;AtY7O{Q5M3m)BC~d0qPJl6 zc1s;!OC2$UIgq$hr9cHHbYH_D1RSTKQ`qXQjvH<9S1Gk^{O!FAY@vgLSYa@IlTr}( zzmT(2A#n93(iDU`Mjfdc;umw;cN!Slu{u7oEBt>MCX<0r+_INW>=ca|t)bfp+WZs;yv zta_{`wuv~|qQ?^u$D4tJ$gSJ1YQXW~-opkMHF~y(X&)eF3YdSxo6Wq%wX^T8kHC zp%w8Y+B^uB{^UDab3_jdqnqLg3o|# z@!Sgv3uPfkl?BJB5q zcA%Tz(!3-yKX5^uNdU-U2M zoeTdWgZ@Pt=YDD47Ps5sZJFmu#UhQjzEI8Ifdz~%2+6)9N%Ab`-ISr7zB;rIe(0kv zvmr`mHR#qS{DjV*nKvEn7qb04wx7pdnpi1t)lJJ9S7*AA#96o&V@}A82oiBr<$J@E zuttX6Ur;~W)XsnDi1;|J>zPG$m$~T6SUELO?O%uKf_iJDHE!};8iUOlp~@d{V6=bz z4EaAUzsX*I@J41B4?cl@cq3OVI>Q^e1p9pOE4n^`$3|^7s#~afYddzwT!P=;NSS-m z%%C@NgS$T)sqNHS=)k8agv>On6869Z93N%bBgXm)JgEfr(LbT`L#@@M*q>vI5oc;0 ziiJLq9^ScVx;Jv8JI5QjQy*5WJ0%sXV=JbxVzspYByMAhT@zc3dmGg?Z2vxK|1S6K z-pD-9xT?xhoTyr}#nVF;6jeV=&%)P{RRmPuc5U=U8{zZ4kxF-0-*Huk4`YQ##{m88 zw3xBWpgwyKMY>x!Ed#npa66gIHuoerl*k~pb3{9$L;K73IYP|uv6;PttET^J7#`@K zLmtg0k7j#Y$`+jq{pD@Bc+oI#%S88h+bUd6 zQ@kxR7Y*^Y+~7tMJnG+cZ@#W271V7kKgrv2v%4qf#}G3&+OPEV(S@vxcvZ||nGm_@ zh_!|LS#U9fLpVj!^3^a4EB3-Cu+k=!r{~|NTexWx$qVt29y`D7*Wg8rzntSQc0WZ=>je0+-C|E}o2QOkr0bO5Q*(LgQyTZs7-i20-- z<9`ggA^ay^6U^#0_9DCVn~uP;B-#xeoYSCYIH;0ke#^MuCyi8!mOh?jejl;C5gFAS zS;%fc0MJ(b&OoUcU&j5inFiMozR*m3&)kj^j$n(F16)D%IIFR6N}{v@ql6b$tLig& ziO}5=77&XJS5GW5?Xh^arL=-@DI9wewLN|*nH`oXfb`ln#wPr`?zdnvV4L9#84C3K z5U!7{$5 z3Q0mckQ{oWy*5IkgW3t#bF3j;0@aIV>M11p5FWA4Glp-20?|so1Hf%kav2beRI)A&d zOp=NqYlRqIpWYbg!apEGHl-vm19Z(MT`_)F{(*{et{l<)J$Rh-)yvnPtLsnjJm^^Z ze)xI}eJ2!Y`NI4UFf70n4p_szSlo`Gw1D)Lr(pBR;DpRjKPW!1m_%$aF%cHCr@1}Q z1$E&2wvca(g}k{CkS!G!JI%c=^f#JSU$gcK6QRo4HyFtY0HX&I6+XO>^Qn+Hx$FPAKl+8n0!fsz@j!D3TO5h84x=u6 zTD0bQ>ASW_J6l?_e3oBc7)4s^JnlZ6&uA@2KrLg!LM;vp5A%dkW-}y+m0v{K)whF4 zZF;_(*N73LdyDS7rvI@iI$8THzJg7#&as4@bi*XW8+xn~##~H%kA;OaI!$$^Z&Vg^?B-=Z=EP zpH3z}iFK~AbhD0`LCAE>3?hPXoeKwXVD~_hx8VBq9JYj#(JVhzj{_3XLZvFZfXmL< z?*mvtY_qF4m#|BL#n+JO!_0|awGfF^1=1$?7+^px34{t}*%dmF4Ry4Qe zpA5To$&XtwKB^buVumBb*OImRLO@X<;1jQ+J;;a}JDHx$k;x$1-_uKjGrZ#t&?<+;v71Xm-%ZhaO6GT+w$ zB=bwO_<*cPdJu($KO~&Z6b-mAcVbgzf_of%mpgEW{P#8FuU@uwaQPfR$Mf*1@L{gN zjs0AefkeoVx4cot#i>Ktruc2h0WIMW*RICmU+cRr70D(3gdopHudNX)i3Y$>x(`*aO9}}2 z(~#Z964A3~^Oz|!EpQSoEK?FYB3T~5h+^$|3YSvssrKJi%ZOYOoqs5wlExgNVl{EE81xvF%JeC4 zSC^Q1epHhjJ*-js?zbAH`E(o| zhZ2#`0*-eM;mx1Fu^BI_Zw2nU%-e5r&${!*^XRXXJAKnKy5LlU3?s8u@qWKb=tX!~ zTxgQ{J(6P@tH^KgA-Vq()4(eHlBE>RpSz-eulw^s`$PSm#&tdg^1G#t0=O;l-P(63DR~*U< z7S3=a&`Csn7P`-W6z@5>w{cb#b03V}k6npd;*8aZ5mq6fN?a|Ru_hSvx8G<{uj5Z3 zh>h5c`6%x3$VBfn?8mJJAI~bcaK?A)rQL$FB5NLX859)syObEbJ~UPaU6Ox^WJv}s%{<^r>Ccphso z9`*FUaeP0~98?2N1`GmJi2T}5Ptr}Xq>PEE=I)l&gziZTeSy`())0rRU-SDjd0e~5 zF|l@$V}A$bES!jzjc=Gip07!PZAkOq1EkH(R5#1FZS4g`)r^$T@M`YbDwNNmY?jZV zY!D#-tMb^Cw%n)A3(d|!}`giU=psM1bKyX zB3G&`d2Yv-kPj2!vFY9aO6I~;+sq92!0siu`?s9+eFWc?jV5WUzp#jvq@BeRpRmg8 z!#C%)<$}$pqqHg6+Nu<{F5d>!r4O*da)DL?t~WBxb1Ox&3O}f*=)zK9Q zw_t#b28r6Khw(co$KxKrotlfIXXvYx>y;cRkaDzd$HyliKHgB|-H-VA2E@me%qvTb z;%yQi-yywb9CYVva{yO4VCUQRij9|X@GqbQ_Eu5Ck$(wPZG?p__FtY>RDJBd3pTu9 zENz4g>-8f%dUZgLQe)|Fp=t2r_@XC9&%YKoZ*-3I_6!Bu2J8fG^4~LR??Wrb>i#&x z=TBVI8Vz3t`zv)7qgK9-8c3hL%PNhJ&SJSZEpdGzd()yS_M^@*JVcFs3rFX{qY0#6 z@GqTr2#cwIjv{qMKcZbV9IA?}z=>?xy2;2{f zf;dpv-AJ5=P(l0?tCmswItrkI>wT-j^Z5OZk#=b^{`CLGxMnNJ+*3Z8c zH@8n4@G?F^5B{}V{0BH39O>kqr^NMDDDP{*{(iQJ&v)6CvD05{Zu+o23!z+8u>1e;&dL7}{2clS#V9G4v%H0$1uUMV+aFQi`7OcE#cW&ZOZn4S-gwOd z;AD+$ctrbYkFOT%wZzX``z;t>;Wt630WAIp6i3lj*GBfwzYaI2%wO{_&uJ(>$S(gn z>q~{u9#ojq+CD28wZG?k$nQR@ec5s$du=I=Y85#GM@SROJ5~QW=s6vQU)RF!nQ0oY zTb+M^jbjH2I$wnrS$t*BufOu(s|@MeblaYB#w+aj^(Yz)9ngi2-F5j<495?oJRgJ77exHn$?T1tdbEpt1`FIZV*Y*14Wzf&>6(O8g;`=A`Gvj_6xqkU^ zFq|?m_fzf;hgq>AhE&wpe|P|kc2vSl8eEQRTVW@CVY!fthwKS#o2oB_E19G0An?#< zfFGoc99QG4mCPU;u|9y+K_EgspJX{wR5#Eqb|%EQIG3u`xxyXe4=b^%r{fQA4JLqt zGQWa}*V8WR3hR0Zbftl5#+BjGG_W=N;}l#Nj6lzEebqW(;DM}J@>{#P@*POo%Eb)< zPh%h!{~v8C#}A|SVUEo{Qp?i5#n7ZHR%rdJ8>jwV^F*xvg=N1dQ(ZCKR=@0w`XgfH zP`|mPh*ShGNN@bQHz1638X7r)V?i;FMeAc3HTL1-#YT838R!_eYJxy*-EcOL{*A0! z?1afCiF=_BSi30U?)J(&Z$X+>!&jCK_a}!RCMnIVa1S{|0y5=)j;9*5I(x zhVzd8m>R{8HVT1Ze@x{Ge*Kpjzh$Cz>)9)f9@4teP8X^$FLp(8l+l0o^1S3N~8@GV;kJ# zuh)2Dk$e$CrMF){2ZstU7ljKwo&O*dbNMnt4Z;&mCD_fFh>-_FGQ+XxzFnR5OziR* z7tgGP0zlL-n4YYAVagKPDm|LkRW$5|L#%~h0*+Jv%@J-?M?U1(bW?WDxmCy-68TmM zdNAWf<&M_Wg0km8XQ?nkEFJPO>BZVFEO{^eS8}itTV+Fx0Y`tRzYPPm!EHn`KI*o= zYXv@2t9dg#iVwO}81{n_e=qnK-J?H!TT7U`zZ$(n28%vyfSb@s5hStT$mDrQyZ^dk z5(YjT1{l6J?DO#tIP_>|L5<4avxD~f=HATK9@(Jm#m?5u8Q~G6L|AiHn_jg4{~*Oc zX@3saVwN3BC*A&?V zIu5P?Uc0LPJy$3?+lev35E+yajJPPJ~3|hr$HM;BgUAV+ifT^dZ)!CjZ=|2GbhTFEeT^EK?Lgt|N1vhr@KYH8?;o0q$_#)T+CEDB z`#e%6%B)?V1icX(tfX>G;VXZsiPxOU1|Q`xd2gS;<88)?!5d`o)>4r7SU;m?nLN=P zWUTurW$p!S`Ahxb5yG+0F9Gx7OT~`2Fn>@@yMR-?DFtxIHopnjuJ#PpZo{hhRui|O zYCcvCzr)T(wRgdZNN56ZZ9i{YNv&mxOsfQOOLm$i*AA@}sk|S_cEaKU8z{E-iFIt|a45FU zz};Y$O5|uIcb}e%Ejc}fP?ChVU5%AlX6!CRohNw`8HR?il}j{x1pHrJozjL|B_QtqdVv3ex?$EDa?aOz`3lI+j1OrQAIT3pqOz#7p*+C(RC$S>+= z)IKi6sS&C=y?K^9D0!NcTiPY|Kh|Er%tyt29L^75WXX`R{`aMh#PMy z*liM<9nl@qIRfaAq^Z&#FiZ8h_jE^=yx*38I@ut|KR5T+m=ON45{p`GEwWS}gwkME zEKmKP*edy7JqDRV!oVYvoTx+uY*C1FY;7*|?IZ)y*}ysLM$HLYx2PWZgP-#KuC=i^ zeSRNoFYe_&6@Sy+8KGUkH~0s?`ni$+)zaUneFKkR31d7lq(kA0DlU8roabyv1Wu31 zGFA3uAmCWOgYt#Uf5iX()fPFQ|0+hfCNuK{&M?G}9f#WChgdA7VJin0Hs85?moc}s z>*=Hl^>K+L-tCU+W2mfcYM{hwEtd;kZ1pvYR?vA$^VK&7&q0~3>p<(kk~Si(C8Anged2*U3}kcI}x{0{p_Dwj`_M( zj-?QWe+W-GBhzB{s{Gb2tQaNW;XTec&=s<8t7^MSoLAP?N!!;xLQ25iF1MQMN9R@l zP}};EGSFx?&vl43oA<0qh^=g?Xm7@N{M*=5YtjM#ar%30xnb9G_QCc~$M@BmNB9ao zAy51_x^@9{tq;>9&~N|-2L9XfKH>>SMHF`8{3xtBg+g(HvH3R?jNM>BJ+qbNRq~5^ z?j00<6@{bv3(fX0mY&P{-bkXc^dV9WQ{39CaRd30{GR85UkHxmk>NOLoBqthldaUl zqVx|qZhIGSF2=`(#YsT|oy{4VsI>V)g_)8ameV={c+rXP#x3%*e&4aMaN?EZ@}?aoMobxY$s8zakiTz9zt{R z{;$0q{DX(tJ-A#Mp)1)fq~FvS>dE5XNay(z@wXGcVB(D=!H)ZTg)lGe=2g%?zc&PD8FU<125qyjR?aTft z{OYd3SuG-W@2HxI=EC!-U+})?{GZ`(s%Kz)xbv{~Z^v&zQCDju{jeIzC+DGx;TeJ| zy$~VYfGZ=p*KE}h+`}q)D+;BvnuI*pSE27XN&HLHZ8r^Sqg%;xlrjx}x~zZv1c&#f zFWI!U2_|rl}=Mh#IOXJ3#ud79sBEc+M4$@X7){_$}ZN7Ix+o!`3@ zPasi}+KUwO3E=1f&iq3>G_KvGtp8ioI8EyCJ7h}RdfEPy-5Gw8j3cLhWTGn5#^$mB>*pQez8GqY6<4hb95FPp@NYK>?;1N%4jiOCBb>LS-XlW@?4EK}ma&piId0be< zra%N<&8n2Eo7qgWvksY99X+J(5#Q%_@v!ARYD;;po^V4e(Yq4O0rwh_7&4Hgr)}7C z1Q*vvEUjBN#Ltgbz%zY3D^I{V9@t8>$PU2k-zGiu8yXE_-u~vAhQgSYC_5`SGbNCm zsJdYq7S)QaKDx#dnxG-Gbq||mcUzCnSg?%9kDE|Ne<*{rfFr~6Gd|hErgp0JZ?TuL z^vjbbZ2GM*NI$W%av*@5ws0PaX4SD6JM@U0uVb@cyQFj`u-yrmYH~Y(O#zGj=sTVv z@S^$X(FC^pLRkXfBte4ZHDrmOAjV-y9!8oNQHcpIQ7B>zBJ&w@HZ28V^Pif(R12`w zp#VRLf>wN&@;g&+uZSD_k4f!}&02oOzuB?W3M`(~ep0CoK9Hu3$$-#jlolepShnmqC}zj>jD4$88dK@?kxW5#dmunRfv{U*ce0Q zv`a>g?3{vUdfi`2q1&uwIhF9Oc{C4-(b`Zyu?e;64PvY9 zG-8#`dO+b)6sqfk{FJFMe9HyA!T1zT{xg>SQaWQDjfBGGR?Awh#K)t-RbN%{tS27y zgpuq=C9FSrTe{B27VwrX^dfqP{kTo>bTwA@4p(Xap{1**$atl+ds}*Va13wnP$7TuEZjFkZ%{Y_j;{wJN$u@FAW03M_dbO^4y0}f zF|P^Lb$9qhcDkhj$HXse|6u*Q$D(XR)8xJeQq`e$duS7eIJ>DWD~0M}2wZ|x7h1!% z1imkH@llc2xRyCTg?%CSjA7$OyT%`gZTt}OTsms}x=;w`zcZw6f(kekIfLX+BawXA ziHWndR>>Pu1zHJFfT=*qLRgtou|BxPSjOB5d*O>VOVd@)$k{A8sYu&x%;u2vk9;NU z*-I+%---`joQH2HR4jDCMjm40zNhqw$N@(=98P>(NKSl|k0_kosC8j8sRPc`d}MVF zY)mGyWB4{)t`JDOe%-Fq*JOR&LIw!Ra!50=Xfx!@%o5)X_}ta4a8fQ`N~++;c_Ao4 z*yUzP$-%&A+K$20Ixl{sqI)YW5-g{g}kOG-?4ir&l4jobi!HK{>ho_8Y$q!wtz`f z0(~xX`Uh=y`d!;ooc?>ar^QTl*;(a6|JVepV3VpHkaA)}>Vw$PfrWi|0X$RXNhH-_ zQ86xCJ$~b%=m)jnQ|@n$OIeTKco^FKQEWn9-0HD?zQmgt5OVag=}KnOmCPjM9FfoC z#;t&-7W}P-?9&xHdus4oa;+BNMlBKSyR*``Q4MImH!F=_ z{=oK~McBS`9P6z3SRJY~T45%edUWQ;!vWY=r!Dh%<0+)(Nh$CeP1z zdcW&5{}lYi^wH_h2@iD|ujK^81Mmd%N2l?64tBA5zr*~|IU^_B2}NW8;W-#wp|QM? zZMC2&$NZ~Ntn2*Yf`8mXvpfBH;nBEF@pQ%(*}U*DX!N`=4miPQSHA1!aTMV_8~=ao zy?cC=#q~e_Jh^UeBq%B%>VlCHL0Vm)Pqc!>0^mWL!v3CYyUGrv73&yrqYBB?W0(h zOy5FPqOKKV@jmmxF1(*RkT3X;=#-^+s^$)2S=n{p2xdLU)!vGT7{y;6SQBfLH74IL z1D_4aKcv0|;s*I2Oo#mNf>hM`?TXyoRrjF)S~))a&1IqEgk|<6ofn~ktJL>v#UmtG zveC&6JW*1%GyE8U%(8+*W%$4xe*pAQnTdYe-Ge!rc+sLOjG zQGH(xF9#(4lo5Yi#2**QMWu3y;UO_{h2_y)K8fnUg0UjM5S$nTZM)!Uz~YIL3C|s& z*X-e86H!3CngZkl3Ch~vv3FaT6a(zjJo%2j6O!?cy}}2DZpU#wwVjKzd(oG^6viq> zrSEU0N@@Rm>$9ZisY*KM$2*6pvTW0+;-ZrBStZlTI#ROmwTLXo`~rR~Y}EzF5e2dR z=O@I`9BTL~ew`}yH1_BJrWh#>KmU<XXJMeC`86n*i za%|##&^Yx)pJo19JRZ%f0SUvthl-BB!>fTQxr|;K@j*JhWs(LVzKZcG?59=O+7}N7 zR!n*I+JPt|c7S94WdL3O4)zLhJNNosV$%@AyQ1LL@{T{NPh^x2fA!){e5n|xFlKj- z8AR{izmpmvPXFNJVxIR?@hR6*1ggYI2d#|U3R%ies0?3L!Od%ZvLY^d`64vFvmgix3 zo)R@=IxzgRDQw0H%r>+ z1t#+=O4iJ;-07;oQzIMa&p=`}-YrFz3qElRh#LpvI2IirEGyskUdqL5hvihzrpP#15TRl(%voaIEeXd|1UA8qJennl9+y8hkW(iOiNtF zCX0L=!KdTU;M`T~NRkvfe6wuO5JmrJd|-LXk^T508|b?`Ka7?U*Ce;p*>~c#T=Mjc z7T>~pTJ_xY`D+%It$sWA2I^33$j-(~z82#^iM1CLOvj5fq z=|dG$4&|q-M(MkAXNq^WL_4=;%|d)1`Pv#|MK+$?u0id_ zPCURJzP21&@bsWM_c%_Wi5`!3ceAFuAH!2Zs=IG^>R7tFnY+7k4t00=R`h)3oM}@F zW_4Vil`LP|La&nA*-o8~*_>vBtBz2I_M{_8ne4F^(AjEd!ePF#@4Qzx%~2%0_j#(6*|x;lFP`A8TgRw(PY zLOf?sR`4z@gxIEgx4biD3Yj=Q@uFK6)ZU5#dY}kaJA_2k2y3CNqBDO8ecz_6Xw{K3 za&Mq|%9ZP-eC<#y%JUlW{q8S=KY*4Wga?Q5YNei!pQMgq0if*&&r-!)a^?N;FezF+ z1@zS$Sa4!ZtH{9THn7fKKo3x#vHxE<@l+JvA`Hyj)w@9rscaHy`Uvj&m56}QC2hm8 z#F8V=y`lV#4)C*VTQ}BA(w(XMuzxSi zqrde$`ncr!Ub>^EGx53uQVkITQ+5uy-2^zTw8d+14hs;_)>ynN<@hnqijMi`ZRGuTaejcdQ$VZ>#Fp{?J3d?=TtEhxBvw80)|q;yAQtxK%hEnR@;e>H z3JgT|K_qBQrUR<@^n7y4g%$L|Z9(gKf>siZ{SS!=XIIag|N8gQ{XZe~2x|5b55VYd z(OUVQ3Os{G58z#}VRte;fOmBK+huEiB-nw2im>Cv3-{Hwt$3ffG8H=~4ka-X6vo~v zF3xvvBJ`c97ygE71BYMfIbOAs*g=m!xL~R(&Wpk@S;M%+CM%o*Fj<8z!yCpoiWLSw zHpo^h+6+}lP}KIQ1q%xfYgm3K_2>X~p4da&ElT!!)i`DKY&u9X8+#@7nn#gY|Cn9Q zyB8}lAUQAjQZMIt*5z_~$-0y_`M&Y_JIPw$@lDbXA>2#Eu!O=wteCPh_eXESIk%a*EeBY5YKI~FjoP=;zD)+|aN%Um&#$m@x`|-#bZSU@1K&PlwsRpRQ+#4s# zQiG0%1#*9MIMJ7T zBRLm^F(eROKOZ*`o05CeEW|20e@>2_a(tzVykL*)pMcB_YL?6_hqD?pCHWnSNz#Pu zKzN13b*6Uz8vV5OH`Gt^UTogyL4Bv-vVzzG+jZ9LOQ+2#>lh>*0>uR|6&>XrS7Vf$ ze$l<@DbQlzN@$fgc+EZ%gz1!kfSIlixLC> z$a&F3Phl*2Ml3oM(F$^-ecqERa`*P6i>$pEw(zfrJluvN*xqxND)Bys%m$tJ+Tw!R z_D3*6wCmpAYCp7Ls3!>{sIu|M)Wp=IpNlpY*fTZ8i~ z2ZQxcwXZ=)#koDW2|nz3@Yhm%iIE~cK{2A$qP=eXgt|sCjp(C~DB?rjOd5Y5lv@De z#kWZDT@aj)KHe$(5qqR|yBY`dq*s7e&uRrZ<@MYj-3VXVhW$(Ms}q!-`(D(G$Nmhf zk4^T!NA&;4&D8%j)c-ZqX%GVXegz~TnwW;!14nDs{J#_|cHdBlCNBZimgM0eut;?*vWgEOmQvWT%`8n(N4bb=->hS3} z+JEmkay@pmVIp*<-n@cdZ^Iuq=(!#>VthRtkJFkX6El)vE#QrlIe)(w@9gNvxn?A7RHa-+EQi}7HHb8QQ0{`O5TWz02hebwj|Q@y z*$USw64$ljbvK0T4vFhDfoqe8ah*iC@K&Y^1|ZTikTAvCci(Pm-~RK!duxMialtyFug696RC+YAZ;Kx&z_(IG9xbm>Ofb&Aw zY@=_;buJjZxf*5he8-_ff~wd?hl5b&^(2A5nEKuy)YB>G!{F#eANuzvhOu>!Am+`U z$qzxiccq>%D$5XAyHbx+(N!0$ZDwYD@jb0fr42o8RBfN_ua1-bX_I(--E}QqA6>TDJbhYI$FKkR zDarokZ{OK+=aT9Pc{nfPz&m!@E9C&({W!hFCOQC3)Vbln&tq-X#i;$cHDS7OR6hK0g}DPg-hubae;u9P>HLr@ zcikO?UOeg%DW9?@_j){EiMfGZCs46ty7SW6ozO;J{Hpz_~ObIEcNx|(k2*a zc9Og1`s+mtstM)JvVy(zCdz`(%eEc9sBHM&vQ^y?F|(9)4#Q$wFfv51hj!6oeB~4( za*K-);VdkQHFb2jxWl3{8et_wBzX(eAeVzSuswzw}3Hz;z$P zP6DqV$?u}DQ-v@eA|fB}PZHtNV&jB()w!IQA3cJ5=u;x36`*+g7wtcycy3-wK7GX( z>{fU>e*hX4jw$a3U_!_jr{Xv|x(|vt^>mnd^k%KKvc{e-?g;onJDEy+A6T%# zK-#rzX(;OG?ZjmGTp2L+)E^<6M!D%$;ow`_dDLZ2&^UQ*5;*5vTbzO*9|xpKy{s+H zMlgoh?aUp>hA*!m&|zQPMGQD)?QO|MPvgVi9Nj|IV0{I(y$P;RjMrCsUj9(5r8Wx+ z?!_G;%!7M2Mr5Z9-oMV)3(%T*Bwf&H^aJe+xej5>iuromM`>{0rImG_f8yF{#@Z`V z*3NXSotuqA3%RTBb71M$@qAIoUyC|kF6wxrWNjMWd|NbrPjTmJqy2%a-Y6RWX3_Xp zO4gR9l$g7>Mbe8p_L%#M#=lwId0Wz@Pwna{8omvsaoXzE;09P+cvPMW1ESbSBg9DPX6TOXSNj$--FV)pI2hOxNXOYsNH-~ z)&JYv<^PJ-KPbNb(K~ON9<6_HeEr9l7Cs!Ue^`9|=Iy2biPrCouYcd2VNbOF{P_BR zd#Ge>wEj`?_5bcNcqzF3W8&+7_KnLsqV*TX*FR$5hDFi(C&t%*>*6~>zvBPo`1;pR zUG`A4{`2GOAMSXfoa;}sR8PH4Qqb{g(IIryYNPIqQ@<)2{uavO*5GLwFF*=P%)Lb& zFKmmXLL8{nZAq@*yCOxyw}WDo8Y4=*Sz^9g)bZA~?HLdXDz(nMWWkjqi-x}nx*=<# z(6$mtM921R+Xf({LU$+sYS+g7MZ;eJ@jx|5lzOGad<_(B+c608A<4QTZ`|uqvPOwg z8nUVel_W*UI=?TnuKVELeN0wqUSD+WKJwa!QM&T`qU(b{zBfEd*W|wFdOiL7JEC-D z_eIxDIe$4ArOVkDUH=@kU|N)}iG9(Py8nNE8Kuk77hQ+%|McHcx`y>d*PBVcrYK#7 zebM#9iqV}+m+Wk7H&Wk1l1Rder+jl1NhdS|sS8py5WzRieI!`deYN-|5-F$!(iNm< zvPh3?CwUrC`?FTuoD48hRHS6`NQnqJ%AWlGe{eGeV5Fr;!{BJ(9`i-2v*e>^AHdB# zZJodT)8A&`<}huYH8Zw;g`17Q|Pu(rz7Q`V&5X1=z{DSQ7+1F}$C=lef-`vcrOUt8zl<@cS2n+|QA?n@teUbMu< zS<2gtW!_QLC%8PK;9yY(`UdRZ4Q#{Y-E9#t0aFR}?~jj;o?4UvJm~lrP-L4wx;lZX8$! z|tDx*tqK{`EY)$y=Ouc5H> zl>gjE&W&v_Ti?bj4|?vHiAp+UY4Pr^vW{PzA&D~g? zU%I9`znDHFI(^OM`PlytaHtU_Mr3#Z<#ygqQWUtra*+@T`$|>E}m09ssNj{N&PxWYsXl*lQD-H>iIee)x+LsAI9H4Z`%`ex*>A$-;SA127p4s9cw_t* z=60NLcLuSD+gJiP_yKS~@S6iC)8TV`(0;R%`m|{Wtwmel?O64E%?>QiMegTs{rf1s zEhXabBaX$rOzcBqL(i+f$2PO}eC(1M@Xkf6oXNDxncUMvl_X)C6YJ-b%MVkxFQ-Lu z&ieJ#-S}=I$p}`{r%cO)1FbXlj&%^{PUJ_0w?XtYVO;gRYe&yqRNkk5EceC>NlC2w zxSeS56Ak{dEj#net{(Z~L>!KzlYd)Ied5=bTwS{I9!l1fZ5c87qJt$ve+7k7O&`&$ z&Tqk(m`7~O{{ekc<5KE`{3~h5%tf?1zrF+osu8_B-&=xVQ-x?l{``_P4f%5rZOLC) zvZf{f5=60wRI&zVl|`g*HoI6L0l*STPP!mGKd$@2?SA@Oc~Vn z5-@{Gq)-NNpahLCKt?KMP~%I`Zpuib3~DzvLj;a=%Ah8fpfOYeny6Z|0G=9A0*~cY zi#C^lA5W)h}{p1Oz}1b#?Z`;MM3AA@-R2F@ll`~O}47jeKe ziw$$3Vb&XFqhU4~X0u^>470^BTMg4|m_Ebw8)ncjLx$OIn9I<#B#+NX@&%2gv885G zX@i+m<}s7Xz4#BBNfkabX|~@?s+?*h)%lI2#s>U*jijbR{3G4$0X*_N$n%7Zq!!?6 z2^dMOZAOx}-AMA+;~)3^C>t1${|WderC9rnaLGyubDhE*kmTpaxXQL zXSd--Wo-j~C^l#OB>bE`!A!0qu&TCJGr799$w;oP^WdkU0Y9KDxvmzmx?m7LZH-29 zeJx@QEiL#7hKyvl7kAx(fRWtT<~5R=>X+ijjT?*H%Z%g}H}YC%SK%iJRKB{a@Y4t^ zzBUx`6J~!s@cF^YWIypbwl*2`=;28z~`AtJ_E!?E%wLiW(XM zW=gRq6vVI3*J7qjtp#sWN@_#3X3De{cdMCF>S=M)ueSleEwxSfZS&TfDdk=dFo5@f zogwa4xPypSc)TcI;RD<8TffLmnN{10oLTO6l&`D}HRCrFK*>37Dl^Ajzr;+ba=THo z3e3f?=W3L%3e}=~)lzhLN);$KQ>vHwkv|ud8!70m0Dc3ILi!CFDRs3$w5!e&LQWm= zGX=ee{CczqzrF_Ctq-*Ww!RI$oYH_c;jaNNH?<^rkeT)%Znw@!J}j zDt<2!zg74Rxan@dO?N}Jb@U6ir!@J%a{NN>Q<`go&GfwV7JoD%#RYVwK_rZ}D5-; zEe)vGUrVr%z479A0{sR=P6!nG>s!3^i!qquZ)pQP{(u|w<97-D`Y0~i=x?JI1!}#3 z4b(3IB>~Yo6h}!2DeweHOj81FUi=2@YmpyB&(d!Ts13SX!Sf&up%e%(C=Atl&^sYP zdC22kW~8(Q-MEWi;D;E4o+Y&b(6+RexVN+!11x2!sO4%mbV#blHxAvLI=T+>ivZFw z89^J#cWP0Kr^#!k7B36AgJ$Z~<_1rI0x*yQ-%{M0+Tshk&D3e$P+%E?K){D0r5<++ zijcSiuC&DmQA{nR@nfczdmG&C2!gXbEoSPhwpJ+1)Jo!nnL5Xf0cxgJwRq}*vuate z5t*0PwzMHN&(i?WPn{R=gxp5zLK;K}phGBtG$6B<$fW?iZKT$LYQGH7zWUnwW)!J! zaMz=m_0$FgL_7jt8^%OxyD~ERB$sW(2LFVoD)s7r`YU z9;qryLD+GxsgwpxYEuPCbZS#Q4YyPpAcg2ZA-o7e=1;|_?bQ^*eC=&|W0I;+U(;o$GjpJo70fCey zj0OxVT*F-SYjj;WO@xtAv^Rs-6pe6EVAPx}!|pbDzw7epB0o|t!|=^Abp52cw86Bu*Rj*=gTmn^1D>IZgsz=RF$8u!V(oum7%jthFy$D-R~}z z`G&$*!)Xr7|?i6&-09 zBECS-NNe*3Ya880+UU!!pxG&Hw77u~sqvF!c=iMtPMV02)YD`$t*E} zH=1b`KHs7?znL~ud<@S_gSH}@C~bCQBPpu1N+CgJ8qLH-NP`G6uqZ4idMavw1xg!FUD#b46K<@Mrn}jBFw#M zLc`5M==alHkcJr?^%!Y&ZS{*V!lwbh4wD7}EYk-`?JCxo6QGuv83NO~~M zEr(7TX`Q-uBdrkw9z!XO#(#N#uF1d`$7^Cxrgm#n1w2emOND44}V}R`vMn zg}svIcLzMg51O^1Jkp@nU=Sgcnj&qnq6f?*rIZ$MxB8XsLAycl_iOyQU#q_bwg4iSNMSuw1k+~7OfPkVQ31D^PF6Bd$Ox@W(#wM|2s{mDIz|K*Ex=6n zF(e2P_tHxAoS8nm?kZt4r&lg&5*BlMr4Nm8qtZFGOKG$sf?q)fMFeJwkcER=EpAxD zW;({NFzYEocC(pYjj0AAi%4LZu)HZE%$YCgq%*@PDXQjQ@v1Vh`2*lExx6Q1bj;c8BHYWFgDVm8mJ3Iq_q|cwRDensu<1b zo?tPW3MP1h(}W>~h_tBE$)G2@Hoe7DCnPmpG6M~ikyazUwRVx4v|zf_3SdjCFW@FU zlTOw=4J;86q15v*VRVT|J+T)n(o$NMqz7QiVDW^Alrf4lRbmx~NSl|;trS|w z?j=WAI#}3R8w7u7*-5M7bXYx7kVJ&~BG`th4_07$h`2$OlG!QR9`gC2wCI-4FBVbh zq}}B$MDRHWBb^olqQ7X~nFd2Oog#inor5%h82O0N$j4|_F-Qf)#N3NmBboK$u84`d zq$2QdI!60~V@pZrix^24^8CJ*ma(NJ$RiwJpy{A8V#O{UUf%5cAOl3h8pxx1qy=(ESc7 zy%>W6F$~|@P<=CEExx8ocVH%BawIoW%pI(xb*TexmMUR1JH#|eLMmdy0C%{3jp%S6 zXc0yhNr9sgLW*@MXclXd>98dnH2#SjB33F^ER-ksf;``XtpO=kTLRz7!F$O2*u#= zy4?+ulN1wcS>&~cO3A_yF|pQlczraBW2iW=uotp{SX)TyA_u1L0K|8x;qcef*oQUa zQ2GE6B(P*rB1Za>w2p&DxzG}bg^Fc=(D0W1OXHj5%5YGu0UYGjt|#8e7_Hq? zQV5?I_m05QHenAM4zgnA`KT`;0&~QQ$pKlSxw;T}GBzGDC6kEx-Sr+??IY&#dPT3& zS_$l5jJ(hyCz}w*x{@FEpu)k(WTk;9)__LrU%` zwrr+5(1aEtRuzK!H5@cK2y4?p%7w<4A!1TCD3AJB=7|NDxGVe@4yA=ay)d+hz6_Wo z6Q$)rQKfYdofwM>Qw16bxgrV`B%)G7A$kSGnnkZKGoW>plFO)~?riixD`iw;0`diF;b_RH70aF3@Ni{- z8ee@esrd}D8iMEpiUyicVI71xLnE=kx^gU*3=w=EEySMwc)49 zK11mfxU@3d(UFsZaW5$|GK4iyDaw)#!0>dp8yUhSAttR1^5IFdI>X~drDB%L@W8kr zNdS>*_+u91C6Dmbv|4f6OqoUxaj0Vf#S28kMMe9Y!dfiKE>)U8T&Y;0h zVurQ}$AwT18KMy!<-wleZEGb8viy`uu`(ito&ZiUs)aR! zxLj^vQIaW^GF9YCLY#VZY#DwK_xQ$&))FkV9W9>5Hd*4Wmbf2r=$E$okn@@qfF<|l zSTQm(M+?B(y1IawiFFSzYcgrY17{lfC^CgfA|0%m<+KpOiU4~7ndQN0?HKSd6DWRZ zZNO98;Hft=rL2^Bnm{M)7~m9Zrc7uJUPw`#7djND=>fB!nK@VZS48h;E`*Z9oCob> zWQuV#Rd_~KTv+HbUIA@FWrUAmCM^>)rBcCgoMmK6UjvCC`kJP}O5v->q%{ig(%8xr zmW^1hskk)rGwVr%lJAbnP?b{RGo{KAqcs!Sucblo$H*jG1S-dkwLQgEdqtddZ4(q8 z<*T-f_*}KL%@hht&QY1tk0JCF;;pcjgbGERhFyaXqMO;|tMW8KHZTwn_p!drls=7O zk?)E2k&)Tz!O-?Lk*3XrGo=kHQCjz8wu&Jsc}o@wv=g~eGf7QV)l!EWnb==YY(%^b zlcv;`nWS=*{g(+xYm*1-f2>q8)pCUFGmiVP+(8_j3O-}~mq}AN%ubq10uT#7YZ^7B_LC!nf4SBF-UQ4driURn&s_QUsCkEiHkrq#4u9 znpF!g8|F4|L(t5ct!7k=LNjZQ8$KIvc@PthnFaMz0_npv0vIHs3$rY2>yQOcrjwZ^ zw5^(Svuf+bQj8?S$Rdk5I1@t@b7huLB*oIZnS~`1s1dSfWC_~^YbMl;M3BZ1T#>{? zw>JnE5+nvvlGO-9g_ue{jx4draW@DHJBxB@#ELs8<-x=)R^3@%_fn_=RSy!;wL+HH zGH|mHkKGZwBWmbokx5me{4!Y>yY(z!lps|Iwd6M_LB0iHGG~#Lllzgp1z9wH!KWZp zA0@;tP+`MYJ-!gP~8!U@gfm` z15UUlQ4CszMk#fPG9APq=Y%jzvd9ww2?>#>A&Z7B*-^9($!ha1@?tSfB4%XK;1h!y z`=lZvM{FY!v@gR#AreZ78QB;SV$DB}&K$&27)eGptci2vSi|r{>TGFT&?rQT3}IqGs~@_BUg6;e$!;~W zp(_?qw+K1TCNUNEKJ9E|lhdyhBUQLRv*kQXlyv0&toz{>fAWE9DB#>Ye!Nnz|NnH5Q@SqLo^ zzQQtnP%@_f%^WeC$PolS%OoZk;l`o6!Lj5Pmokt;yKGWYVaTGeaMLw5hdbuYih^b)*Yo$>!ckS{z#L3i~Nm*z1Fto)aBxLc(*vVoW_D zj~s3}VrbCRhtX1N=2XBO5M54PYvy1U!H!HzvB!&Lw3)-QB3*nrn4FZM3@m02?flV* zfgL`()X0gMvvc7&&k++590byk&5;{w4O9*6-JC{@TC_#!{~R6&(pt)ahXK2ba@?XY zZI*eX+Brwrk@B{YLnb4nw9OA|81<5jlV?jP4I?Ky{|H+)2h#`X*xBBxsKdzN*`*m4 z-XbFhLjdcE1-{lg4~9z)i#_BUXLoYo0f0`a#ONd;%?U2@_^YszndJ+48j&QU2{(kI zrX=>=v1=-A&77zTCn&=?+(j!tqe1){(X@ewr0L@O4qMt~OY{B}mnWwYMGw`2|W#3j>oW(CRZs+@$x{bH;rX(_Y5GY0THtrXM%>ORu8oTeFdCT8f6T+0uT`}sxQ264*E z7(jC}HdPj3X2G;%3}~(O;^-6UC9(fMK<>}8|H2rc6w$Qy5Lu1J0BRZ8^;{p=9i_Gu z{lT*?-$(PsZm7^ckS7t&A)gl%u1KQ+(2sJaqx;Kfn_zZ8uJ?1r63sGAB4e^uq77t_ zTPiyHnYlv5dAA8Nfeb0*w05RxT4f+r;1o7uEMp8U*a}cW%%E^A287iIq%8MJyT>wM zdcrcM5>`nM0taWPvmllXVc}Rx5P>+Q5i8LoJ;T-vvDS%Yv^0tXjKPz4%lr#O8S;*RA|$JmcoF!v`9y zm`=OqD(etw=~&1`ldVXNTu2nH421WVTs*mOZ?^l}u&+oG4H?W6Ex-&q4)&EeC!D8t zBceiOAm@r`e+pBmSB@}$D2Js)YDbY{l?vbyvPe>=WG`NL0ED~*av!^%mly7HRp$yq|<92>*rt`I_E1Cs2q+70PdS_870#uR{ z-E5C#5iVLwSxQls*!+%_YT_v)mcbo|19F zla?+3)6f4(S1%pJ`f3ZBQ*~`5+B|&ZDI_ONM)G?Mkuy`7+ zEiC0|-()Hr`a$GHMON4v(^^92aaMh~WD;pi zFgj$dnb9G1ygZj29P6e7G|K2ap7qcuXq+*^BrE_`9uk@cl*+C<_{8C&%|ba(iV;jX}9we{5`6bLo*DA-U!t;Xj5x zgZ_f8h#f_!bkHltwAjOmS%T4A?sTzEj>{E7pmK#&;YaC(K~Z^;dO;YgT^TJav;$j8y>ofMAXmwU(vgf;<Iwjn5GDOMI@9~~aCT(NkA`Ckd`5zB?) zPrAPjrVTjB;)D(E=*%)mtrqCulshn14ZA^2^{_m|>A>0+vV6z~XAH7iI6@b&KjVa` zyva#JVl+;G<5eRA$c|}{m=GX4DjG3AG?0k?ru{isRPF+&U;<~;ynObA0w>SUCs-{N znq{R|_k?IS_VRbfvN27FLsmjSkj0Y^>AjMV7YOjVKwA zZu=92DF!=IoI;vb8)$*=kR5X;lH+<(lnYU%iTv28le`i7NaV*W1%vWwmnKS?8mTAp z*om@3&S5HF9YHN{@>$dqqXW7oK%{*k)^36~;XnR2(#YrSw*h{8OJL}pI5X=v@L!}O}+^`HsvLsH5&A`2^Hj{411(9W_7UB8B!O=0M z3XD@rdt!mdsCSESD+*&{=@8l2UfrhLLPLaBz#ZDT>}}S{TfH;Y z>FgmqN(9?_X$ag>8p1lt#p-aVRlC_p9LoLC3$q-9L!&4ga8k61boV?Q9T$72v3o&! zg0q~RM$q`?P<6b3Mgcu^h27BNWzs=poGj~$j%#U22?bhUo-9o%UNBEQ6w1s1lnC*)JcP3)#XMJ5M4rE30&-GsNSDYkT;MdA><85EvvYfCIQNt=(Kl;Gys z6B68aIP>;x6<2J*N8$< zf~dFPcC$>EqW|(GO_F;B&QaV0QmOEYB;Q&e_|tc98pcR&<*43lQd7?uY1d zg1q)pTS__=zTWp@vduyce3preIj0eqUgZ)<&G%$Gh`U&_$_me(psDzKx{7uE|Gikx zmNMDrIoqAAD8~vViS8}vqf;!yf_ug=Mk_jd@vaYEj@FUdhh&V2QHxWFv^jB}6Z>FJ z&H4%?Pn1-|xgsngrKO&&Yu-kUh9}(pz%6(M$)v+o7mG5FT_VHzV-?5~yb~$YY8y5R z|H+YG_;v6XpD)Wt#Jh79E(CV?S3b+}>fn#4{bnPQxc)cJeBg8)eC?^K{(j&GUbXFN z9sD~(6wTWb*ZpB_Diynht)yEXev*O@ z_XEG+{fjQw!8_^w`nYOx64U?V3$EOwgHIkK;k)~RKP~U0={oox#sBW1iR+)5zGt)! zeowxvzh*#U_6pk34DqA|3pl3f|b6xc-yUH;vT6cPV&RKk%Qv`@%vUe3CjZ67C27 z{WCAQTL=HuaM^yNE;0Z8LpEvU$E);5cu`{bAD*?oL07-4K=HpH`p2bRsntJUkC*V_ zn#A?L*Li_fe}BLSQg$Wozps9t{eX`CcP7gEUH!mMJS|kBga5axKim)eNvp>GO9#K~ zELH!K#O*IQ_{*3n*bE>L8+zT!T)gNos{2#eJ zG5pCdFKN@&-=*r0+?g2u{=*-v)xqD*^82xgLLqpDf#W{M}7xCzVVkj_~VrR ziS)z&pFMJOs}BCREWf3R>GxK>zg-94eSwm{J&EP7JazMfI`|GX{%Zb{7=GXdAHA%D z&%a34-(8THe&5VT@6^F(Pmu88Zxh$=pYxU0emqUVyZUMWk00N*S6Ba|N`Auqz)$$u z33GJt)oT28`x3YR(?xT%pv+m{L&ri|D%J?<^!}l62o__ zzM@VC|FP);0~`H%cDas4%G|Dv70j~gNR=ejyE{Nj6_zf@QM&z1gl^&|hMEZTlh2fv8* zXIbLwoz@*Z*W<_?d-&)7n3~8NNI*{6F{Iw^&Di-e}3cuCo%upSwM4tPVcH z`m-PY?Rnm*U4O4r_IJ&Y#Pxd~eoH%l-^}yRj}ybsc&6kE9sS>^`P(%%G5kOBuh5R) z=5r+fy8D5D+?=Ujf2;LZ#7JEK^gGsT?GG30{~o>ml++o<*$*zJ`RhdXKfbtahPd@A z>#vIw*YDY)pFf>Se!}At!|yxt=1DsK_bC16EKCgl`<`E~o&Ud3<1gHp7``fFyVn2r0_%?%iQ%u_f9Kgc`dx~C<3)Y{JCp!i z<2%}^gRf-x)rsprZC9pt{qhfB{;&HN{8k4)mHWRR_;Vh5 zFRX*FQSin~iTPJ^aLc1Q_^Z_V!({~@rmKL7{{&G!4Lbs?BK2m ziQ(_Nd(dVb{P9ZvboZlw|GD5K?fQLOj;!C+5C0s;t^cR4{->4yru*!~^iTTUH|Oc# z&td&}PGb1qj{UQC{yt9W|C&jO;a4quL%V+v=JE6W#PGkmFhx85OBMa$e)xB5^5Je> z`^T&P4+j$0KXO3uBOQEL$#3`M#PGwedvmA`zTj-x|24UZ;XnNN;zAw#Jk@^ZxryQL zS$l4l4&G4XC%iT>{8bgr+WDi5?azMdZ~yx3JYD@6%6}f|r~k$tyyX)e{A4wLj6WvU zKd-gyq)!;c?H?8?cvnC0heP8|)xlq^;KTjEKRoiypX%Tr&XD~d=?DJGKdik&2j8sr z&y1H7xBv4GPTQn|zfe6e8mUa&|G6)9YVFrb1s}d7G5iJJ|Id}W`b*XLbInN%|37~( znxKPkR`Tz%wSTZ=YjhuX+=NG$CpjD^sceJykDpiLFMLmL{@LNf7kx5Y2Y(*#e_YX< zemnfPw~V-72T%Lg^eXP|;}XN4Io-ci2Y;3FpLhQ&G5z)L?Axt_cPabP^^3&t`4tNW z>fmRo_B(G#On;|${x%(at%8sIDslb4`0L%D>)`RF5^+U-ofv-F(~bo?_`CuIzc4ZV z5AJ_|rVf6-;-B&R#P$E`@6|um!TTBh^~CU(UFCG?;1BZr)ldB=bo6|wgMUx0zass> z|L*(OE$9DJ=N6!rE;0Fwp@b>**JNzB%m#opj z4_5H@{a-tL-6=Z?b?}2&|J(LY?eP9vKN_cl|Kd#5{*M#)f8d;3hv?vct@i)z`@i=3 zpZ@2Q-{|0%^ZwiJ#Pa{xj_^ty{63{W?fZB3`bV9<@*N%gdamELe`ANAd*+ADI{3`V zl7II74?BGL#@sv|{KtxZ!{-0C!!P&WJY5G*=ZC`3-!9w!haLXP$j=_o!5eD-CT#Pc z+u`TF`JyTSV6nBia5@&+?!TiCOdYw;n-NN;6Dtq^@nGVMU_CNFbWiRtz*)^j(`BCTZ z7@p~1x>~D;{vI1hdHy-Q=@;i$T8OzdBQgYjE@N|CFrGW=qdR?zw zxcxD}=Nz`d)A`eg2Hsx(k!$Z83;G8b>ijVCUz|TxpAw=9?esIA;;nbwrt5zP?;jYl z$HVtZJBr~ryy}xZwEl{dpAp5}ObK6;q=(Ob{_PGO{2E?AsQPOj(ZlZ>Jm7X6{8z5t z^>-)h;g7F=v0VqBqV^9BRX?AD=5}-Vv*mvuu7iJ6jX#FxbEpi*;rlmE>DIxoQT|Vc z=XC_bad`R@!)W~&$N!4Sz1tsFb~wXv`0`J?0y_A1KEI;c-`xlNb-B6c=-_X$!Sgvv zu9w4gC#|COTO9q%mHo!;cm1G9iJe0lkCLMg8t^Hknz#j=eH%|xOZiDA@fLt$! z_qD!wst&%epf~^74q-SBZ(VVqNe4ej?ca0zc^+ao#{SLXszbRBM-uB#9{+TH*}8P) z@sI3Y*URC*e4LwFsh`>4?*zO{18=AQ=v^1x z0s7PI^mhS1tbw=BKi`X_y@dHE**^ay!T%aL26%Jkd8Yy1VTX4WpngmVHOh|btNrdr zr+%huzc~MktyI7AV=%m(e$QD$uhG>{=YL%qcsu`FE}nXWu6{cI8`i+v`Jb|H?oB%R zq4TG%nc!iz6c?u7UjLQ9`)Z@EemZ{{o)r&oZ~yVt{!4W24}<>^4ZOYnZ#~<`>FO8f zFK5TsZ*TwR?=P94Yd@VI3|AV4czG~b!0orw|IW?Ne5Rvcod3I|fA}*y%_<$dI6pV1 zfB0Qbj-I1~r}J~JV}M^U=%%0!{#n4+Y>cnp&cAQ>KD1fKKRQ1asfvfU^Y7%l_YBt6 zPv>tUm&U`}`~S;pTA$VRzc_y~KOUa@k=x1#t4*EO8uD?fuewPN`UjMv{7afoK zGwu3&Dz#q&&wRs>5ZA!<`?jM0v+Vl2#)baVz}xx%#N|i3b^I6m$5*OK5ZK}PPN3?X z_fdbgy?)w1buGmHgH3xAXsk zo{RVD_)q(HVGX>U{;{3oZ`ARh_U|GZcr(@{5nEV%VWUod#r|DgtZ-lazvYdKpV9H3 z_U~K?;JF=teE#y20e>#@pT{5Vf4S-nqdh~?!1Ws!S)SL#`#GWy54Y0WN6&N8mz~8! zr)N(%&)Mj8iYGN=F9XCQoQban+wD&ehjKGbbD(Q!nYhFD)qJ%+<>#X!Ps#gscpEyS z%a(CU`G{|^ejT{ihJTRqf3g2EyhY;Aw86(EZ36bl`tOY){FOHRH!8b?_qQVIIn!_) zLR$voS7F!a@y}ZEho6Gcf$MICKf3?*q@+JA?)LrTV*IMel9wM8^!sh}Ki&uZYx+hl z?x=13XsIWA7CJJMk_I~4C4Jn#PF{a0|5fA}c^|_n;WfZ^_vvj1FCzJg*yvx!{t30e z!t!H>x1lq-)d1e7!r8w(f6)5nJ2UjO(>FF2@w?dyjhtNvyGV_5OW4sWO5&Yz#wuHUZX&$%q0>U==t z81eIay}91zb8nbJ_`7ZW>&sUqZ214ffPICw1{98{eT(paX2U;9`FD7K$EEZeyIcA~ z&+q-_`+t7DX)BH2ux<_<<{YL$Yf!}7Pq{NLcKg+-3 zkD=tJKm5`DQGER5^O;RVf1aX$n9@JHm44>)CtxY-P ze{J&FAO5Hvp(eWjtS$@k_#QER*uV<9AaZ{ISE^&>0d-EcdJ_uM7F_w(+OB5B{j- zL=1r~#`rl*J^SU2#DB*Bx{}Ywl*gL)*TT<9i2m>oR`oel=zQ|J@ z|M}|tgUR~`YX8UnK9(3}8DqR0o>cs9mk$3=i)4Am&-P*X+HyO}UTMb5;avxQK2nFj zOW7xkpY1medm*(X7%zvJzxV!Ki+`*HV*F8O{deU54I>|WN{9b;rJq^dN8jUOJI`ey zT|}8~4zCH+Jf_2c2K<9`G5!Co{Cqp`BszZ>C!cO*|Jd=nLf@@_A9~{h+Fy^uKiMWf zO#gS4pWlwW(4)iu8^wP+{k)GPxflP-eCKfB8M{{N@J~|w=l+e-Z+qX2y#~h1;iI?Q zyGe(CrAtCa@$)%8WpCN>a+>jSn6-M}LpuC-EBsOZ)Tn;_j`BbE=7n1RKce;@8Gn@T z-x2@lLuOb!FD*XJ}z(rR4A1VI)jr~^&e^}X{{n2l~AH4sZAxUKasEh5N6wXod z7&%7#E=HunJAU$)R4e_AKS?>NSTFGWXs6GH&T!f?&beyq+eug-aW>rb2|RNbdD?&JzuH(SN-7+E7ZIW zyLW9pJ--p9f2X4VV>SQs`AgS-iGOa@x(jvqyOjOUdXxQc{m~!ejEr5lYME0vzB<+V zm(OoTj*))$ZyZ(?E#2@MollSQ$HD$>g`dw?hLwM~Kl+`v20XZCY(&?;k1&5&?<@aI zfB0PrKZj?yJ{0~>u9o%x-Ae!4*Dw9yx36FJpLORp-TH-|KM(&Pwtlhiqcc7Bkn890 zPp?0+8~a0X&$l_$LYe#bRAs1q*Y(lr3yMzB;U8neZ{J6>)6Hq7o5S7DMCL<&;_Oey zRECfz6S*H)pZ2v*V!Rwakymt!4u7G-pQHrZb$^+tFj`L^b`ay`aP_Q-+Vx$#Iv;5A z`ccUz&o{?P|HNUx)7n?xDn|+9@9viLNA2@tr2oECPadJ;&-%%d|I8nzo5Q~BIOYq7 zBdVS=boe(GOZ-ef>$&Lq6<#CQd%*+vSJtPJ75= ztU~4shk@XUZ94qzihkxl%O!_>@t?;xhab-C8Vvk{%GCLdh1n17+BWQ6yHkyDUA#Bcjz4wJ|EvZ6xbu6@ z!#;@sKb^nQ;qP9TW<)ND_x9QG-+Rm3@95|sbcSI#@9P_XO=p_XJ)?j854-;`6!_!L zUkrwQ5`IvgUopWF=Fes%j#@6}GlzEi*Bu<+uEReK@5kug@xRBv;wO)f)bW2l@Vg#j z{PF$kJSWwtxq+#Ug?9Rv?>~5!j{cQI|5J?rzvoZrw#}F6@IM9oHJktU_&;0q^*1{F z)l-0f%Xi05vS7Vj1*iFR=TFkH{;K%}+4I{ZDVf4kHnYl%OmhbCZX zMST79XJ_)GtvdW&%0E`~JuCe&{EuOtv`hm>`=bA;u5<3w;lEn-Z+M!-PwNY-{NIiB z0O7Cscd|kMeA)SvUUv5pPv)Uq2D52`7eoy z|Ng+ZEz|Ym7xNcgkzVx2&jU0M(?4HKKc~HST>CBPk9)tFi}_>d=|8^@JH?KFbWz1< z9sUOt{ayFy@jr-zSm9u-kC|S^&*9XGUtXc(Kh2MHxzxNR`!}9HG*8k$UyPT->pGoT zI{eA(A5icA>9&op{L^BzlbrU2|C0LgLv{GiRQ~z!6v-bu{$a-*8~!_sDn8P!FZNEA z6eU9|h)b2`@ZUmJwjGSj4SOEKEp#6OHB7s6_)jR3 zKq_}Tx-`xvgd-;F=dRliF6M{)d_ulU3M&!}JEQi;F$2W6sx#Ggd`ALJ1RK^YrYMCKlHmEUh;_!|5eI=&iL8SYW%>4-?_m|#Gk{@3_qm9zt1IE%KCu! zzak2MbbJl|EMfnqg?>rT@5jl{U26PB$F16T4=<4P4_5u_Na;O(SzU35&n-zJ|77%h z9q+%;`@vn8pp?>I5#@h#DnObK=(6h{nH&2({K%#sK)=PUk8X#5uO<>J=loX5Q7lWu z?9az>eJr0JUHTHkMAZ(Gw`pFQMyIlShibDz`IUp-JlhU;bh#13oypTXp& z`drJ?4f@}MCAzg=?e%h+>*er?n_pY3tDp2IU96Y?w|Z1!i|7B8tM@&ntN%_lKRdm$ z{j&a;9RL5t{~aIw<5gY#k7Irkms{3Pddez)tcSax;GRV z`R6hBQu=q3f7v?2IHmo>G}Irrey8V?>58cDgUI&B>Q93If$OI5k2ZQFbo?)mI}V$E zap9f1_IDRZ*vKvV_D>$vyZ#?R!MoaGdGR&N9Iltc7v{|Sk*@x|>U?VVV151VHhue^ zEq$!@-*oMiNxJ%J|AH>(r)46v^WW}Y`fuysUh&#AUH$n(MYY)D(6|5j0gw&YU14vs z_$Pl9$w603vO)iSUCeh5llKpPT30{WA9S%@)7SVTJB0rK+wr$~#LAa+_0#?iUE%-3 z{QvTUTYjpmpX?X9*e;O1NGQABvP`=<2`g z3+hU}tFZkm6>>=CX9KLvE-T$xn2%W`_Um<|HRerEI|A4ey@F%WdcQ{kNWqi3b_8yh;G>BeO+8H zhuc2z?bFpy-URy0a=`88&|d#f$!^9x*w@ANa_HT-_a`z&TOZrr1PzPMfvuRV9uAzl52YW{V#%l4D~K~^2h-;3yPs=xb` z6odX>S82+l>p0L)VZ@nY&_7>XFNfQQyu4ahf2Ep#YSj1r?DapU>`khJt}l*{$sVO& zarRF4Re$rM9s70l|B2<_vi`O5-#-8Gc<7#l{XqQpWsh>ZIehiL)3yE&I)6nMKfiBp z|6GiJYA0XEx*p(qIb1d{`$}E=YeviZBkK8hd;ME6zPWA+hn?O#{kiSF#1=pPe|+KX z%XRhV!@opVc%qa)vcIhIcQjYl*WCktC_KEyzve|2%YIUG1~ z%OG9-V@F7UF7?8q>uV}e}e1JZk6SE--PSwD|}+CW4+G5T14ajWB8xd{OeMBfZNR>$t7J}|Gvv) z{k$J4@5X)|v8ags;cqK0ruyUBkNUf}$Lfz9WBo7J$oeC1%FtF_)c?x)e^_zX4Lbgd z@0(V|>USwW1h<<*d;1$y|M$gzd;1sNbmlp_`XlK7u9su=M~<=nTdHKcS#NPWIb^yy zU6pHCPT`LX&V$5{W0 zOH{wx&OLDbJpMU+rg5sOKcedA{^OAJGF@E%>8yW_vHh9XPMD`_ zf6oxqZ(aYKEZfhP1c$u-DU@UwHK2#~MXrE7(zO=v$%5*qkktMzy0`9%%KZSVz!jKx<`-AqX_Ot$dtdIJySMnY` zzoGC}s{F1$N&2GobHi2mbi@9mkiWR|?Hgc!L|#E(LcgcrkKx(QGDc(F@j{wW0X#hC zQrO=*faRXU;VYh@54^^mFQ)fH(B*nt(ob?mtYbPpg}>ce?=a!GpH%D+)ql33S=Pe7qCEfijf!q)VKV7xUgvB&>1T^ug|-6fCf z=&M%#RpVmGKRbOpp*N_$nsG@6{XeYyYfc#c^lzu%i}r}}<53>}eO*i!htA}uH|yy0 zEBo73p{MV4*q7G+wbN5+i4iRhr zuCUP)QuaCb>93ssUH>M%wNQJ0^S3;H&zAh7c`5~3o5$}4q^pYOE*e zzUwck;{T;nBz>-ZNaMe+i~E(sXKMbTGF=@0yVmof zu78IXN?6xy$v;V-#s7ryVD&%Qpl`==Kudb@UF{f7Vb$4DQ`4~Lx_$33C5Uk*b5hsz9OowA1w<;P;l z;c%TYkqV&!3Zj zvHLmBgyImL2#H8e8U!UKJ)k8=JmDK@xk`Lc)sR=82=*2NFUqXeD0O2 zAEWdDpJV6x`96o7&*99|!@I2Vw^u!X`vk^scxH^gno)9mFyA<|^Y3a!hx50+$J15S zlCSpl3e&|Q)5T%vxx`;Az$`w(p`wZ24S2)5Rg@ zb9lm!m(lsyA$KbI=<7O0`nZ4jxdE=Xu1@mLcwB~DKi}t&^Eo_e%51~R zKc+7q{^#%|G5TEUJAceK4({4k@#;vX!T!g)5-N;jP$4bvg>>AR=N0lww<-`bNjV?MaIyd#?O>L zx?tbeXIl7$x=#*2?FkezlXt?`NuK zAGUbvd*9~7JzYGsp4)#9edV)_PW-VT<9m4vzsTm3>%X=5;|Xea@$Y52cqo1@-di7j zON*WGdl2#SNC3Yo^LVN^v~=a) z=g9}5huX*YcFI4++r`7hPw(IH(Aj?R%P$uGw4ZS|kmb8_RW{M-Dy2Yj*eufp~H zikFrO*YV%;_kXfg?1L`GU)4VS3HHB>ApWlL&-zK?*UZ1XtG)leLH|hCi76h6SF=>a z2zcDKql40a?*8sFKd$lN7Jf0#lhbk4(jDJ*Ig3|~^;N#Sk^Ec#vb`T}BGmpv?R$k5 zx@yLL3DN&h`S)zB7pMmMFT^;E;-#gF-|1?HQs3x%oGy^{M7Du@lZ5%+_l{LaO@8{@yFf3FY@9Rei7!u zwcoUK@oUOC$Nu{@m47E`UnzcHxZ~@`JK-n!`3Cq``>%15_-THydWq$C?U(oK_!6$~ z*ZW#}{Gs=c3_kFCo&2}I$NUNJUt9Q92Rh3axBqt1{;N9n%W>it;y!fxe#J}6Dt~w^ zZ$INrGQaU0kMiZ+^v?&-f7QVFdV?p2-`sVU{$i}J{97acdSA2mBYeMGcm!zq+`*U0 z--kM9y@TJGVjl$XtDhu(=hM#9b5i|)H)=nz{iN@``o+Ai+fwn+`&z2}Q~ai%|G66lzp$e}Wd2C(6Z#a& z;m+eLaaB1Y=HF20ZOW(a{0+uEs)T#2?-q)e!rymZ=JB26pX@(Se~;Ee{O=_3dq&>& zkIFf1;c&4X?&6{K+_{tDi$t;&s)#4pV8ZLq(!g|o=N4a#RvZ#bp)pO)ACVEKU1 z-$8!2#t&v7Um~&A!__S(*MA}6;g0X$t9|-@+kg80)*I|Ej{xP9i_8D(O`$iO!`uD?9>0{dir)Z!&^ zW`yLM`J?+!2mY9EsrihEv#zvjqrD$N4BDLFbMJMK2}s1r`LeU@b$#y>Lvre&cxm|; zzkO!M{MIP(Yj9qc*iom3TKSnRKsK14DLVPyw@JTNfX|bkV9raB|Ilxd@)#6L@Omx$ z&Rsh9&QAH6KbQChj>ZkP|15s3{tK~x^c{us+xznrul@Qp7q(wFoci)EIkeyGRVZ}* z58m`F;J0dh$qx|UkfZU6&iJjv`Vz%0_ViOi^+5kr-w+C&0Do!zu<^`OLhI50TEG6( zQ$jy_cI$rV9M#e-{1nfJF1Yznr~bPb{2@o=B^E!?W2c5%`AdX8%>Fi^uVbKb$}8mk z-rr%r9-QH)*y{%F$@v$&UwZ)iy5amg-uM0i^>ONsfI!tb#7=Q!$&qes8}2t2jmzkpJ{~jTJkGEh*8hd<= z_|zDGBRF)g;}5C6Q2*Hb`<Imw&u*E&v5J39{7)+Jy&_*Q1*0jSWj&(u zr}W8A$Y<@F*ngf9dN%k|ucgd`K7;Z+9H77Y&rS*5fe#4QSNz;kzf$od^ZW$&(%kNzBz1u~9 z4>Nz_-Dl}k)dX?rcI4&{1@Im^M zA;Oc2$QtD_!s{##{P?oVgZO`k_?MACtxw`4{;_Q*hyMolr{?(-jq_8M4jV79?I`^W z(XP^c3_X2djWR;Gj>G=MZ{KF@Khn>g#Q!)dME11s_r^~S|F@Sco{?mG|KG%U-x?oM zJT$MV`RwQ#cq{lge`uL}!jC@??EfzAPcQo;#%^iF-x_P+FLFr^rJvuYpQ-x^*}Kqd z#6R>Q`+Z^FxNni;a-S_@`oJ3HdcxPS9NhQmn}YbO|NIwQ(D&#Jjc?YrckX`||34)? zxcFD82Xvn*#s7N3HEtYP18)U;`h(@tKkYgp@>AzGsQmoC+tov95kDk=u&e;SiU=Q@Abj{{~+oAsKn>@xA6CNo*e$o_}&|BeZD62 zFO)x#iiO8`qrv{K^Y4Ea^no?XvkBMooPWFNEa`uZ?><8RZBgv2Kz^%nlKB6S@-XsN z+s}%|K*3%syo)zJNPcgeX}`kPnW-*%VmPk&Bq+4h(AzsxUg1n8&6dB#dNTDtV3{qN$Rq+U?C zqM_>ms$aG5e=Pi?{5~Cr;&-qAhoJn__|esf4~7Eyr5OEC#al}kfAv2??`o%?VcJnH z{x|7-v*nYMKVjmp7kWhZ(>7GvY7%Q#Agn^>||q{58I<_`CMJws7n! zJ07n5Jk^QoMf8C+N{?`*pKq9U8*V&b@zdwrQt#{YSA1dVy@G#~_#Y?!vOh=c?iT(r?$e=kuceFsKM{Y$ zQ{V66sqgyNV@mILw zsrV~g$3>rW%V7dMmc`%b+Z&WWI{$k+^7EktE1{_EJGuVWxukC^Oa8tS2{VJ z`6BhpVy#zp{8b=S%Y7G4J{XKoeTnkt?on3cxJRcf{yOejeuDW(cRlVA+69eo+V9YQ zJ(u&tYX4;6QNE^Ww^BbJ?}$C@0m8NX;MAX<9>o6%^dG;zwH^Pi>0b^1+P6C6ANmI2 zR1hxyhgESn-*K4NT6$j_x;%*gPuc%J8EeP?_^*h6=-Zv~uYTvz@$Xs#{{qp{GJkaQ zWkLLves0;;j{o8Pzgqvt*1*5^j~4$ZU*q=wal+j~;aWbDylGDm|FcLxRj2=>2YxmD z>uca&RlfKo=|}O_@(l1Fr zDwnjp?z%gF9>o75($9w@?f6G8|F6Zrp>(wd{#}pf`<>zhueGdx;{`tp;vXXZ8CU*u z-*VMkT0WNkicn8=@x4m_b<%&7@Ky3>4f-jtzLtNp>#ctg#Q#3h{{y3}sPz9U;;(wv z#b5RE;kEE5+%48Qfa{;T_ut|Fu3BH-3;Vf#2IBuP_$2$T@BbjiwTej~n(L_r@2~qob^V#z|FS=9;{&bu zL+naR|BqvXT8jTGzaxbICF4BxKeqZw$>0pyJ(2fN@3Q_cyU(olzn0xEte(>;KP&w& zN908o@Bb;|pm=L}>iUK2I^ln01Mz1ZR{A+eM?Vz#P-%^I{VA>AGVcF^Yq{@T_XKkm z@Vs1yUIEU>c{d0^>UpoieVkwAwZP=K_-Xcj4Rz(zL-E$~lj-+e3obNiMo4% zzFUu&{$M%z!#|0c`0a|tQ~me1O8=jIN@yZ&;kCHMUpYz331*H9Y)|(Ws(-~kr?1of zUTXJSxW^l>rG8ZZw?=q#-xS6Hju5VX%{mI^+Hd`?SwDL=)%OI{ELj|RKM1a|AUM#HNI%!7z%UT%K8n~uM)3I=-2DtC+L##!m+^eAj_A$>P3HK z;%~%%j`+V5{a>BHv{?3!m*|YY#xoTE<~rKf*!uRZq0sFKeh=sG-oydyX8cp*iZ#NQ znJ?4z7+~5`X#o1daE%@Nb+X{$)YyGfI3u$9!@1 zX8U~w!p~w}Sn;nC?y*Ce z&Nzs@8w$Nc^BO<0c#MwJ+wdN?-RuC z4A?(@XZjJnAcx}rt*b45`uD8t-4J4t?Qq3^n*;awz)KI=`Z`{U|Jl61j^*&DpZ89| z|5oC!`FGi0GWPKn{@%RBpJW%(Qt+332P16nwHjx0@{ewu)?nI;oe*O^o(@-$~Mf{a+v~>Ib4;I*OPW&@?Mg;$z#Q%MyAG3eRm%+mt|4((MAB~?Y{j3%LUn_q849d6IdA5DU zb06hW>+9{rFDygVA588=>A3J+%%NL>HgeeMGFb|HUu93VTU^OIbY? z`V;n>!gQYzz1ICkLca-&aDD{yUG<)nx}RF?S?fY_9y-(B_kL?#NY1qmy`$yF{__`` zI(=XIBHKbFYx_s!kUXQ`SEGH@*ns_Ja2|ZJeShO3T;u%VdF}Xm&$8FGLG1T})BXFa zGhkf#uE^%oLUR7I*Z%yu&uhOv+3$PBlP3SQ)AxOW-&Zf#?-M@xwZQki6yGD`6T1(4 zaN_(2z5X(;ak~3G>3qk~7oebV{xu5uo)~`1*^R`vTvv~uf_>#q3Ay`29me~`KCgZW z_i@&rW3S~IIrMv#4|M##c<>*`gul8R`4)kGjBGolxqoppPIImNwO#X`ghy=kP*n5me{1VU3D?5o50&FT{ryAl zkni*OeVTvH!G4JZ?61Ze-*-gpG#vVUuAH!UL!ld)|EzOfjK>={&RaZH&+GTqDbEz% z%lbcxx7Y927qIMduCG1q)c<@U@>}cqeJbDO??1(0->7|G&vYI?weR)&zNL26r-%pN zcUb$~$-^C`{MCFO$j}_$XMV=bd!0&os&E}AJ{HoqdIY@w_L;W%lbZh$`O<*>uk$Bs zlru_~TB`k{-}heHIrXFZCi|lMv%J2`mO4()RXFXR81cG?@fP(93WUGWfmaFF!X3X8 ze-=v1_$@f&Cx1VxaR+1w`?s3wJbv!?HOKE*`}h6d8o%}Wp)Buw_@ciS|1Gj?@lpER zx*6YgOUr(WItPwE#2>Xh;mQgudi|UUD5Az{SJ>0=sE+n zZzF`?L%vkHjS;Rz^ScOmWaLa^zaMqzQ}kaQi&k|0ly}X^jo&|#{~D*;`ug4n9k_nq zYjvC`cRW6DL(-0`J74vmSYPF8L|?$tW2x;o{^q4-e(-UApT=k9?{_!;v^9RA;>msA zUy=VKe@eRJ`;O}TJnoC6@7Mk1R30jRDkr_K+IDnYa_WD6*}}tYUkiO+uYddQ3vLzu zbLZdoAg)uL)mr%0HNH>n=Nnk{&s9G;{^K7NEj~)O`hDx^Kf2#{GyOP)>-RlEy;!Ax zpN>|!Lo1Hk2e&0dW ze~epreBhbnvk?FO8q8U9sQ)H^^DYMe%l$h8QPzvFeE#Xb_Z|7Zo&3I|lrIOtf7N%g z5{g>6GkuDFI0gUd_^oBXd~uEWTMuab=(Vrnj?W`%_tp8Qc6|1ig2*YB*z`o-O? zR%(ar_~`sCEw?dGTw_%o|N4VFTMy&c2RZ(_FNV_hl+wi!Ti@eTU&+~Py8bmL{-pIZ{v?0jC3a6sKh-$D zRmWXRwJ&OH;5pQ@)eqVJ)OJrV^V<2I;Zi$1!UsOdxSGm){hsHuzH47(86VR61%0to zYCkG?XzYs9>!+ zr-(Uzk>WkK2E9aSpDX{b_5JJFzLvN8ub2IKnZ*f(bp3~{uWtNHYyNeO>#UXTwbc37 zHMV<{eysjoK>eJrs@=x%SNKa(?ccBca)kXAVSSGed~1zgQ*oA&DE+ z_hEknoQJ&j_}Q0`|CRfCd>txHeut)^ZE^MkAH65#cI5ej*JolxgV+4*kkW;g-~9NQ z56JizNdI@!{yB{AkL(T5|L<7(7hNxhmdgJ}EjV=0;ZK4?YR`l&w(V#?9;Uskew4=t zrq%wTof;whm4v(UZ;RR;q?ZEgU!r+0&i|+qzE+|3fyW9DJao+L|9F`C@m9_+KQ8n! z-RhtE%TBI;j;_%^haI@~&yxw)zZau;dDM5xA7SGAIY$mg2!Ey1ew6Sl9e9lJwTcDa z(C5#N?08&IejFqH+=7mjxet0YUf#KX)P7d_QTs{hL7)F+?dM+hgZ_Q;7#mW5N%cgP zaJ8#LcUk#ynDA4b_+p*#wd`&Ejw7u1pMNp_H^KgSfc^6z?5ocpSkY9e2$KDE^h}?Dy#RdNkZ!dm&8tTWG&%{RrX5)xP+VZ7)jrUdnIH zQ^p8?X~x!5c#?4CuP_n6e)#I=OaC0E{CO_d&)*FHON3Q3{_%>={iE_n`{#tp4M)$6 zs($#s#jA_&KgRwH)ht}`a``dB`pUn`cRKMXk^ zJU(*AIj@ucX*l-D570jm=x6Pp$aN>zKS_>@j<3G!I>n#;rv3BRPQ1+H1Bchp!>@GU z5!U}C<#X&f>4)$z>qq{Vg&$vMZ#<52TkV;yU$byqD-_akI^*ptcLe$CT+&bU`QWWU z{x$Z>lk1q|G~l)UzZLetp9aKZpR4! zjP?WDFAyHn_kPZ{UnP7UOD#TKzUCg-H>>ss388=Fh`h)4i}2A?aIN39x3ArP_}Sx7 z7x^!>Dayzf%HLhk>)Y^w`diA+{Z`8!3VjUwxWIS{+COR^=`%6h*WXeWoa=vpKOVgQ zdFOp^zp#a0La~sj;QJ@)>nGr?IvHMyUnrm{ja_~=wF^s{*?KZ zktes}OCj!qrTwO*%6IL*f2SN#`%mASqJL2*KPX<0)A1o3X?SxypneD8Fwf2LKJ`-w zKb!E^Q;w_L_Xsago+@0w`~BKJ9diuj8zG;a0-6IL04Z);@BeJJ^3`aDLizo&@^CABk1| zt-jj!pYny4%D)=$)cm{t-7|f!E7!xk@n!On#&LCA^}V&L?R%@NKc{+_{H69(m+Ec8 z=P0sHcj~L1^^nGoSbv`Nmo?r%_yXZ)<%9|*LjV2Qp)Iohv*yUh z5Z3=xW35LUoR6ses%1k34&PT}K2gV4TR2#>_(ixcXr`iFpvvdTtYYr{df6)1|U5HzV-j;dB)x)9CAjVU!ec^{PVxG(+ z+=lk$zRW+a1HKc_)m|S8WpH2W&*S;nYeS)LVxC9r9ih;xp`RmfxATOzLJ|#X;!bd58s)Q@O^Y*Gj-=p8-W!`A^2iA((|Ah^pt1DacPrSpO z`(Nq%zpej|{SWJZ;0V2<|Q=?{o;yV5N&(gkYp#K{mY}t3-n>*9L+y5T*LH)C~ z-;}T3qIMSHUA)n>XK1H-gsWW^qTEovJ?6|e7-s#iv3<1%BZMzgjwwFcZ#x`#jP)Z5 z58Ll85PppVKTNp0zvdCb*DBWWhL(3f`9=9o@qd}0DTmr;_v80dadrt1#{&Fc^&iDA zy$RP+MsCD@#yBf*$mF{E)+dJKd?~L5CdYxt+xwwEL?j)jhsFh7{Ug-Jd4%nGufsi@ zSF(QX9Zw9&c^%uU;aNH7v^~5lBqtbD+6%o6zj40WdH*rCUk9#oy8d_#`b?g$Ux)iR zfAI|BcRldK`J2c$$lqJ6zZv&&9@)tHZ^AXsDEwo2KJp6m2TnbdDwS^bUG%_akv~<^ z{|89_uYm%q?hVlY+blht!G^R{`q%j7KdYW%yhPu7lj>jEy*mCkY5b3HwM&1LBBq4v z`;O9|boIC!FZB50WEPPKZKOV7i+(Na{d2p$A8xMJezo`eWLw;o&(qZ z|2MXy^|k*m;y5Z?;}TDye9*Xn^63%vM=AF_B6Na&gN~z)%d6FIV!uULKXQolK)8;} z)DYR*?Sx!1h1PbaQB_^uLq#r#p{P z-}7mu2l7Q1Z#47ogr80L9h~PEq5Ss<-@@@y_qnZyPd>`RDzc2J<+rl*A$H>=peiu^wZ3jr+99o`t$q_|Bdq_2 zq*IMwYyVZ%e`J5eSbrbm&Ki$gApAD+pTe&u{6Xcj+iZUq2#+$}p!in_&pGhJgs-EV zYn*2LvqrcU$N8hqvM{#)LqYrXha4aC_uoGcAEIpWiQR15Q+c7K?jNmj7LV_*a=xa% z_l&G6#gZ-`j`U1)?o$sae^l|DZrSBNqQTZNvzs0lJf2^u6d*mk-o7rv_PJYv5?_2o;+pNeOM_17!EQEo;FcjIr`Z%ujPmb89KRDAz+YfmEaFD z@43c#2_E6U!G4Uq*uFPRxElwK5WbGzulukn9W?h9c`NCV_1*nkb-d5Krk&2JtgrLu zRBjz6{68Fid=uer-1{wrpT+OecHTy~#&eavYlQ!S&iAI?J3{zc#e=+2XZhow-fZkU zt^YNS?=7$|LhosfZ>V;1j=-=5-Y}oY!x(ILb74i27f4`HL4HLdw`IdH{pee^^ z*3e_GQ2uf3gsD7<;y}t6Dma1P5 zldiT=PU_zc;@d*6*Swx%r+0IaS72p@kq3euwU(zb! zSJKYWzdL@I@UPQ;uT!7Z2|vJfF!~<{^k)R0Da~;piwOz%$F7%JQ z_D;ciX`ChUN9`{W@4z|C_(kZ`h%MlJkoW6PU5CF#v@Z1iGi`gd$FB>?`8dWe>QBRc zoR0_pnD^a<=W(9F>)Hp=KF%{3kEwkG*EnzC`)VJ?HBOD!)INl3oEopGp)EP@X8r2D zh?n3zoA0mPjr%wkKsORUio6&7f%C-|T6`j($2HD=?xz!b9M+HHd?xr=@NIkr^GR_Y z<^B2th_~R3oy+@wj{7**I&N@oym;Y-za#v8!tp<4euy^^i2rh)2*N(*&{FNMb(9zC z$GCq#TKyP>t9)qwJzf4CF^}#49rFsRKb7x~DZM-THcbB0zsnnCJKY+`Vf`54w>s?< z2tT3wU(g?_5`Npf<<}VflEZ|5pLrLB*A%Yn=h)5>!XI?vr$-6@8Q&XX{W{?vWrM%MTzw7j;%y-v&Qo4UXs}~|Cc>in! z?1I;_FHf+)w^E*Iow=^|`fovfy(i_pUiK0>9wBcA{U&Ps*Wx=ScF9&kH@LNxzzB*Kg2#yIyPFU9UC&uGg+TtoeAouX*{}9_-hF zQ}gqoC<6UBHBYbg=Ru#6uh(nM+v~OF@AX>jZOP;7wUGvIXkBYwU+@2i^o3)8OP;?r z3H)%X{T;as`-kAvyuUuL`G383`SoP&^9cGv&QA8Z%oou1Pue~g+;NIMF7pZWd9}yu zxF_fHXg}!vU)DY!0euGB*ZmE(y-xOf75G#qPBW(=M*O36tL5bPpZ4rd^ecbgOOD8x zmA^v28~z`l-|8EIKTf6J27b%=KZSlHZw5W#RQj#qx19f7^sD3jUq-)g0q!{0qF;UA zW6|$2XhrKv>H3@RfE^IL@A{v=Dt&94hFI~B(zTXf-2BKLo#@;6r>GyJUn+j+=FoGS z^7+WGwd1SyLt_s1GtM6RANu~|PW}6x>xOgv3dmc1R?4d!{duv|{*^Cmum7KzR~39d zL;YXB0`@-66{o$hW53)A`5k=zn~uHGaO@e^9&+uSA3M+gAKNz$er3o0xn-ao{}&;C z6#SkaU(kMiz4QE;jy)81uGKzjBrx7Mw>bB=JN8o5>EAzg#_xXKZ$!}^&U@7#jbprU ze#>b;!u-5`(_ydOKACXrqvP=Rg7Xcwf}X{miKSuR;p}tP`@IGJpwzEo?V+4{oDDjX zL(6A;^lje_#&-@fzH`SQbi+(5K3n_1F7w>;%)esm*hBrlql|<6OyeoH?qm&H{D^U6 zjhnzcGsmgwfBdzrA0hmwjL&NQ0^!e{vGo*QBm8OflN5fO@UrG-K1_V*uYApkYljK{ zsp6ylCE?$9;8DVlYW!6FOTxD~^$Uc5+3`oKgjaRGGut^#xbEkvesGQOXFBa4A$+&S z%h*nx@L}x-!jBVvAID4EZxH?@2hS6PyMMt+sp6i7FJL5)?`)zy234b!_r14b?S3cdw zaj$9|2zo+}Y1UWxal&IxoT)+h)eihY!fzn`d-vJ*o*=xeboCJ7hzH1V6ZyCCEc?A7 z=pi{SW`Bl0VC#E?e}nH09k=i(;S=Pq*t2arGC#~5oCnbOS6e?u!ns-7Cp{Mkzg6Ls z4^_fzFR{;S{~sp2q2t(X-&-SG=Z7er)Cte9{boNC{_C%??JK-N_;!wq&Z{^<`0Y2^ z`U(#r-Xq7|RpQBcq+Nvn=+*7@J;F=mYuyJkO!(I*KO_9RgjK=|><9g>+N6E&=N)>u zmGEVLug3X~5PpNs3*q?6-%^(2yDFDHXYoBjc+Vl?PxvE*Us&e%a=c_uWjTI>^rm@> zF2dK@+f6(F_@#%Q(#gJ$ZLk$}U5)s!6QN6*_Pyv6wXLMQ7}xb;3-%1he%|WTf0kq4 zUHPQ;=ck?c$ff7C-#_|m?bqJ`x{`lXoW$P<+H*OyulJ;^I@c2K3EmffIe0Dco#3^^ zcY@av-w9qHaGpm>wC(=Gz&BWb2l}HL!2d%RwBKLE^TGbT#p$ngu#bcHB|mH8LvMgT zjWY!MLi#6k7{77eHrC zzgIc*a?ojC^V?O7rJNg`=lh-O2hcyk_~Eyl{<p;yZ>&d{+k?s507^|ZlE2m^PTSe+gCjpw9hW2eRhWQ*Hp_si+$Yc zzdp9ArP^or(_Ykl>Z_Y=eMRCC$G-7+<5b#Ps(00{T5Epu4Ycpw`ORvFMc!@oMU3rV zO+6Rm{wivp{Xp$<>XioTf5(BJApCx{OH>cBAD^yzl<+RXL#o%Q&pg6E!S+?Z3Lnd{ z>hHS~{(9Ee{aYf0KS%u*+QCu6Pf#C6POu*cclD*N|4i$+&`#3zpP!;WR{g5$KkL_0 zAG7`f+rO9JtM#uY{1Np_SwBN~jCgAO9N{-r+uJV?ew6ss*`Gzi@1Wj~Y&Kdkl~ z-+PGgvz+y-$_G=VLv8 ztN;9gc?++;)s`{V|C3mI{Q}{aJMb#u-z8k<`5q>`#yC!$-&G@gLG5zlbDZ$Ih=2Xh z?E4#ppUr;Oemg<vi>2oY~QE*(~5oB$hOuW){a?u zsLgAscIQF1r|auux3|mB59zq8oMHXu{B{1FuX70xU^wLtszY_VStwCq>!^H!cl*q)YZzjlEI3do`!Y=U`RoU^OCp4?qkdI*l<+Rb1r;76T;sKB4;2W1592@~ z$F6!^4zryH4%lmL=Lq3Xb>K${A5{CE?bivvSKnK=?Hwch_h^5p zo%$KVpX}Jpx&_omwqIrYpJ)9$6(6>Lobcy!yp(?KC;X8)i%0E$*|I_SLH2{%@oorv}Fhst2MD01^*+uwM)gEFyn&;c5d4@l+_;{>;H}O<_#O{z|J?SBK z4*8DoIQvumv?$@~=cv6KBmB+EcMsY376^Yg^KY@QSa_B2>z(*wmGa_^4jfy8o8u#d z>w6Cqel7ih>UVAXHNvl;ogJYac7*UO>udkl2@fw3zfaimIN@g!uKm^^-2Ho84-($5 zbnHUU1+w!sq#3l@CV7CoAcTP?3jOTW3o8C1wed*Nn?y2dCcz$x*^yJj;$*JkdVt&uI z={-}^d*XZcEas!zrlY&3qf^uSr^gP&(=(&f@#J#cFU1cn`?=(NIyawOJ2IK+OXrev*>n%i-no1}lfcbHywroU7iS;New+h12NMhNoL|hA=F=H}zLHDeV}{e^ z_}n7eD5ML1p_rd9=JVxJ$?wJ4S56fA%f*UcNf!DmsEi@(!%+6iKLh5Uei=>qHH=?9 zVf^apm0x}R7`&0baE}bv&@lSr;#@j&$!IbY&u)!pEBL1zU))+*NGG@DQ^ojrv6wIJ zDEj{5?uD#hoQRjxxruakuCk|6TBz(zp`-Q|(<|}4rFhEUSIMOlQ`7j8>G)zXJsr=c zGx1_EzLLn~OMcRy_lxuKOv#^*S2E?)cC?zpr>0V+L_D`3eSlBt8N@$*z4&LaKfB<^ z3%PQBp;W-VL@BZ0CrcUMFO)LrgpZEs?~#AdCFqkil>}OzSV`jFeg4&WZmL|wmrt$Wjfv@adUnE}me$JCex{PDfS%&HIH(pRnTh8T3;E0aYtzZ}i>{hmDf{wO7jMd>OJzR?Uhos;LcWm5 zl}mmGzf1YVqF*kVx8vUmAS)$&X*rG2ElH>K49dTKz4Gs1zwNh6dPW9>cSeQ=4VxeG zOXYZOtDghKr_p)oOvXpQ<+i1Z=(3fmbaHH^P)z5`+x(JW^vmNJa6~*eo>>8-CU&5| z$_sIHUnQ5%@7n7vp~H5^bGdjjJ{ey`&EjM{mqg9UcoAcsn*_Ol047)Bxoo_+x0H?N zR^t2O$uxLsY9U_4b0`j>bMfXRNOCHjTZm`kQ~8wi_*8x+pPkE3$AN7=HJzUG(b{yn zxKJs__wU)gXYb6OnW@oze&P^{DM*w=K9@sZp(y3iX@!dL-+U$?N4J<_uzx;ZOc?4t zgdRvrUxDl@xy4+5DJN1#=*%nR0r!jj!^6G8X`_h*h;w{-w3zjCz-ucW&7p&~<_r03 zem=jok}}t07*jv9D?hg27xRn0KL#qvfa14R3Yk3mU>wwyFQgOW%NXLMU)eb3LQBY&n?A;Zb7MF_Vnz5v|pZ1LlnnT z3;R=GB=8M-b5}l5&Lr_%26UIpd+}U8=@;^u3P+U@P{@97s--Wo5J;6M0aU$frqA(F)G& zWImV5XVA%$`9r>R!pxrd9Qx6Z=c4gUcBSa&{HZvo6Jk3zRRQ%%Pm`Xe^E2`yc`RPe zXVZy%adijo$&g>RknxuX`xE8mvUlzayl}ERw`_m-bCndZTNEu3 zFQ!WCjoh5@JNakjP{!nQM~Q6mUCR zKyMUE@j_baaCo+O;Pu2}0V>Q4z#J}?<|^~jcxiLeKeV}2PNs7`y}jX~un37ksG9+! zU$)}Y4xvkOWhLqH<*|i)F<#1|C&!BD4L=I?whao-Pv9cC%?F8sSc~axxzc47zqm3x zvt#e%=)vf|y<<}lzPskfK?f`NbpY}zozLya#ARSWZo44~@}&hZhjfs1_V_a7NE!kW zqqH}ZoZVFh$0g)f6gtZOnywTV@v974n4OH57orP!FsF#?sdxpLF5sgvjAIzOT%{lb zY9#24{3^$btMFL;56 z4p}U93)`twDkPRly|aD2GPXKyezB-O^ObU6c%Wy@KF%#W}FPoZ-Wl8bUd>y z4J9x;x>zYz#_?g%VqP?|5ZOd}t{68%B+pE*6#QLDUu=m2bmpX(0r7MaM4_BCz6@Rh zC)jb{SHN@N>i=8n4WbrE{}8+l%?^3?ykTh4#wnnFa9h zEXY3LL*8IeK%W&~*f*X`VmM0jGYf);p<#Xk1oK0Fig-(=56y`<&v|0eB~l_{G9HXC zV;ot%oG7jopkri&=FxW^NTyUSwa7)a59p<*MLGd!A4s6!`^8*5>yx77XL@tq;D9kU z)CIP{r)K@~LOyAvNVc>j7|4rrXaNFxS1w(q1lT)24+ASvDO$`*3w|b}Kl8=1XAG=L z4rBsWo6GnW(fPSU(pb+x@4)cTurauX275>PM*58*u@&aZ>=?|BVm`A2CKWmm=6QYw zzX27k3nR-fPsB@QYk}f7R6%(G3LfyOauU`9XcNDuA-1Am+?h+EZMDsbd^|}yoSF1N zvuQB*ioY0zYFk>E-3f~)wGW)gm(A?+5BbINbbiXu%!5+KbIHB)LM~GfRv@t~s0+qg z2K+d?C!T_73#xz+GbFV?CtN1A$CqJDdf7A#lrp*^c?go!c9amod()>m-d4zI=1jGV|#x;@{hUfeysuv&xf`RscD`1+zSmGmm zW4F&h9|3H%jJ0Hp0|&&d-ERM-QPnrx(?2*e)N2gVF$|tafT?o6DDQ>nSTx zAY80GgmeJ`rN(oWEPg_q@#26;0=W>>>>UajOEShNPzsdMhxcme0x}ZnV+>>28}1+W zmu1vbzBgaN;0n){%5y8q;ePRuy~u!sGhQF41BwB*YO+Z**>uh;=kp$Xu@rP0C_ogt z_^6NvUVh%o`q_MOrBux3VTpOr2^b{t2Oxh6P&7%72p*b_&l&lKM?`jb%Mg9d_W;jS z^FrM2Yhk}y2Lcuj^h2^z^kMXPz{Z2U0%eREUe8E)sIPx`u+JFDa5M&o`ulnYjb$eT zYb3ZCSy~KM)y#~EumnHtgCxjjWz@H)K|R8VGuCCBv=Vq`$Czg&wjKB}Zz*2{r2~~T z8c>M?$6n-#Xc3_pJc}!6;o=@hP*GC$3P2H6)?(PTZFWkm00_0cVX8m`6&FDc5HN-`&?dD~)H(`As$^gX$s1>cB0vK9#Fz|=TnWcm0x?%I zie3qQXmmw$gj+o;23`u{yqGWNEs-?&-rxzr5Qk9#c>=y!u>{l$sgr>^RC2OcLN(C+ zS+5Lrel868Y(80mf=a>!##O13Snyy9!YdaEFa|~78{5OYI+4f2LR4bA>_ZsCyGAsp zp+Zl@9aPy8Y@9+CUzpAz3XsB8(QndHX(gBF2BRdqMMS_wD1&_P_PI)FMLt{nK@Yyv zA|B(F=%5me>Sf3*e2s_LliER+bOZWoi|18frOo@@9ET;)W+82H_Rbe#=@#BI7I^>A z;Beni&%ki6F?KK39yKF+$>`MBu3fWD7sC?l&Ug{ZD7QER>lQr($IdD~@#o;emVK+s zwi^jg-bi|_OJQbjyJ(M=i~<#oCgZTzizT5(TuQ_OoFGn|s8Q13H27HP*idPuV3aIg z2TyHwUw#2Sy%OIA?N%)1b3jDYp9m{!rcR5sV(EM$zvLI8hOx(D+0!LhJwhwS!S+%KZ+#lHxM9&>0b!O@ zB4rI@faI)a36%?BlFDJAv+>d*E=!^rvk4)@7eYzN7^)r=>V-8{$$Il(tfZ1JNL4IY zDk^U(IR-C57R4R5X#<%X@vBes+-g%b9 z3h>a4Ks2UWr3fp7P7UsF2a|{?X2ch+CtzhYuML^Oe3%`DZk5;$l!Lf!vtt!Fa)*3~ z*U>`SA}3lqV9^H%aWqqajp^e#5SMWfg``1WqG!#uiq?HlYKQz*|FnzR@#Sf80fp#E z!&kuZoQq$JK*-cJ74)EtXv%}?%awp;-k5DAYXNx@mo*}|0-h_b7%^zBR}g2)c!=C0 zumRf@0ZEVq=m4f(DzQbx%o0LCMv#lYo`Mom0jPomO1gsh5WJH^py?zi-l~7SR@2cK z^5PqIr*jZ?*049%Mf2t0dvQOk=Ep!NQy8%e&dd2rSrI&lY#C7vJ}AN-kOw?5F>LHm zm`2*esM}~w)4a7%Z`bC%6z*U((Ft2b!^6E13&Qfni^7{mu6n+(APhfgPy!7rE&8_f zey|0w1i#$VGtwI#=^Y*!7zmqC^}xtrxPP#}e`sjH#&E$~%Iel00Tb+l2`%y#mH?<| z`^2~h*@t*cG3kjgY}o=BIgDcp`3R@R^i~G|;c6+Jq$2WE4A~}aPvrB9l>*{>qN(Ac z%!r}52Q?Oi+UJ_CY9#6i*b!JaQ^ ziMxp=fY&1)n%k)JV`%`Lu=W=G5DkvWKxlGK4&4XGe- zqZW2SptiT%#yqCZ-fU^Hz0SVvQxKYPKj+g4OO;?3bUoC`F1T+nqVmOk6=?mqVRG+^ ze9rg!DDngN91zdV*y1pCjN%lrotc-gbXyq51V}`Hh#*PWd;s1DSvZeDNzTWSMS(Pd zXenDucOD<;<)DC@0vE$O4*Mgz#UulgzzBZhoQPzwro0^Or9s+=@ufi}R%*jGNczhj z9W(S*%1`H@bT+vO2)vh^qndp^~<1NbswTy)$mW+s9(8W&32j_!!ZJV0i3TzP)hiQb7 z%p+um&uK?uH-eP-!YMJ3XQz<*D3o`@m2zq!G`8Y^B*&KCiu@sx6`;y7#9;UM1%!** zx={VxKrD0>+x3K3gL;q~$vbZZceNXf3L}n#*-nsCUz*(eTY|RO>a!Dnc<{ zVi>7AC&El(9+3G69m#90-)BMUNf|L`KugFmh_v(epDQuEyuwt4a513?76%+n^xwM!rc*s&ADyz<0 zyK87Z2*KP*KP&pBX)`s08<6BVLyy4-hx!F-YnYw{-N3U)JR_TxaD1zy`-XZ4dPl;r zDf$O{Mr<0@n5v0(#u~jA(xcQ4Yerj*9Gj9*4UG!g0i&h;@JMWcZqz2LC^lz|+!PtS z6FM)S%3#8TgeNpLF3B~76ycq=;u{RcnJ@;WX`Afa4#I7zcx#vt5%eGeTOwCQdQO9c z+Qet67)QvoO~73W-@z3@O;0s|^Av*U;^}~G;iJKaD#0gcgDqj=LIM#L)c`G=0kaXG zfWSv`tKd5lU+wU@9N*y2UOrTBDT)Zpj1bWfLxi(~5quG18vl!QR3C0oY)@ec_P- zo8BMk>wyz8Fa)_V&_6V6GyS7RjT&_xEv65l12Ju56oiO*Chf#Jija$$ND-6(bduX^ zZuOC{sH~DbFhE_aWIT>>FFG%R1c4Ngu`IP%Z&$9V)8RTWOlcjECf-J%&rD(#!fHv7 zhek>`wg;yrwIdHdCJn#e0s4||kUV98^IK_!2}ud>KoF)-LhN8ZpK+WZ8+*m`fl4L|+i6y~V<~bENh_mMwO%&Gfb4jwjeo`E= zG9r&&X(2sd_F$nRdV}=-q6kOf76jHXV+4+pH8`9Xsgj3=R-Ic&K;b4g<#U-8D|jtp z?bd@tXfeH~9mvc>(K;F6Vii>AJ3+$t_P_-;W*deR5pe*ENb^BtCxanojW|Q5wQ?yi zJk0knm@PeOEJPcELAb0~F=lQcUjoSq=L~FB*qlkvZIC7Bg*;cOAq; zm!ZD!&`{q9=aP;h`Co>1Z>NXRat0IrV8l%Y193J~v5LR*IY|Q`hK6LknWZS>CEC}i3;)C3VY)UPw=+A#x<1{$?km{7(v zdO;!!0q)(2`C{o+U+jt*1OicKQs@g4mD}I8XC)1tfH@}73ZexS-%d`5#uuT?+@6er z2UC@}qyP7nWe&w2oe{Oi_!On7_#$$5?%Sr~d2c$8C`H>?Ok+ltM2p&?Vu&G#98@SU z6@t?mTKYqy)=0xa)0$kQ_+LncWaq#PhNnwRq8Pos=@NV%!s6B}M|4r3COeNDwFQFO z&8%tj7I2xQ=&ZdUaY*ndcoQNM#BKGTh!u!?$(tjB30Krd55o3Zy680IU#F)?wC{YrY8o$T99{9`N+=@weo4}&X zC4`U@nw2SPTfE@3idLV&Kq(|VczoITGJcTb1KFxTjuKfTO%y1`u)5$NnLw}YAr17j zK}(fF!RU0x>vd4Yf=j_J0ZD?YyJZ5sX$3+q8!mNA|3Hu;6m^ML>V{$GXG_dwKw<|& zyT&NQQ;h6LyQpqb)spstH)ecA0FYiYDQh!y7)YcP#q8*{vM2@J3gH13wfQGw;XoTmB-MDgH#%QLwRW}x zc)U`CkJk>~ju8p85D-fNsEKbvyi4G9%9#2hvqnqX!58vNX7cACjg#$d8}JflO16V1 z@+n}KncZ8&7{K0;>C2$!3HV6fP7Ggr?a6pi>}-sAn{1iHG)e@sTtUAF3LP<~II{Ca zkZ`lCk&6CF1!PZH?zAs z`C08OMzaa>15!F)f$wA{M9d?tl0jlj{C2}`;LTL{^wqIvlg>#cwqg1{f+fb~5-$oV z-9#B~*AfIDxHq@S_zYlTI7n6^w1sS6biwjfM(BwR0ndS^n4~_imc<4yAmD6>$h$f} z2TikR<~myk4k{{Tl()u=)JTM6lAs!K2pL+;xfv#B8U|uQ9Sz+$q|VW*@|(C zkTEGFncLY8Zi+-})-kk1a}KUN<1XfC-50?PI!s83cvAYCGKI zbUW~Q(+eAIuRk^Fb#zVvZ$1(m3DB&i;(d_R4d>rjE9X_7;U^` zY)V#LO^HLIlUa-@kro47>~f@xt(e*4${9$V1si&hU&hrV|EDoAG!E0L0v@q5dt}0* z&QTNY7B6!Fk^p>~H2$59jA%^6WRy%jwSWY9m~EH~3vp>CK0+;(fC}K>;){TXXu0<-N^H{8x>)=$3 zFQcQA0rlE6Ep!HukcIRlW)zDvE>nTFOJC^xhpj6+jZZ38$7Rw}m{+aN7svuu{%-L^ z@I9;4=_D3xp-EwqcFw_!fA0!(;3`|ivS5d#)-(nKaZk+Dbz-{ckAT!Joq4uU`F%@RkP8pa5OJVji6&>gW z5hesVjN@Z{p&c^U4UrL;o2@7wj3+~OcE(ZDX$nYt(}E4`E>sY^XhwI%pb+~UYj_H< z!tyY}Y<@NnV}T}>nQ%q3KmZB^EU$4?(L~+z$w{R0m(@H@V2w>_6KxM+JJs7pUWlN< zWDE0KZ>$m$c%z*GP8HtFP>WJ;%_J4ih~7$2e=iwfhTH*|wzN84LMtEM4$K;{7EFK{ zJZoQxCul3_+(9JB^APmv3Egv-1QE8F7&3e~xJPEOsW*q8V9cQHW7lk0FSAY1m~lo_ zreH!&5C9Bffz9(+!pE46Jfimk4va*eZS+MXVNd_S0P-^fy>MCv2N7)@4iDO?(L=pM z1Bl5E_Fz_EUq9AnVhymJle#ruN#WxWg#~9#1=Wj6jMau}CxyyPH@p<2NFiw4_`vug zm;@9vS1G32-_x8ssFDMT%7Ey|1S2RaJSN2T+f@>Vca$+ifyqIxmIYC8VrPLfg$^it zQ6!mGIR|zjP#}h*7))Vs7dpCR;O;g0z!>-)Rk>Keu$uGPW^_=MBLi+?EQ3l5m`R37 zBUrBGm#xa~WO;)@IhiDiw4uo}3-NgKIq|Lo&n3I(b23pG(E*8FxJncgt+0wlnOQR< zt+ck8!6KB2rQA?@5?p0K0?au!wM%l*)Ko#X)yal%=g}7O5H{G0hOk0jCWIhl(9Ckk zHTlQ}ZoKtIV4%bDi48E?DSym0L>E-9nVQwKbc96&$0i0=77DkUhD1UjYAGXNSh2}+ z_6Onyh#2(^_6>~;4G)KhV5JWA^o|Vlz+g4&7KIsP9$mn?EbYpfM5ndpNT&|bn*@#^ zVPas2D>VmNgDwVX;z*c?Xv9l66QE7LAfA<#74;_ZM~fWeAp#wO36p)KISF@rmqjs| z*RKA-JX4V}kUnx(lE8wI$oEu2jC~``WQJU!?OjcGM7n72lvR87ok}cli%k64<_V41 zlYv-*!(a4eojC>_78cBG@x)qQo*BQO+>~2upb@wQN^Qf?EIaBp5kl%rm@U$m2-yiO zcn8P#>^kV?@qlz{I?w3(B=S)(>=?iU`^d*y^OKaprN_7>K`C^Tjg8~WL>C%1(OdM? zgvr_`ha>K2X9(`v7JQd9c+Xw-oo(tRow6#rP4$}Zvczoq&wgSnW@hMG23d0$IrL9+ z?L=XE!Jo+&Gf@0(9-{py9Z-C;B`slkxmENeY3*ep?hymUC(F#|Lw>nC{A!{e{j)X`0NBW1tJwrpinBdzBPV5;7 z+c~`uv`xzva(Ajtf5{B4c=LAqJwLamlvcghDXu0=Zr#QJyCdNsv%I#am;EH(f=_0c z*o?rY{QRa~V+429WaC%>f%{1way|mNn5Sh*A>6>0j9E>7N?qh3$feetcr^(@z0##%-&V+?jlZ+n-tN&>v~Z$OCR;=U9sjiC`5<8Hh=?o>6hp&vw#M z%Rs}fGe#{k(3P?eLUk=+`a7l|8~JBO7Z#IQl2SBNRr`@G?;q+L2oDbrViJ1~xMN@l zww+lIs{}d4RWk0 z(~L@n_!AeQ*7QWAr}rFHVhch zgjO?{J#<=;Uo)>qI>yf7GL+8l+hLo4H7FwupRpz7n%Td$P@-8oAa!LgBm_6)ghtzqbdHJi^i z9U`46fK6pISm&LGdHB2FNpw}UZi>U6`Afy%WpSPWgfTTJPuUE0&rH#jUSQipmmOMVa&Ix!mq<`lOa z8WoD!t&fNK;k@>;O);;4q}; zwG@7HvJ1UhY(D@jIC9A}7u*z{`! zl+z4yaPYcYMyXN$ShR|i2A1V@7+i)&?dUe|V_CF>respFP3%ZwHSoNVvmh!l6asm~ z=JOq_1eqW5X!o%YU)K#Gpd&l=wObiTz8-2$FWG{5t2!4%Mn~cq7_UbmKTzjmk>{h| z7y2z>FQ6p^-$6Ry-J~$6=Dy-sFjO|72a)2iG|dWc%UjZgMqyGy(DG!|EZ7Qk3TLN? zc7O^ta>h&+G6CNn@JDzUZUVx+;ofi<+YAi#_xAP=4{$%Np`P$SKkOSseZxKBFjj*P z5A|SQ$6lB_W`S(e%s{Zt#*n#a4xb}x@Vs4!R@iJpw6jwnmRw+-r5M%Nw9Rf!VuZQt zPI3xmEBqjafe2ztMKXS(wRkB4QTD5mwV;^OF%3gb1aWhl1~U^Aa=aOXz{G5*QOWoR zCJaFwgFeK+)+t~z2zUxc%BYOWYF0FH%^)vQ*PAsUc+_2V*A&Cn0(g`PmMl9|&_Gd3 z)+Vtuxg~9z{95#zzwCfbqQ~mS-o;_ipi`%>paW(|69YtnDG={Y98C2nlYGMPo7o;}31n8Kh|lW!B(zChbpiAnO0 zHaKa;K4=F?S_vLL7KJ{#*oNE(5jQCeA0@sZ!aYqyMT=oG*p`GLQ*~<~%$RsvJVYV~ z`(Q0&gR*eAcR;oo7#xC3MYatwOcSFS9v2*+N#{=)QxLS$r0UjMJCZyyC)mvdkqQy9qMfZ}t5+~Q)qzVcyHeOr8ZtpW z?P-J>R_yEoguLgjHvCPOY7-++sW)lskzl5pmrgWJ>@=Y*_E z*qGLZ0*t(cvE&yduWf=mQIisFbqj{WdQ(kdXY^+?-0m%H&O7T`w%JyrUghyu54?rXoz4FjCSA1a5qCA!jTslfDbXV_0bmQ%Se;(4`sVW zS{AZ!RrIyh{$?3#UK|@UCe1$95f~ zC(>NRdb17(Pcn%zwDJ|Jaw*nZZ&`hirwHpB1r!`~YzResf`i^O+&R!>hkTitHSm*( z1Hv$oypc$$w%K*E_d_rCFzxTh9wS)K0GFgsd}d+ozCO&m8RnK`W!mzTrv}fdXQ+bG#nuxDZWl1H0P{S~W z4vJ1g%QdIrBi|`Ae(ZNOsYLahSRj(`Ws@eD3aN>>jtEYhdNeV8BS$s3iW(pmY~a{T zd$pM=*}|qv!~-cHL!nmtCt(gUB>op@zJx=(QQ5Lk3w33mc#*zL(q)T#_ zJ8XPic$zb#O+uk5qdTinWyq!~?ZIv}u%m`B&B9C$hNp^k=h(gpDPhDeu|2HK`eOF* z@G!QAl_W4G3rj!~8Dnhl2~mu>k5I5SQKmtjK&Twl!M%9oTMWI!{O8)GPAL{MiIv&E zxt8Wb(so9+=?>00)ku%YUZBfNhl<^bP$uTmNw(aiz?<6xf_*XV$~ZYPq()DfhoE)L z8b?k`c*5epVt|>^@wvE&glU)fCn2tRH6^F?#=ub0u43T1N ztul;-Fhj%GRJD)0tY}B?f!tKB+qtK84;rz0(d}k>{w5J;&0wu(#5n#S2J95sPYyXF zyD-3P{0K=l*uQBG4w9%bY@`H12aClBKsBH6W*Z4mzyVpGm`cEf@(W0oh~R1_7P*$e zru$50@i7ctYnu!AJyu2I63TdT-mZKwzLSiKbt{l6h_gsy4by<(^Q3eD+ubMx^s${~ zr;&!yFUA2HRnfPm)zrayGXy8t$UX7hTN+U~o{=<}Z8&1>*C%hS* zBMJPLe_?U}$Q@uRn-#2W`mwlZ2#X!gX*-5z5kQkLtZc^0={#!+<7Td*^iJ*MuvT`A5TW}OFh^|qB#?)CoE!;gJa~3*&Pcj54?S1I~bLQ zb|l6P+s2xCU{T}ugHAv*tyGPrDMJ8^)0;7sDKE0a4Hg^89?Mv+X(Q^!g%?>hZ-f^D z+h#k+&MXfr6Bf3t9#ADItKD+Ah%~7+U8fb(3vmys(n|q{enlCJb6c*ppn0`A%Mn8CpYj zChX3&c17T4!dhl6tCbTS>>K?%B$y5$e>F!a3%qE5fDMrLv5^Fm@4+~OGt)_j9V9Si z68w}hu&&S>U;}IZY6{wbKrfa|CGu(-Q#;l~>wtjy^C)`}F$gx=S}`N03C2e@%3EXb z)YNc>kJECk$7$UMyT24%SsGT>p2?(PT0Md0$k3(B6}0+$V|q$I`m%Ot6&op!eYB!^u>mUKyiHRbJ8 zGbjP<*#>}Fw*vUK+TH+%mXXIEAJZ@_0JlVnmLp@%*UBqRh9 zdM^_o^b$kwVIYLwI|`u}rAhB0N|7!~Q3OI0qzHL7ZBBU z0;5WKESlH7+ofSe$;L;}BS%H6HS3rx95aO%@MK_mA>dTUUn;FCZu7YFdC{*gj5%7( zZ?YVH0!!o1m{_G>8Ou|v6xQN)j1A?f2B&A1g0CVrjT^VE816QW?%H+73DvLqu=;i= zW=fRSl76e_ye7|+C_`H_8lxkzz0_MXHXJ~rl`xHst@IFpkXOKF>eALc_Z~NK72vz)LTUtC3)Z z*giSxAbz$s-g1)d>A)c~!+cusGxC-$C|(ohuY&kigl>xkIj5YeLDSYlQSv2An%(B3 z&-8oD$#ecxqiFuVrvCo8zCCd`+BjnftNu}@t1;?un(d`NG9`y!;iE$P@j^W*`PC3F z`9AaWqWWjEM;U{?HqB=j(s86I>^2ff!qs#jy&jZMZSc&gR2-G|=A9yqiQrM`_e5ga z_1TNaXsxz5+ILP9JwR&sE!{vGaE>{YzXj-PoV@48AR8MVs_jX7p7b|F zn5;Mu=f8S4=K;Ms7+ST9IgIO5_^TG2M)ZepkKE3c_ZVMkO|1WJ(`Ri+Qdx^>ksE@R zstu)hb6lK+cOA^Ezg{nn>Kd7T>LfRbT;^joJP?FpTOa@F#|2~e1L+QC!szkPCdDYM9A%`DyLTFT$tQ(!$Cgmk~Yl7v6)ky z(oM?^G9#JXcCT?0CXC-^ z)Pw~Mrwn<)#L043uPk)^;~#k@!(TnBpE&1BmH+Ph8hZxOu2{-5n@XR{I|xh2kJ9#5 z)i?RG;=YSWkt}=KFKW{*WtWO96=v1v*K4eK>wKjCP5zv>0?HR2)I95byagoR^WK0X zW3?HVwsX>(!Zd|PjOPm4@B`d!>ZXuE|GNfiExy-IaJXO zKEVLT{;KZ)`3Zb}uX`LnWww1<2&8Y^83^1&U!LEK_iO9Cwn=5b5lT04LA7n~fk#zc zl)L0nFhr8~r>Pcjjobg~ z5bGmNz3HU7?wTZbhk5I>S{6tD(!9Qpbl5$3z|Ldv>D>!sUd~!FF7@JhVe0lA#~<@L zDVeM<9@6L;i%5oF|KM)b0)ujVefnPPe$~$^Q?=3oEgFjN<1(aJ8vGqzwmM7^3_%Z z)xSFO$gE@^e-)8PSMw5oSb0Uxd~hbuqpPc}xH>0Rc@@YzK2G1Qvm&pF*+0TF0z1Bb9&pdh4D)i*W$?y4EbwBl*P160$?^Ss1 zosBBqTH}*HV|3-u{Nsj|+{o&F(w8ePhW{tao(9>&fYxneS`)zAO7PGCs4r;!m5m zO8?C4&-i|oo*66U_^nnwpLSf8Khu`Yc#hZ9Wh*_kohy9WPLkIgtm>~)zcGIb zr#>Qcs{SIi{M>h>ULv*gzP0LV!_#@`_er5D++Kt`ayaX(`pqNSYeVUs(xcSZ46FC2 zL)+#l!oyO3S;eg*^`$BP9gR4*4QMOzkfr}CWIsv0W9qL1M-P2t#i?!Hh>vkEUGz<2 zM)>ypJkl#3d12T-Y+UA;SEMuPi+qz~c*%^*SAn?BOJAK{hP9=PVg31X*t{K(!{Q6& zuza2T(4}u$MrTa^!Z{rMxSW)(93MFv6gRvm&Ty1z@J)l^6z43f9(lpnMuZ&)45z#$ z0fv)Z6xDGa8cuP@I+I-#iKlR3O9kS(GC$Q@$1_K}%VylTZ<)jD98`pd5YBC9SZY00 zUG3;fV`pkp8L!$`YE`+dS)-#(S<9kL88%L)Yq9wo?&ND{wUU0KhuRmwxP36##7!xPIB-aunnt!K<1=pWK!U@xvKbhZ$9g%IH1(9 zIv1L!!mIm6oCjt7rmIi-uj2KmK;$NzK!j_3DqB@qE77Q9hIM^;sGm3#nBkOfIX>Ro zDuZKtF`Uvq@4R)qHusPePW-k8KhkJD8P`+El5DOjUCCB^BixR4b(kk-;tVI9{j2yV zyE#9VO=-qYd0y!3lfx-pomG62t+qx!v=wD!$D^IZArN+rw_){Ix9gl7Ha_-I!B;~) zoXf>~qMz^-|6vWCwe~7L+Ku?6H1SVePk*deZKt!#9-8oMJ74FdG>lK2cG`>Qv0&kP z+hH(h;GMQR`LNSS6~Sn09fRr8gWoZ%;#YL;lKwO|tU ztIcqg4{a%r=i=VWv^vkdlYpF*cIsY3whDV+>lo0kZ~voW!zn+PTqK39GpAxqTs<}F zm0|7HI@(hl*C_wseM{)1ASQ+U9TgjpXCJg|D6`VG|kJmoD94W~TB54>;R zzV)zuMT67cF4z3`3LI_qd|r9w3QzgG;CzW=95&mm;J3BcWr;@_=eg=S>5B|kX>4n7 zYI7Ii{wZvnjG26${g{3#_x3(1KU10ZD{S={oH$ikSLLP5kbw=mQC?Nu=#y+EKFO7v z(nzH-obs@&OY|G!y4sKdbxtkU)x@v$N#&l>$UkCLJ*mQTE8A7+&~ASUqi!pwH|gP@ zI^L(Uo8mUleDjE#|KoDpQheIxPJHd!*u<)Q=wH`kL5I$gL%&o{i+yHYwr|xgsy0=` zxyTcWCDjvc8NY^XBV9zO&T(*+qpS5BkbKiiMzz&W=u@LxOw-z`Uy2@%=P@Vf?8@`* zm^)PWVY}8ou#a`b`^XD|=|1I0j*HKeT|0>Kd0R(<<9Q#hcNdkbqaoZ-Zz=A%lGfwR>6qM>r>=+icjB;x_;Z#7Mu0( zZ)MAf4d|>=p%VGIIFo(_mu{;qop8dbymEyIe!mpkN?)?yr^;}jr-&`o;SwT+6V-N* z??Z3gR~glrx@u)BenVeMPY08UET8oyg%O{=Mf{R|v}iD%Qz7g5QPqq_{jBu&PX_Du ztD!K-r~JyDozIj0g@+Ba&uj1-@lENOyKjsAMtN8HnJZY;{+aKjl|!EA%yxp}Y^5uaVUFp;Geip`PJS(b#R8At9!i% zxxueG0PiC`a=q8?z^c0|>^1Y5tEU`Lb^#n$Q+~3Io%DphxpIHwy{^_daG>*E!zpd; zRflgJs-|;#+ti%Cl%9V5NOB{7M6gYs^67b7TOa$ahCUSL`&6DoJDK%X&%K{7tyBv6 zj#}yxl-CZ?)vN1s{EPfa`ubMwKgQ#F3#_k4a*JxT*A81)F`lOuW1Lg@&pl+&AQI$# zwx0^v`(&?!8p;FjjYof?V-F{H6^fiJn36`js7+upPR2K&+)zY`KVD)C7Q!P^W@_o@A~53KRxi=DJ+A2c5tiTCMwt+Ov{oc8*2 z8ngR5-skpUb8BlnuX-HsZNG~ynwnGMNBg%&3O>40j~(|sqJys1mQ{aR{p<4-A9~M@ z!R-URPw8pz=xQ6H;E-J{rb^0s--bsDeX4*+4Xr+eO_f{jJa2u%aE`YJJ(F}sU%y~ zzqYDIHEdAJ+ZJzIBFWZyZDxx#ui&M+JF3Y>l~WbZiE!B`n+~y*2j=VLyFj zhk4&)4*JfS_d6x;Q($#$jGIMZAN;^3WNdPQ9ZGmD61!%BoszLt3+&^JjVZ9f=vS6) zqq>dtz#b*7A!|PRuH`K-%f`5v-g)7@N=EkJi&>T{;l9tq?K4lz_+NsOi!#P`d2I#U zc~tJz3hYI~7ol&vjIqB^dk(iQ8T_k^Es1|APP^YLupz|ZCv*a1GuDm28Eyo;&K$qt z+^;|y`mk?)X6A`K3}+cS(Bm^U0{?xSdB016jo@Bvw~Q@^|1NIig0-6YZ61uqzYO;s zFt5P&M(z`^$Y*)>y}x2&@@D2OkG~i0DB^NOfel3VMpmBZXUsINg)>jTT42Ui?8=Ne z=dz5>qRFy|O->i|bsfR@*xB#9q#rX)?WH zOyg2qwkoiFv0<58uEFcX#^`0-A8TN{W$fFTXC2uJ+54BR)ppF-8u-g0)4McvGs~_G zb``vrDc?IXPwWD)DadYEU@KtbT`DzOyeTg0;%|eqZk(F2_3+ohU52rU^ZML(<9f)H zi||c{*e1A1tJi9m7uYPq11YHe3T!%YJr|5<*JW=5`w`f}8QTE=QJiJDXn{SGG3%#x z<*kM6bP~B!#*D`gz%JzBl#FeT|0>ukJ&kmT?TG&M$JJ`v7QB!;Wj_}#dbHm>}@J|>?hZp!m4EAO$UX#SJ)k)xeb%LqaNoyR6_DSLj=OUiz#Z8vT`a*PXwr<0A{%Gr(-WD-_t`6vVCA?JBTi79tOKX3dl_ zRM)Pje9OLMM=;aA4&@o`1CiSD#LIs2rCbko0lN`*>#qF6WgbkzAB#J5&#I1z?alp$ zxU$SAb3YV4_V?ZI6t89M>rxQNY19F8XMf0!}l4j?Y}?Q0d-LtvYO9amsaV0SBIqn>WSv!9Z7^Emo( z^YJ;HeTkQLtyia#fYC%C(k6B`*hDbY)_Ld8fp^Iqc+-u=DZ6SL3hDhdJfpmC>?Tft+sE$+aIN^vWJ0b zBjTdnyXL^Vsk71-b}^a8>K89(evxg6?SuOS?1=*VJ7LRh;{vlEZ^f(&--8!%>CgR; zjI9Ab>cP*zF1xOoHyrHA>l^h&S?jj?7NV?_6+0a4gc}ziL{e4q0~{i?_eA zVZ(UL!2KG`zEFJ>V-1tF`=_)1L~q3JA+Sxsmd!lWr@B_A4SL!){{1Zt8)8S{2Ho1I zyJEW4zExqi1N#6j)OV-AVEz>!QeATm;Cz7PXq<`l3jbW;w=2|Yzgt1f{-C-%2h*8& zrq@B?R4f@+c>{#FSMR{gt1#htYLD@(ao%LM?^jr6R_|Dv_k?35%iN%P(~)-vdOA1j ztku`~@s6ch{a1SjX|Ke+D0U8JSBu)TUlMx-XnQL+ zDIW(jo3YQJIn~btu=NgeaP7p}+BK$Msb2L@n+I&v#074-STDKIJ@u5@S*O&_IHdx# zoyxIe!T!a6R?$*!WSVu2rjJ{m!z*6-eR`FbRawn8D@d1hrK&F@Ig@jD?e4bsYIkz7 z|5GHzO$XPI8AHroRyTb*39L9I%4)N=>V#2!`|*?id}{vZ`rFadzCcfV-=6j{S1qTi zeDbNbvwTlYyAx8MziqA7^VLd2)lWHw)M`_Krs`*hmoMwWh`6beneX0T5*zQQ!vP@n zN$R~4w<>Of0=qF|*JRAH`8O`D4H1ey^Y(5>!sZjamHD_5tpm7zR06)p7~t6%VwVC@Bq&B zr+v1vVh`e6v%HY8CGjWY)}XBIN92i3!D)Bt0-H`)o>%a`Nm$-;8SBD#9`p_sRXy^= z+@t(ASPy<+>l2n2V`3NgV)6p(=Kf8bbJf%El@%B(GPXSay*T%+epg^WB>XVgb?DW`3f#YiJADz>f|)0#%m?t!$=DeDQ8?2v zsRc8BCDz09*C@QG&&~zb?^~<=9W3gB*zsWQdC~QxxQN{ZX8c??8b7g#=wE)xTJ2iG zfsM}?aKcu@|2{IeQ${Zrm}`D9)2OVxUxIBvg1K{ny$)vGa6cz_%e2>O_rN<9p4Z;E z3vjN{p2iQ}6Y$*M8dJ#rF=Ljqyw%}fihBdz3;14QQ*eI;i@1nAj?D8TYm9Ua*@I>4@^^0vn67eXNLY{A@3a!gH_fm;zf8 z>`*H4Ed{o2#!fA;O)?hg*nnr3fGxOA%)qLC^%}5pjoSmycJ|BF8f{fz%Ul%uDlc z1$-}gy*TsF{vvo{+mjh@;Cmf~qw1x7reEXBv%I%yr>`dwH2*p_0c>TkXbbXoq>pva ztEb@Y0_J|ol?C>7;^AIa4SMnYM zGf$@!ymbcBS8UrDx8#inb8n2|tm_-e82CP!xM6{f0(%A7$pv;JnPomN0Or+=>&2PR zw&}>f*Wh)M-o*>-*I=hHczmV67Ng>=wqx~fB4n2Y+Z1dU>O){FqTD!-E@W2%Gq3EY zg7?aTmA)kk>{T%J9bRDbQxN9gQU%rz%ze%?3hV_i_xO%3u$MCL*^F(E{}Y^h=m`-e8 zeDlEjy>M@WeJx|&--%mocUL$SPwd+nTRCHv^JUoFeG+?GguTSvTRvt|)h}p6%=boO za}y5iH(yeeeHRX-r&^MTj`!{wsEU@`Ac6G)M!2dq_++#kD_$VuOBbasQEqt*< z!44wqdylBkVkd$59_1Lq@~lg5;M{YKep2k6j7`UvhpE)&`=8zzS5Z~_ArB^=*66Qj zqBY-*ehM$fGBNjR+=FyHRNo-5<#8vT*?9LT#_(CY7|c2xydyL3vI0A`g-5fmnMV(t z)u@wV#{YS+uj8xFx@14T<=NG^MKEF8la77B+=G%wR@Ualxjz&6B4(c?Mp6>5Fa9ey z_pNMa%8I>?a}RQ1^osT4{%D+gkX`tJolJN~uxKChuE4eOre)rW_#yiz!Z#x;Kd{*u zJ2t07efAOVbB-%`D}gC{M#i{J>zHG{+UQTk%rCL8WS(hTn>2lReq$~mwob-=TJYAV zf?Re%RsVofzT6D&cXS#n6ub@LxgR=zfo%--3uKqenCZ9;*9o>AzL$1mAND}Pkq2u) zR^L`F*lHIyW6r5td19@+t--#B>EM)g^mnJMv&gQsnsRTU*W*rx!i0ix~37-aL z8}ni)Pkr3AVEYhOpK)0h_u+ModLU*wbX?y!iy$^0w;q`Gy~Iwy?FhCjzWVy(KaX4d zhFa|gA{&@(*>?01^&v3dHGBu&7KQ8?VCuUjV^oXU(_j<7(MX%vkH8KAd#d2Q2{s)p z+OIsTzqwZXZozv3o;DUQu%|M1QGxwv4!q~)z`KM9 znT}No*$Xp9RY+;GEPp~=%KlHxcXrYLS$`JB)!367Fz>V`m*D)*Q2c?o34MBy?rHn1 z|ELP}wPzOnOwW3?R6Nx{8lfrxBUNUm8eX*<``3I8uKc+x@A|Gb?UGGRmu0D*@8OPt z@ON%X%(*~`-2+d|{z#sA^$nb3y7k%1c5(#|9H+M?9K1UTuMYOh0vm@t=llZ-Y-=!i z>lK(g%B}-8DX`s%gYRkAD6l=i&I3FAb1?JtE}VNUi)EhJ-8j=0^-t`6oILwt(=iV| z-C>&V{;k01hSU6cc7a`)d9f$BAoug)dZ;9hpr? zVBKI>Q!l1~@hH_(ZMZjbSiyS+UY{Y2K03*2yt6j0R zz>Lde!d_yrN5*uy&U4Srvk}Wn;*vKR%zPf7kP6!m>_%*C1E!79_&$`&D~3fxQCe-kds0%)Pn5 z9Op)0SJ_Cf*s@^CE}CTnQ?|rj#Kzr3e!hbD(~Lb;V9xKKf!9sB8<+KYb~es^r0p|L zjA1PCE-A2|XKdLl+r#}^IwG|jzE=;0k&zx>)764_BmG; z*uLDmZv1J1eT9C=vb4VneP@Bq?ykn{z%B(-_W8`)AAdUTfL_)h1$J}B{*~h=@7p-X zTGy!Rvkdm*-tvvS5<3vg{W|+0#8aIdj_-aa*;SY2XK>O!QZ+|uuDj76sP8Cv)|X`q z*}I8DIWEY15bTx7jk+QBy^I}S$o?FxtdsIy1G6mc2O@2+gK77$0y~oYYn443tX1|n zuu@hX{YgjX0rhu@Nw0IbE->4mc_q*Jvt_;kVdG+5+nxI3m=f_5I~MHTFEQ@H58mlu z&R@Qrv4QYx)057q)!a9cCw2hXNnjU&5lriVqX@VMV4lgNS*5cV!_I2#9f}_VK_ zbn;8P{kVUbzQA>358=S6|>yL_AGdVGj>|W z=EisJd@&7me!^bHZwvmp4XjImOKeO2c^YgqVQnZomJCyNF~VN*LUx6OG|M_BDr-LP zfcva0Q>_?G24H&$s2>>jY|!FDZp z4-vi_?7ECmz0!X7rqkI2E3kbCiw!67>XT<*DCT+Pz>WuVy;aH{ld%;F-k}+LtH9nT z{O4~p+LkspZ6|NPS)D5l8~h|zvim5$nDt;8WL@t^d02;Hy+53A$=m1h#vY2YQ~Afe zhZ6{U(G}MB9;Oiv+0)?}7tiU7;U)Kkn;rZdhhI`L zrA~7*MeO7|aZyQ!iVoz-EyA6{fkbGE~$?FFk?4U@r{=}>*m~p$VZiNmDo?g)MxwK z9Ctpv4J2`i?Tot;tOq}M=KVcjs{1_5zWTr{OEBrPULONC4nJh=C)H=2{4C7zeJ7mx zXI^=A<0Ai}|CMJO^gYd%_{LFQFV6gPY}UpYeABTsiHy7#+Xd&md=!50)aSgsrv-Cf z9@t7eQ`Y!J{%JSjSMt6LZv3vIfZ7Sm>%|$rtHHFZzOUlcXT9+%_1V`3kEWUQ?SS8^ zZ^z7A6@MTPom(GVU}M2NBd|Yq`9JNw#2JC3b6k|Q?kM}aj9EATM%cBJ<>J+YTMp;k ze;a(S9^6=*Yo`hL##z~qksVJapO&$;@h_#$epdM+o@C`+3(x#BpNUpe{`GLL4S9EF zeIp2ab>pHuN_}@{edBrFs&5mp(6UZp<6!5a_9`1OFb>Kj+^hIUr^=qA!t z>Z2Q}>+6E2KFh6D-ysEWWab%XFZK1}tXG@jNBmaEb`Jv!eUUGRXWqK_$KoubsB2=! z;ra||%!|ZM#5r$^@)bKNW7bLST2}AiR;OUJf0&nGoQV*+nUev_RRV| zA>68OHdv(hpsern>Yw_Yry9Rw=Ah3qRbLOj^Ap$ehP`@lwsqI@)+?_boS1Do>YA8q zFtMBPL*EA2wLh@@y?SubAFLw4)q{)v05f%2_Z3e>aI=hAhrfceeCIS?E?MwSBW!w= zZO3)vdU2MoW18_(-wfPm>FeTI@SY&7KFhLIpJ|h)Uf&U@FXlzsjq-II3f@o#Hub$o z8e8?f1QtB!6zX$)_A2$MH+X&FeNp+QF&f?KvkbgSeQR*9K6wwoQ{NtQh@W*ccqH64y$DN_5+Ro@8(?>}%n7ZPP@dOrd4oXPJC-dvp(7HbZ99ya!zP7iqzc4vbbzd5xJ z`_ABb2-x_Ur>*h3w%|>Mr@l?Wyvp=$#(n6UlJ!jnYt^@3!5clWst58yb_|&H#kDy} zX{s-e6j;=krwZBKkTrh0f_atk+l~9Mu{S)^dns6J{4Oha|E8X)Zvil`Qs4aChrUnY zsgEY|U-~vJc&`ts^nKoZ!?Ju6p89r}gT5ULeOnR<FQ*h4z`WC#efi2hDn8V4_j=a5cdc}@GM(pQ=wJWAQ`+L7_4eY>-jr<(!0A&9~ zoWH34$@9lNtwUE3MrBhSx{`bCS~uNK{G#?IZxeXxTZwS1zLm4S4e&pLchAAK+MhDE z7yhPwt323-XWHEfY+;;r?V$o&BxAnUmS@|rZ!msi@V&Zm!*RBmweW*?GhyTRBz|lB zp2|G){xx*(OWxRay!8Jx4|_FW<{OU__7s@of@K=m55XK4jt0}N`dk~TZ+pUCrM|`xgxu)sbAbFX`qoHlI?9?TvjHm;x#P}V%~djj{8hY|KNy|I@(CLt9T`_P+%g{W$eNhjL%iCGsqY+y5KCXA6C^v%X=4Z0L*iewlxp7qV?MV)ez` z!ZzdIFfjktorAt33oPPyZlP~L))(*6)VE~Tw`w69@ta&=q0jz4@^7iEFXlPw+aT+k zQ+h|uL0?&)$7Ov{|N6my8CTYqxwwz`IgjuXi}*$UDf=pJ=WBUSh;N)7qjsbX{`rP# z--O%risF6o>l?qzByTr(o(t}va6EATHZf#o}F5=z#Q|PKc0ZEW@USEuDN1m$F6u~6>2)^HJ{-u!Jow9vxzQ(&{W&Q5xBd`q!Lrt>V zfSrNtG6nV}F!gN$7V+B)Y;$CH%-FK{u0j5=oz)BMij3`CVAH`o_xIfbyCq}GVoQC?^Xw>` zb$2YjS2r%|?uvwicQoPohBVHdDtiphx_bb=^-9@ZoOSm=d}SREHo~qpK5uVD-p25b zMv38&js3atV68Tyu9+9ULw|;hv~77g9_&myXMru1kOuazjA=vJ$B|uTxkjAD?3>+l zznQQ+^f}C9rRUtudytuOQEF%zf8+UctK|V>cGqJz4f!8Cx5FRr2YJ%0u32 z@XGQKTOI6+%3}j~eq-rxc}*j1I>c@R)9w!l6KtvnF|Uz#9}l&0J$`F>#M%Ch;Qb!g zZ@tF)K+JVcHyBxy?23Jeb5CNm0viDD>+tq0u)$z2fLZ5^vt{phHO6^y!d~6DsJlxN z4xVd0FFUflyj9?S* zje_@b=G_41)s2gE+(X!O7#F`kd!>iCU^K8_gPFF~!NNu_T-%`E5y;zu`zHwhh>B|; zQes=sXN&Q;wjs{(-m}49DljMsvpxrJ7-9F9p281(o;99((<-jOY5nw1B4wU#E5J1w z_esVKhpg{+mPGb>Fw0eJcMUvk*q^uBIKQxQ7ral& zVRWZv}tYh12eCdCalUbujqQ~vh%<*uWkWr&8u4r z-pY5MI`?B?9(M>J5FXft|5O_5CO!DWCg-`M%@w zg0~5n@mm@a!KV26Zd84f#0lGvZ$Q{UNl-))S{Jh5ZJ?C)16j7U>|zixp=e@~Z{Y$)q*zOFv0alZTjFyD*(w72oQablBl z9vCNWbmO3;GKxHqw=X>F@c3afj!S)NBaN05gFX8isyZ9I#<9~Cx8 zdiw2!jZSUkmDtws_6J*^Fu~O3oI9QkwmJ94S)S!8??l4pm00jFlX!#h-^0CsW}^=i z`#a9>&gVsk`o!iT?04s$yAI58RqRmmIzgxk+yewX7S?<=^4z+TQ6Ui$qV&z#42B=$4hreFu+t559Jj6GLizsQ(`;Jpv# zdxGuAJh8sqoA%4jZGku^Zki)!QlNO^KJ#R%u8Oh53xS||J%l*VA|M<=dCuj1`8WQGH;f8 zaHWkOXP)wN;mULEVsmHgbbR%R4awLG1!n)OtaT}P^JHwF0=on3coI9gkiDPq4Pe&c zkbNLy9~anz8EY@}eJ^9Kv6MA^JK^@iP39&rhN6TWSz!BS?6xn!rexle1<7R9)Yi2dH;at_`4-x?aJ%LIX|!t1@E8moHrfZf;qnmY*n6Z zjC23bxGF0)9(Qk7)sBd2!q&rg4Q9Cn&p0UiwE{B^%1+0pD{7Lxhx?HII*MOjs`@>t zz%I#H^c%*-cjE8D8;u{lpAkNKiR%4&VCLySGGk18gZGDw?OI^pCcY~yRIQy+pXOQa zeS7Ac;!KxwuQR~RtCb7vYhdPSnFkM|&%bBzb$Ah%85z4HW6nivbe6CA=+%uIjLfHw}ry4cMehDmO*Uqw&3+zfT&tzVUoL3KSIh^}Qm*9K#;Kt%S zqkS2E=({S*(yWu+9{iAfqQFA-DX@?|nmF7JS(y^MVbm96mdCyD4k%=8XYQMQtH90% zbKh)6fqe@033j(FFt^#oPAxEZ+{H>+=euGt4q6_*!xUSbyohuR$XL9~mgl=k+w>NN z4f`p-wRN2ovd3lY&;mOpV?QXcYqP#JNl(a52lG7kRvELNdcMZ`jA**VqCRIR)$yp$ z3uI7U)Mvxm(4T}pzuBBzVEces#}6;CoBogO-aZGrV%ja^@@Fu=LyY-`aqcExJp1Jw zH_|Z|m~Cb`FhrW#O!OtnE(Xv3)V#O9>c;ir>`xyq^!)&yeS~9V*mxMsKEm;}#OxzV z%r`g6o>K50&$70`kQGxlupXYdX7N0>^LBZkh1rMLroUA15P3_!ogWH9|j4Wil9Z>&<-y@s~oH`4Ysk&bVHY4=dDR=d$w zEswk4xzBoKA^RP$)L((M+I_g-%{RFEO~dV5Fu(6FvH9T{ms{Ww?WR1qwUAv9o^~Gv zYqdKg^CsiFALYKqD+MP0%wCQ2u-=aXB6zHBE6*pEi_z9(M<__8U~$gx!y?-P`b6?cNR+vVSD3-N*2~ z)E9OiC){fH39yj;lU!uq!*8|wK3J>W=)>mWnSJ5FuEuyIb_>ou{Uhl7zj~ANlNhp*5fBcIvX8c`%=y)3@gHK(N+)9t5Uc zL~554c03|^=`v4aJld8pk5fL!UfPxg7UR*bV4?471P(o-@psa+@eMHd*M5_E=8f%f z>}iei74tU;CxR_s@NA=EyA+t~EU~i+%=4&XcNf^CjJ;N1wj=kToGTb-DCrwB_o_B0 zo`E@r$vd{d>}xhWhjA03;JpPl3G6~LKCpMd+|zo3d==}<{kM4T{*`lr!0rI^xA7vq z^8DQmu}H7jy%~%2irts7NUxZ`&!KFjS8T%IYM<-7gv0KdVBaM!BXip1t(~#ua@xc; z$k>GiHZEgxV=MG+n6agEdix=J65-Z;t}DRIgB^2R-S#-|n7_rTmIq$sK2G+xDT5^$U1eL9(F9xPw*W)PM)6W_Gyf_EKZ)26CM1tphSKhTbE^~3e zA+BvYV{n0Ol(9v#4S5@9?9c*x3`~7*Wz0U$@l?#eA?anGC+=lj(?lGTnB!_ow^I$K zhbT&jH$AwNh4CjZhIR!q)xgw>p=1}gJr%i@Zn6kQOuOyEe!xESOZZ-8pSe5t#z!pr z%$*A?`phX{q3<2S{;u5*3+zL}{&wC_lxcHwT>N(4d^s*lf;q-G2XHL$>c$PnIUhL= zUmNn)!^L>tPFP+q&h_W*_`%znu)Oiuzj!l96GGpHs9x#YHnnDLiST+EjQ1?SYNc!i?e*= zEX=Chn-1gLLs;3sjB|9)D+UUhuM#tj^Zx&(WVt?mV#>M_Gcz+`7I+f{a9s4uk&4}N|_{QY`oceYK+XFvj zKOpS>@2Lf58&%)q8Cw(IHhSh*pgsR!}|u|cAS{${R7xd_`zEV z-q1xG{foT6;>Lox#}m9Q2|u(vbDxZ@1?N%1UsOi&e0Tewu~k29T-L_zOZ{G$Mfqlg zwIR=O%JOhtV0|&4dvTV>miQriXqG)4Oj-5K;NkbtNAl{}V;Q@zz#h-oMmZhIK9R8> z7ub^-EB9PIhpCO{@x$)RgkJ{RiNXzRO)8V?3H!6a{B0Gnbqj0+RPMu|CY&+9KUtAKb5fih*Yg)Be0w2fVJ|@L{?tZQ)S(c z7qiV6=fK=={5-4&eh2aQoy0K0UOhP5in3I#boKBrRVBTX7=y13G1o{Nk$I*uu)!Hy zqrg_pHWs1+nJ+!K&^I5LvevIHdFa`Tod^eJA7=f#6bv;@_3yHRHyNJw{vj~ibT@7| z&N2Q6_@QsV%=-}-!6sgmx#P##7;}%xIh?X$=YW;xt;Nm*)9(6&+i|7cN!*9*4e;Ez zdcMHE4rbbhBN%b%<+*KZ1X#%W-p#liR>-iIyv5;tOs8>1fi01-dkV}mQO4y! zl(oj?pu+BAb2BfS*y!6Wk0rp&mu(AuU108soD4=%Qd!2Hi2EOyYuXbzrQpS$$XQ^< zWd~gBiJV6`()Re!s*Grcb?j5H4H58snEA4oj=b9$Y||ngKZa+V4=Q9|1M6I>aemgc z4WwUkA7kgDJi5TFSMC=_Tozoo8l!F~^eqbJyz|Eews^)ImqK<~utmqQmsMa(XML7O z@Kylxcg&tE^o_|_)Quf^wj9njxK!qejlo&IYvH3Z)t6p;>%D!yHsm>Xa?f?Q0yBS= zorKS$CfU8Y57{*c`*-4x&zO1tF6s9SotHc@-(iW_9|dM!ibdU(=l;3awZVi&pD@d?iVmpoJSCmk8$VI*0;@(5_<_} zo3c$Pn**7T@yv5+zW-b9EiB0{BbCBS5Wqmh+Szk(h-z|8f zvp&}$1e^4^4pE?eK#-W`oq58HBJxVzzzm;J+m7a z!KU?0#825Hc<6fOF2cr7EY>q`6ApccW?o->lG(&t2P}B5r+puJRK~3T&R;Cw#R+?L z$Bqn0o-8%b7F>Z0`c|9lmq)Sq0{qEx&PF3*WeCcW1($%Zaus z<~-K(J8_OsY%~RukX9aCVdgK5`(fneRPHmrXoW?Z69 zs&8E$`fc4G35Sgx!A#pW#8Ye|p6!LRjJC%2D)V_8?t`~0Ve7%+`0be&_27ttcM4(q zuz3m_r-Nx@Ww6$=+_>QFkY%^XnD!5!pZp}SA7SGnb}ZOaTQ+`&SnRuC+HmhE;@1mq zU7J$qn+ETuZ7GuiyBW;)*H0DL#aW-@W^4cQ_srWF{RiNt?b2BPiXDx+AM7}M<1BU# zPM+;4urt7HN9PsTMPTlY{Hee$&a(57u#i0u%=G#&_XD_rn4QE`2;fL()gtdEC zfyJEWO)yk8)q}SR-lK#~$4W)~?gle1?!&c~Z}cz5{&qUG4|CeY zjs){NjbZ5H|5QigI}P{OOozO4;QaueZJS`iet{n6lZO}B+Zpp+V91__z>DyF_i6sA z&+ieGeXZd69?i7b*Lij0dU4jP#qmSm1MqAg_I0R9yl5ZR>)<_|d1rzVY~o#7@P3l* zJ_FWTzCX&mL-6f)wL6Zmm+=d`8xq#8JlC+M<50p8zh1(ouboq3g%g- za|`U}S>Kglt?|1m^VIthJio~>PF`Y;3w~>1yCs;grwQ0^P(6}edH>F`(cg>B&a!tC zHvhyz_BO)S1F^928^Xq~h-3eZk zzIb=C5jac6n%{LtKP0vuGJe+`{g9Y_`+8uG*Tz}w4xF-k;rGFnvXi(E-mQdpgJ&OB zV#l{&5Axi$I<4USim=~~JO5PHwtY98gBhonEwFpR&IF4-QJ(wHSA*SE@Savb8S)I6 zaqh-N8Abo6tYz*z`)`E9u4R5dM%{xA>?JVs+4hdtl+W81JpYD@cE`Z+D(#NtKJK39zK=F3Z9 z%Kg5Gv)IWK{u{ey4%q!I*el5X1k86Mkq5s6^KS~rzJPXTXWj;6O7O(wmDqs`RQddQ z@0rwh5j@ZH#hg{_7BKVPy`HEWz2J^z1B>`wntA7fMLq{F<{;|(W{yig;@q0g-9RTJ^F|ZMZ z4S%aoY;1v9)?(i(FxS&!{^mf$W#f#kP}p6FLbVN^0Or+=i+VqmaLBsHz02h4{7zuq zU|#`yv*0ZZW_|ettOKXMUYzyCd=A->@Z5vnwTSbmEPEDM)QylmJM#`h$L|R{r4%xrtxV#Kz zoJ*eLmOSO>Cju{>U%ht@Y#}heLyS1f`v84@Ul?%~`z@H~kRr}v!?J9|xs;7Km$DIO zu|<&8M#Q<~MVv92#yZdC&~#Ed#JX@|rx)1L8GE6?md}`N#`G$?V#Z?4F1A|6?ksr! zBCL&%3e5Sb*ha)%eN>h7+e~8TgAL~XNL=g1RHnGT)_i-$HW#IcWyW{89lqJr;Qw{A z;`Y;F*7Zt1u0Wq^JI7 zD8An+98q9U5_V^Ssk;xn_wYmCDd=;KaWj5kQwh5V`v`u2xW>gbrMw3Vo_jcA&cT%( z4aYUH=W6aI>?O7V&z)Cpnve?X0dr0|sReURDi-=&cl&N>?E?D>m>KnJJnOGE<^j7K z*$)Ya>?vUWMwD~Ez)lBy3f^R}&Ma&F`xV$lnP>fd6L$xBwI9Bh_C4SBI9Qa2y!UYr zFN__0ZHWC7_W{_LLf^l@-244H1SwqDj3^KEU62Xnr-ToD)7 zQ!8Qj>H<44%btVLh|9bgb8afOD*Ak{>sY03uWsCMoNEc62k$I+7cSL!&*ihT!Cpnc zIvKp{z?@I~3Cw=q@ju4;PU06>jP?JSKVLcAsNO+#b*aQsKO=mGSD0t?tc6R_Xex=^?C2u&FJWZBQ)qy_s#qeuH-J1M~e5*-+=r0$Yd9#l5nSeFtnoD!so2 zW_c*PBMEX%ZhsWK6Q~1Xj}-b&2D7eh1!kPPal>)8nJ6RmoswmDB^>&uf?2OF0W<%U z?Zr8lI}1N}$8)cZd%#F`lMUDP!8;L-`Yg-Vdi8GR8P5ZKzEq>X5<4kl7vif=Y!=S? zd_~SHvA<_*8TyalSx@90j33y)3H$!#%!2oE<~?0trqgfY=7&qvQy&rEwJlR%zFRlW zn}KO#8@M0LRbguo4(t;!zcn(Afz3tSJlk<87;2Jiob5Q5d!o~Hw&Svb7iT-J1*4iY zo$Z*$ec1RLc1_1Wz*^H`{sb23m|e)Ovrx6hdaS_K&zQ1dV}p#fgA3k9@H`W{Fqr93HqOK@0%pAui!-sY?h@M=S?ksD@LKED3E77Ijq7ROM@}Ma zoW<;yJ$rIaf$a}w-FT7(fU_&;rc?MNwqz%)njsL*2UX|F^@U*KPzf)iK@@kysHkI-D$gBZ&kN}tE zej%9Oj$BO`wF$cd-@V#r3hYY4emn9b{L+SJFO~>irD`@9Xfa2iB#~_hs(; z3~B5c42ORa*xd6p&UlMm3TC}O7g^KQjqAnPKgXVnybIu|&-G^5I5o>|3pSudc0%Sk zr};jKb}qUsVXx7+n9GkyNQLzf2gkvl7R+%_OuOoP2z?uaeZRn-1atg-yTG0WJ9(ML zxUcN*!JOa699`@kFz50sVc)iI{9-Qeco}xxYq$b^4`s|b!!#XvwI04#H_rTWY+N5- zS$W^Uxi>wz!0sfh?0NW9i6&X9U|seu!c)k+I|}T6!s@%P!0sh%S^g3quc<75Rq$>l z>^I-#JnZ(2dCtW+uf_ddggs9&tH2H>Y@D~?Il-nlZ^?bg9?3)Fau!&mt(UO%>gHBlRbB(Az#{j&hw8a=;oKNSu^eAZF{q9 z0(%S0xJ&|5yev!m`QUvB?~WC!@3>5x`mEpDbds zAKaVXwb5stG%k^U@s3uzAHgfzzStn-Oo!`BuQDAgaUVA3f}@RX!P+w~Y{Z&QeT%>` zuLczP*A1rKc<&=`B$#$>TSTkL?!|@dC^*hBuP?CWz>LeYV6A=0bD1|DodXFkGMxD0 zd)ZcyE!S?3yUBxe2d}KF74cT%%c*j`bzxTz(5M)25A> z%ljTKu$as5*MeETVxiA-iuO&)B?N6?3lYcj|8z*i9K* z3*Wjn85iHKTVE{S5__Bbz~Xy$=dK|eSd_1J??8{g>o*xc;$lB3=5G!Jc2~xB%b4@4 z*E^~@)J0gHn16rexUCy)Q0%v0)}ieQ8^3NG*`E5-9q>c;FYv4{-vcAq)IPpn@IK_B z^Pyi9*vDX=AL*CVq1}$Y)%-s8#Kro7-2`v9f;Tsq^*-i=^8UU+6=$Y3=_=z)b*smD zHazF2yMUQCWn+H2D`E3qEas<&6OQzLimd5%eT4a@^gdkhIu@*WPk=#h;yqdLKFa!D z25W6^KPz|>$vfYTj4ZGTVD62KD6lVqxi>Pg!1l?!(+g~0Fw6HsFw{1c??nY~GCcF@ zIxyQ-nODw-Ok0^(j(w3=`yp#yy$9Bsw)Zp7GT0Y)D;Ym`f$dND5wI99<(+_gd86t) znKs1E$=Ig3ZUnaIxW<`wv2$^kBD-h7b8L5R>-ZY_z6SOOc#{f@DQB|#l>)mIOdByb z(}q}|jjK7F`pmC?lew+mRQvZxJdX@D*_9{e9Js_f!F*Ss?$Ebjmc6D0Q?|qwfalrh zZ^2W)F3v_rJr(ospct3835Sg(vg}{MEVoiN`f-w#zT@+J^J-aEY#Z{(bIW%W*q6Zk zJMXUjY;V>XzfJPH_Z~3qDl1QY@&cPkSbbdx24+7X=C=!hZ4dTqF!vP$+XYO07ZjNN zsMx?h4c?AfpZ&D5%Mus+5dQ|nvG`siaF5{JzbC8fJf?4{4n><$whQOqn|KgE^esc! zx)ymaZ#eEoc((oEEl1dM)vw^2@7jF{r)>0{$~xZOKR?Sv;@(MEp3mj=1q*%h#A0ry zEK{b0tzYoQgZ(e*-6YGF>D>&hHN9J9UYTCH@RZ)@*Nn?VoaucPzcszDfkisDBW!w| zC$y%we~}J(rdM9b?vSxqmyP89e@U;r*7S;PhAY!6)|y_i*7S<~FX@%{zoa*KWqQS0 z)4K}Tm9!PdkLiTX7qP3kcRqQ03+6X2_ZHa8nfHelOkVWk>ho{FImXW}c)tO2ziy>m z9`YQ!#r{xWqrrS%Vf*cbBQM@pTmcqw9t+QL-}5Vht;oG``6y$nBD(;(9p4rv?A47M zj&nUY3}0D!!{9katxFj3rg3_`g10cdYl+x|0viryo?cO4qq1H5KkIX8_s)X19K2(f zs@Be?*D-V=5pz8MNx>Tp&-ncrjIEQV`2D5exz7Jz((7E%_axS9g2`^YC)vBe;yuZM z1s3l~jsc7O+ZQF~!7T;0ADD5z3k`Q`Bg+mWzmU(}XWyr_V4jf|3w_FNym}>Tde_G}hnfWTLBZRLur_=LWqQ}axgV>( z=(7XUZuHNlV_%%->yOX*Y+HDPHf_0mnXp$kF52(8gpHrPzrnLSVs0U?7iZZmTIidd z^|@}Ox;E*H^`-jSNTm8)TeX&NtQ+M$o%Ov4FUmLK_flck{YmxN*R_`K9}C_{jM*2D zKzF2V6qx<#3I*o(JLb!pU{sH$bT|fu>}K$^Ykw5!jeN213En>NJZHBe$^ttw+c*{s z6-_pdD|km|8{YyOka@lM=KXC2?-+RY*$-sw5IFvxzQ4707-8*-odjmuwj@jxo9vo4 zFL~yr=dcbZ9I~e&D;8s!ymK=a{i)b_V4l}{qmaD_%=23F=6sQNF_>qr_9=K@&)78u z?=mp+`CYKq^8Hih+2*L;>C8)vJsla_?drz&CxM;Pg3(-R@|Mc_4GkA1MiTCr2*&ZInT|&MXCwXGe z;4I(i_#~yNd>`aKcrOxu9Nzmmy~_R$XFe}TT#Rowt`}!rTL>&<9V6NhSgMH2FTfT7 zb3Fw;#pOhN=S@SwLiSBCZF~u=wLVWQc+X|tM__{pcjJ0-#>L;(R^JHjJJ9c(dV9iN zVzGuekZ|z&!ZR+17Fd7oonu~EV1qL6x&re%NY@ZC=4oRn*muC5E_m~TInRCo%si0y z5>C6X<40UPPbRi(&U<-_az6`wJq5O8=ABqzU0@ya(Uvmi9PWPd!!oxXcy;53gN@k20zO*Wn`ct6ZGeglT7CL1#g-Y>Gg z_rRha3@2=y-!FKMQO4PMU~4@Xk@LVg<_}0v=Tgp7UG}Y$ASOU4(nV{2nf_kL7CQoR9q3?+t=T{2s!HoU6!2U>H`CaUyq|?j#@Da}aT~wwkFu#>`T^%;wMb^FM z#lVO{l8wFQmASV+SQ{66&DIk{5*EK3v<3I2KKGgzFR;HLU|ejg!4q?@c{?!cfi_~V z**%%S?jyavOE|0rbFW!Uee2>+!wp-bnimmF*s=KIM^)zq13Qj@@A&*iGqC8d9xSkv zcxYRFIM)|#*e?A26vtPhU+cjwhjV`QjRG4BHVf<~u!!HiV9Gk~cM|Tw1@F}sp1(;W zFJ!-yWd~6}wuMsmlgtxyPv$Kqf|nBZ>cLs}{au+S@V$C)V#Zla8)Ca6Yy1Y{TMxt{ zejgGJ-tL*_9&&3Q*e(ML*?143KKBB(;XD1-JlF~>Z0wYIkK#M-D;xRzR)K|$Sy|S( z<5}dL{l=1ny}EI|ILD7Jd~L`(7M^QP>-hgGb{w+yyVg_FtBv6}`>_4+L*KdZ{M}&Z zQanm_cV&_?u&X+M8obltodwUm7VEw7i{H!g9ZK*{%KBoxFYhZE+a~kyYR;kjJ=Len0<*hMr9jE7W%%Od9w=HA7y>h5ej|JfsMw-+GJ>8cVuj3@=y$~wm+C< zG={KOSw?gdb>3IunfC{Rk(8#qx336&j>XQKE-$d_v#jI4=_4}%SE(f3Hf`#HRKkzEN+#LxM) z*kJ|sA29RJ3P7}*@-ONnBDHoNnvPZAS-xdDJRcc02Ea29Vh*hA{9w)_3bB1)lMX_by`ZfjP%K7C+MQx6HH62KFIg=a}Y&nB&ALRBY!5))%kQ zxN?2~wP}99)j^{ByaEuRqzMJrO3im58&+Pcl`r-n+1k8EF6$N%VnDdC3qZ>al z=MmQuHebql#PkA-dBlts%z1=Z#P2%v`ObRjA`iX==9w7#3VGVN13C8;*2=PC_k!7G zY)9rxH;$;Kap8FUko^HX>*>>ARLiD%`b@!l7@lkUmkaD!u+vtdpT+>e6qgGLm@oEu zfn7wva~Vq%*u~sCm+EQ3%mcBA-*em>zbnC7+tF18?|FE}FUFM3iO(wBn+H1+_A2vW z3isNOw{_<2hd!!nGcVhaw?91JE!t*7R_wMG%-`+%KG-C9L@T{B*cm;p4JH?|2g36` z=c6r{HcITsZ1??wcQDwZintsD<~z+;#~bHk!F*TQr%x4U$A$Iil-+~hny?o| zSl@$RnXvlgO@wFu?M@ieP5H7%!P^_2=ayoRLfJjQEVnZW6NRRFbygv}L+0HG2EB75^Undd5gWkZBrkRSo<<< zi0uvL99_MET>xgjyaLva)9!GbbFNqMgLff3fAeKlfn5S-zSyQ)^JN*Zkex=@b`*W5 zadF(&uIm8%m(uQU3t7*2Y2zRGt@$!H5e^$udG6mR9aCUuWNfDb`xk}a`IlR<=`|S_ zXI<_}NQK22mM6i&Mqd)S>Yj|1=%orK*)`GUZ@fCc58fj1v|$@GUrHMX7g*Rhy^tNA zZM*?yz9<_uo+@}N!_$UyO!K9*;dz?C!iIbQ5x>=tbu8N@W5bbuk_6fBZjo(>y$E(B z<@RKOeGFzDa<4~y^7@hoVsYM4tbfM33*Hbg`?c)~%yaE$Ap5fd^X#+Vl1;}}*ch3y zX9{dInBPZz1U3Mhjur0v_5g10|B+mT}hUQ;`|x!`RB&)=DvO8%HvYvNwR`MbI9LxloD+EO^@! z*6yPCbY)F;7t1`B%;}q8-}h)w*%FH}UhE;_>bsZ^2@{>BcQG?sFyF<9g}&#rtZOmz zN_~z|@?st)c2DNH$7x;#&-Xnuc~)Y|iiM3?g#Ftbo<}cjC|lZiCENHb^~V0Wv|+m| zF>Q!x!@9K2fGSTHChXOX8;-Lt9)=&h_2F4J=#J}sb}wPaidcWBZ(Df2C)vD^oseaH z4`({G5wbfLym9cRp|1xFuPH9a7QC%8?`$xFO}ujo-bOs!dt2&hfsF?<9ruH^j%Cjl zyiK$0^9A-Qn7HkFvf~ z!J-ZJqSty5ZQ8i}mHx}`dt9G;iN*Il%M&)QtPiUZ@Jxbj)k|J{-?IT>nsw9nJsWW! z`SLexn19a0qFxOrY~58)@cs_(UgC00f&Ck7qlxUTfH~&LUvt6go&SA=%`35Z=l@E9 z#XJ9B7g)UW{}Wi)?KiZ_(|f>L^D5SPd-3dT^1$x{CKL9uzrULNbR)BMThJOC@_;` zvPd>E2|)!jJu^L%CNtebcTX1dI)e(bh~Ne&-b(;+0T*z??aBzEC|AVm#&sQc5k+wM zME)w@^HkMa^;UIv2EEJo-QVByn=|LsQ}0%9)v2meRi|3?^1Yk=t8+$MtN@v3;^bb_ z^b6^T?Z(M9$JaStVn21*t?-S|H6Z@DZj4(Z5rVPqB<~-_28_=c`#B#%A^=DIoQD-A z{hVI_6M5|0l9#`kLto`^N?-3)c(4Q$-nRl1-kZR?tPN{5rv~hU4(sIelk&vdfF+tJN)WrI3SMVd&rQ0aIcFs5xb=|Q8@b_K$MN!peH z1G}MleYqf2?0<8+{=DyF_8)zgGhj9h@`dde#SV)z~ZE6=Uo}T?g!1WgpkZ(Z1&+ z0eFNX`)-60f{A@U0>=6Z7jNJ3;1x{ln+=S%&@ZpR$#3P(z*VqU;{HltuTt104ttxz z7|(a6Pblm)4*QY9F2_CFkFoFz#76DM1cgca!Fo{Wh_U@3Cic+=ejl_O7~8@5IM2d8 z+oOWQns9I0qXaYU5ipT=BltfE-gBW#uv>uf8@4Y3Lv?3#$Tw{K9+z~d0Pn@g{f>*c z3U(3hIllXDT%jf!-({ODbS2!cKMeJt!fwMo$7ts``>2Ec0{Z#OijFpucY&fKHXgjh zn71e6JQW3&Yn|x}(M!5)!pm~UF<-V(ELY@x7$@~gy-Qn|=Y!xKQu3I;qSHw-g=MSdn+5q9aEC5lhQo zTS7V?4BNOCM=C2mt}mBL1Wj_X-h*T7m7#` zwf5ERz^>hHe**~aH|d>xlwI@QiLhW(9LDEUxaSzayA|DCpxbl2ecxyKqfg~K0=9=D??aC6=fL>##rh-oA z+dM~?2mTe@v-}O>o;rx}os(tbJqo+m(fwLs4?4Oda24K9I6A(g3icUCce%p&j?FP` z=?hRV$M=cdg3J)!LvTO618a#P=(wJGyTTp=MnCiYjs9bL#m{9$_iND6FP8(O z|FmDOP;^g%jz0K^!uZS+<9>>?1uizsj&bUUsPWAaVL zn{GlFBBSx9I~1LaH+={g)JNk@A46Dd`7!S4gCSgTiG1)`goW-WxaZi?L%2@F$ucBk zORNv1{K?qTZxkkDOHV0G#+Ib~F}**$9o%abyDXav$z#AF*Rli837= z|HfaGj!y#+x?@2{9V`#@pUz8`2ccUCI*zZE;CR87IvsZaWBW_qlW_96e4nCQ=6JuL zuonWm6%5?JS^Ouy`m@5sSDYgdI`P$Ez{Hj_Adl(bT4&rw>6oqPPIGjp0h^Z4ov!FU z4?32$7lVceeJW+`EZozls0#hq=GnOCK{_dGC?38{9u5Y68+0x(vH1(o!8~dM#xeiT_FLV!pj%BR?4CGN+DjA`;)sF5`V5v_p zb95{p??D0kC0^#=H5vgN#C8MYIOdSTioiII`3GRsLApB}Z#S;^i+BeWCcN(eCcGcS zJ=b^gcatfLzLxc!Gk^)*ouK2o&5a7X%VD2U*u%iMHuP}_6W*^njC;8VHVZsl8~PUb zORz>@j0$BMS0)GNqIYwZ!jy8$3C!NBJVzhi98uApuF$loO*s3zasW? zoYYZ7{<54#HY-eY{8(Y4<0SZkexba_oxEXSET>u?^HeaA_bY{oJg!#|c`}x9qr(&*m-z)i!eI>3C1bcM3#aM5giL;3O z8owf}wW593<7|PvPv9!@-iCY9J*luk+|#}nKnDA<@*Yq7*bZup_7M|#mw=x3wJD6{ ziT3fG2w580Cv6_>y9_7old(R*_#0FjyBu`1`4OjsZNR9*(JrDLe53UU@TW`-)J+j8-cMsV*da|D{5yZDIFgM9ov~ZkwM7zsGYeBn8^EA&~aZjzDEi6 zSzv4jxgJWehk@}OhwF?4dkh$D;aURvc{a|IaI#N*7BHdv4d{$5z);P`wkWzkfsSJe z%avdL42)wQxdh`J{bdUK3+On0a1}5f^wsB%LOS46j_cDFuw=di`#H~aAMOSF88FUK zH8{VJ?g;!N-A0#QV%zYKb59o{eZqS@unF%*n}Vxg%W+R$@d1LF7dpD>%9h>0sP|ge zMv<-u|Hyl@!uA8B-nUE)I*N|&7&u<^@|y?peo+QsM!i>o5x3@Cjxxr*7tMaD&Zp}f@8Kw`bU$f@?r7A#l*i|i<6uoo?S3(Wje~#r z{BkWFL`To>FaVA5`6VX2Gr-H|?Naax#&!I}wkT{eu=Amp^`+1es{mu&C>ZPcD}kMl zIKe&#jJ)4g*u%j1+jWzWP@(%iFv??|3idn4+n{Xz1u*L17>TB%JWWSl%F`Hm-<9zG z$?4$U!6J_s<)s+q2{s?TUIse;)+V|V<~SYyUrBk$#M2b^T40=4YgHKMTsg0{7Z~+Y z-Wp(BPdKD7u9e{2-3p`^kGi32!aaF^qv*)XeV8>b^N{t>_Z8h~z&L*?busmx<*=um zPl>%87&~KmTqom}*bLlr-Y7(rxuL;66*K?FjQT!4p)X21HT&a>@y%c4KJ~4fw5hmjc{d@(#l@Obs54z_gZU3RLvw^XX zbepR?nT`z(n~6jS?`B}^H=U#~)?qJ#yo4eDo<|WU->o?xg{s%+CEXNY+`G5UmXb0TSQo`jQa_f%k_V=d_D1FnDJ zb40p!obg2J^!K6qY+h&os%*h)C2Vi(1 zlJ}&dJIl#?F6h!cItCc!oeche0}tmLOStDj>|vbrsr0#sT?jhPb6$^o;pMaZAHd!P z47Y~&T*&?-urDHvTZ3)F4Zqd;xWdi>#`*Y1fQh_52%+AuDC{C&{C?|~3adD}Uny*# z!&v4--YbDohpf?LI$jHm^QKoSI*xZ!@B0;YB`|)!#s03yW1T~~pDOGPz?imfWy^KI z4ntq|1keia+ktT|n(JS1F@E_BuC$NuFha+%2l95|D%f4P=Qm>P+Ymbie0yO7{meA+ z;8py*+8`DaKmQ4s@N(RWKJ8Q(pDCv8jS3rd*t-?Rbv~rKQ(=7e=!4HG>~)Ur^9tj< z2YH7Tc7?+vFPXO217n#y8&^JCOq-O+7Xp)XT;eZYD{u=fC?yayEaUWa|vVRN9DcKtnhNnVbP>AWN+ zc_evB?A1=M~=CI!=jOCemxe3?wxjYk?@Jbm!PhsM}mniHJ+|!m@VNV-+xww;T6-M`Rud_I`)WS9EW}{W8$;%J%^3iMaKoe_*{+y zmOhuVHkrIH$H}yv4m$QlwGU(-Oz3Dc=|l(n3dBC8F#3uZeI;~!E{L6h^I#au4C(l; zD0FKb#&>PO);o;lP%ykI7~VEq1!Gz$kNf-(n~(6h<4`7XE_Zaq-i7cJM}^;SCiVe` z-LB}yp*)U$4$7OtCIX|piOvV)eV(H`Sz!&1ZnwhLfRDV7Dr~dEWW65cy}@DoU3!Ue z|9kR&N@4RHCT$PtW;krT^1)#ao2D>+GfyA%E9?oUcL0T1{P(EC-l4GD9q&9;OhWf+ zN5_4}1nUxBh2F1E{b&j`J(GlZ1P+~CE z=-~Vt`}~6m9oKe6Lf6z=He>$b>W`&El^mu!#E}+bOnc9 zt}xE`@V)02h3&!pwa_7RJ4`RjCw0i&7_n;|*5k?*F}6pf>s8oW5vC5Vy%bxn1IB#g z9GYNkEBM|s!IeMCyV222Q`oy5-OUa&<8`>_{-UfyDUaA*Vi-5WaG%Hi2^ia+oxmU_ zYJ0MZj?V?#x66RxHfrBqr|2$4a$2#n8& zbT0?pR_G`LL$V`V*hfOKiLf2OCL|cY=@NNdM@XCRM8epIqh9e9_bC**R!6r%*}`wW z$;&m-sJ0^Bnc$t7U>7QRYaH)RBtmqobr|<#6^vz!I<5eAL?Z7FU@R}%=7)jdagQ+m z#t!A347?0m|CV>PsVkYX_ zC~2sJ82i%1P~1GW2N=heuC9T-L1FA`aeU~S8rZc8dll$7uJSuztY4^?V|QFDG?ZW* zS0N_$k$3L0uwNB=a1|XIn+QJg zax9nQ0&^7IXB{tnJ2|1dSkX1ZX6jgjtLV@e%ZAqR97VSZ_q4f9VcaX7*rN(NANSP3 zu?loCB6)4VMDNQSFMq#4FwHAi8~n%gepAuC*Gw(a zI_@ctbm!vaZ`z)SKrIZ}X?W*AFMn^WOVPC*J&GzQZR?=O%h@_ty+RS@?8 zc$dL;(W^0*Kid2l;>o)@q5H1mW%;Athj2a(jD2;%*v}^R7R9><*o^D&59txT8bcFg z^m3gW^&Y0^_9BjYdw|Wrz1EvmnCRs`ilXCU$NLdrXxbxQt{V|dct5FlKLC2}yRa7y z<$DzUB7271rZCxe;p@Oyhmr1joLp-^3FTC<8-Q`GJ%2}3?9)1qalE1<2Rgw-2iLbB z>*z$smlY;D9&$Q1f%a`EpX^UI;+}emeFPZW_?d7f{W%-wNjTXz~C=1TjV_njQddi3>ZY1I+^Q}xDOTkj)HOR=pR7$ zdSJr)TkvxK$wz&HV^M~VaC#*j z4k;Xi(pbPF){v1p6z4SuVldkc6;_j%}H`O|b? z04BEF0y_FYzSkgKgR}2#;6DywZQt90!Guf$&Qo!6pU-1mT}<9TAaW8S&vn=eV0WRM zOnX82od#l@)8ts%LR@JJF^=nUY>wk*f_(__r-1iq#0&N@U`NBT>=S_0v|FQa|DzK# zW^W8+i5Vx9-yUd299&~C*<1K!z(gL$7P*hG)X%hqbLlP6D`N`8z6Goun2d7~LoG<0N&5z+;^zu85Cy_@h zT)8J5-z&MF!U2U*FVlOfE0d(-I!y9%KVgx_?{KMik$Wyl$9Li7ux}m8n$U5+fO+(B zS9VEP3wr`|t>8UW@$!9}@??)o^4<@O(2ro5I#OjNfGo-CBoTudsCvn>;npt#{Zyg}vBek1OnKhvo3hiH;2p zd)Q%YyH3T)@y;$>Nk@!j?LwsM0$fq_4R$`R{lH$1tI&~`bmT>Gi|E=F-F!#43s)4Q zh%T?_=Hi~VT&b`*xW5`Y{s~uPyWu?#*BgMn3Rkg(yrd&9vNNK)MA4n(=w6R2vLvFr zTG5?=d)o40g)uMhgpS@3FqS|1tPe=XcK>+^-2-*#j!Wp+ zK1kXqkLi_u1k=I#g*uq-**LYYzN~mP9l9(L-9rf-bx@w@Wqm~*O!p}Xuk=BvSJScF zXu}hG3gbL6{qiDIYV%ya$r#TYfr&i!$7xIJ z(E*#`u=gu$EHI|6g33>Lxps=YKfyyU7{7@lb~q|OxYq0`g-d$i$vfDAOh}HVB#a=N zz~rbF+mKKoIHn33tU}BjN`n5ws7&U6v8R&UL~wd_NvKt*8mc*)sv*-mOyKGgQ%gQ- zv-D_6ftsE-gNF%aRg!AhfRra(2sTthgVj*2R9301`DoUV-}LO{*GNH)N54jrYRDg~ zp|Xbj8cC`lzoA-KE&0`zQjIF8R>7ztzo}Yftt_dLq<^?fxvoZ*{9o&`XIHRm6ud#@ zP`Q0}j;--{J-g!BAbP^JDcs84pxmhIKMeEEX!3XdX3*b-n}2xB`=ZI;`I|w17jFJD z9%KI*uSDiuTaWJw#_>+RUklwF-0SgO(h(!wj}#qwNGD^tq$5T;jqx2pkMEL>80lnu zm)Lwqw-oiI*g}kSg5lNEd?&|oN3KB^y5~FIL-3BEG4g8c1&)quRD_Ng=`_~p=zgf^ zh>=cX9Ghd>wxHe-dBjMku?3EfYo~>d80j>&(9tb$@A32tG16&_W6jiiv!WwLI*rL# zGk>F8^ezP*{dXo_xCLA0u)7r|W6ks3crk6^SPOY?QW(cth#iTFR^*-Tu&Wd%W6jSf z>_v`lFEUnm&v4jd3gZ|ab?kIw3bch|O2odUuqKC{jWGq0*X*!+6t>b~GKNffs~mQR z8)qQ4+F{4JaRy>74wErtVrv{GW5~p0ta$(dv1Og3`=i3vJ8ZWbqag2#9rgo-o$at4 zXjVnu28TVUu#FBo%Z)Qo-X@3Lt+34woA1URNVmmdH!18KhaKt0BS^Q^VV5eb)nQL4 zY@5Sg=Eg0^yWL@5QP{Z-JKc?2kZy;=Zd2HK4x8@AElBqghrL2!FLl_@6!tQQ?Km>{ z?|g^dudoXocBUKippKV2>~4kabl7}1=0UnPhux&Gtiz5xI_Pb8*rf{VaM)iJ*6Fal zZft})at?b;VOBdV)*X^)xDQuU+&c+yul%c%C?orr<4qJX~pxf=RI~3OAu;Y#k zbiEF{USS1?O>PKuMTZS2tj}S8RMvz~$Cj`1Z z4!c`ndmT3a#6Y*tVK*skzr&6^DbQW)u&WgI3Wq(Tuva>4@5zDppB(m>!d~UDou>r4 z0f&7{VS^4kdrqLc#9{X+?9~oiKG)Krsx{vmzyIx6XRa`=At3f8g>k+vHn}m-UG1;|g}uRHe^l5t4%>Zd;JwyiKTy~k9kydZpnH?U9#q(y9d_2jK=&4h z-L0^s>4g}u{ZlTQnDw>fM; zVefL-9~Jg)hwVN+@V>`kKTz0v9k%0zf$nyPJ*cod9Cp@=0^R!@cDKUb@38r21iBA6 z>?VbM&|ycO8R+hG*i{O<%VEzb>_ZOQdsg86u)`ix*hd_;vnkMh)M4LJ*vA}pc5|S+ z+hO-8?BfnwzB15#!eMtP?2`^VZdIWBl*6u9*ry#fd3B)sSBDKK>@yDgqr&cS*zT6V zJLIq*DD1Ni+p#9l-RrOi6?UJ)&RQGjKIgEz6?VVF=C2EMpLf_z3j2b?j$DuLKPFF| zHvRA;W*v3(F()rtwrN}YzDK_I(`ODDGwYB!qt?&dK5F~e?b~ysuNnWA@weap$RWdL z{q^`~MxoxDbRaWvWB8NB<5bRptxcEi}@-d#~9ws7&C74iM-**GdQSYq=R&`M>wGDw>9KUBk#eEpCnAj z9gO(zi<>@>=oqL5K4^W5|1W*%?Q6!29k_DB6_-z#mE8iBPfc4fdekcTe|mFUL(}L> zPMCDUs7qE)`%A+m-yS|3MKuLGfp^aRNsK}#c@qDr>~rVzk!C= zPLKWuCLG@s{SB-foF4rRWR8Dr^f$0_!l>wPVEX9SMt=iiCLACA4Os2r|3G5Kn1RHM z;|CHmG6RVj#}6cCOc+Sa7>&e5W=w$T!3N$B#NK%A^nutL$2YU`-mnbP*awa2fz?5NR`CuOeu$~3f=7$emU1hO|R;@jpA z^M5-p1BkfNMB0Dz22MgpQvVIO;5!|alVL@e|CC{lNj5*yY^chY8o)+hQ=#M5U6c;m zooD{}y-)u8#`Y~|z2fi>to`A|uRY7gJbcz-b9~K(hh6x`F8r&ry3Fyo3qNtz+uz3H zNk{iPho9bL<-NpSFTc-)pD@>lXLjJNhsQA9R(L!y;Pl?}o70~D>&nKT-E)dt6=8e9 zE&$5@!tO$GZy_`Md%O_gaJ_9m5s%_)rt{f%=fUteb7%jNegaOGa~=$*@gh^lbB=@u z*$%}C`^@o=@c+O4!MxP@ndaBr@8Sg#$3*iVdkdZLVsm$#3;)}&ji2no`As$+udL>H z^K=`2jtd`ttPMZUh2Lb@9tvY#2jY=J@IDHrvG)Ezc zzxr%Tk6|TqtRHK`vt0OEGgD)~l_RuafsHrsxCmdI*n49Vennz`X0zqr?&MEsuwn7< z;^j6x$Hi|t$%Y$Tc;7QvIn0HBxXQ+3sMZ{3JAaD*Pd(MfpWxyzN$5{p zXyc_kd}Fl@OZlIFh7Dtw+Z^N0vSG3B^3!ct@^Ai&Y|j%-g)Lsu!= zn`@{Piw!;5Qg_ZpMVGA$*h=7--efNI{;@vc@dO&$>A3RbF?5dA`@cPY_)weQnJ3qo zbRGWthhN8=radhtEb(pAE!~1QAM;X1G+bb7NFP7L#y|HhbEh!=z*-kS)#3-F7(lE0P(@{pC!tbs?42r%16EUr%=8Q#{Ub%AN4Hc zAI!f0it<~}etAAdimzwi0i>@D={pZ6kI#MVY;%?Tc?9uufbit;o+MuM*ONa|y!iL; zrSDa^$p@`>@Z4()%^evM?`Nad>! z{=XJ-FE`Th`>IL#miBLsi+^7dFZ%1*KT^D;pLxKes{I?G{eHIc>)A)0jH?$vl6|7T zp8XHF=dXc^aHREn%Kvau|EK!Xc;T;S|HII~0D9}ii~M@=l+U!)OCR|T7LVe4(Ej}a z#J53))URp(cO?BI#gC-_zdIgDt69E=pJV$`!_(~bb@Ptr5}?e```!DWyB_#}4KwaP za||DC^)%gPuR~W{^E%3FxT?vBO|MO#wC{-~vc^9ddu0EkR{l%5O3RIi5`LD?TKx6o zru=>2Uk9+kMZDA1Pam&?r~K5uOeb}x`k$@;hU(~- zbd986>`(RoXYH@|T&C%#{j^c+l=hu=%>mAnhrIXNP#F7WIu`&Gx;tF{Gd*&W=T29z z@}7s3zmd{U89e^G`0M5Wv-ST2b@HF-qEAP9{-~#xpIH8C;l>&GC;n@5`cpsk0dE3b zil_Yb^gQ(}^^2cUJz{%`A2`9*f0iV{#i8?x{oO;aL9umimk7 ztwpayn_H3pz@MLa=Ho!_bOhgb<$Lfiwefo69rfg24msK$>0jJX2VVjEAAqnSC-7&^ zo_g}7eoFI!eq;Ge@p}1LPyWHmzfPC*D@A@<-_(;&`)Olpr`Vs$5&6{3L-g8E_%HeU z-(7wN>y)=^>);1~x53ONXX+2h?Jb66r?3xaHpFo(WIox}&1k(M=1{J;fPPE+=8lh@?z7)ejY$rrl8^R1rKzhV6#{R&++cz?zS z@l7Mdf5XK~y^_lR;Rx|R9U*?oH?95kUUPZtWUY?FE)IHv*((_?7EDjU3kVHV)}b#+xX*L{4;Jn zldQ)nkGAo$erNyhWB%_X`o8McKMDO0{v6v=9B<``{Dq19^ON*EJ=xMrfBM$MzJEK; z#>;xB%M$rNO86Hi_8v&me@PPl&8Rs2rE#(StCRIola8_RvL5c|i9arX!un&T^Y^?% zExn{~W)fcg*Vup8Ch2`ylD}_H(z`B6Z}&8-PuA}po#f}M6aIzIvGm6{d%u*#e;~2v zl*FEs6aQQ^)5??b_~t*^^vQa#Yo3b3znv8O=Z3@|>yz?wNRqy$Bz>Eb`16wTa$@p) zOiI!_G4bb*68;Ah`8OuzVIWCw@6ZV_v$2nniKi=C-jq(^??s2^p_;hc&w{{Bdkzt{cR+9&IE^GW(=CFxz9l$T#7 z>Fr45U7CcCP0IIclKd|u;Z4c&^Zq3MpOf^IlKSzdiT#fy<^PzZJnl%!$Li#H{_qjD z{*d*yZ%>|wQxf|7lKh>Ll$VDR`;Jc1cV9w(LGpZ=X2O1hYCb$2H-6&8$pl9oGH${| zzC28wI`gRK9y8Zq=)B{w5mTm^v5--tMq3m(c$yb<&|Y z&NXyYJo=DB#*7<>*NRDPmKO*JCmlLv`plV!_Y;GP(a<`G);Vy!GO|69ETh-cI@?nS*uAq?q3Y6u>|Zm#*Q6(tHBJ{n6YrlWV~m6$nsJe z)tKXMC(mf1dK~=z9j2I6(T+(tK4&o`Z7gk@G#L{A-SN7V!0-tZzU?rRW@F5lG2gcs zh0`|rYU0lg1|>vHY9~(ot;1|0tolD$%vuIoy2gB4GRg*!9}_1cN2alRYI6f`bU1+X z_Y9d3<0_&^3V&k`baae8;E1^nJ7f$b0lVb)LNp6T|0A~=HS-6--* zwxMKAnlzcenP(0<#=7(n?s0Bxu})yNP3Sbd%nXzuCIs)c_y!)68qA#W5XIsO5@;&IRga*RI3(9wS= zXH#YzHtRXZ9J89(mqN^taq7$?j+phl*|SeL;e->vNleTmIogpQ6FX$w#6xF3 z=eXlfo;&{q3l=Rtih~5B#~PJ0j(~YM8fy$3)Wt@zKuyAffG1(b%)?e1UbuuAWR9_8 z*E-A*%4;*b2Blp8afi8WS#3UK`D~I&&b1PIBJlchK~7d+=UFDGPPjnYzbl= z!FH6tVVxd-4`xf-A%_eGdCtVqqhD?HB1~&o?MyoK8iSc)%OsfR<2quF$YebJy+g?} z#Tnkc&C{`Puxw48#^0GoeKiI(?4c}=tYaTAbmBnk?Jrq*7KAydKPP_8U_PTiv{iG)ZZAB>kyB({SpKG(3|0k^J@6Bzpr%((t6j{xtmhM1RVEL6W{SoIWpU zI89F)PVGsH1)AEppQ+;VTm6wK7|D@rxyr<#yiT~2_H$KUqG(1xNr|C_@HzxU; zhST~Y4X5c%!)bcc@a>8Iw7;9ir{O;&{AqZ<^Pkk`{Ym(e5yB~d8g5VWFAb;i|0&Ve zo$#mS@9Km;4UZ&0^+y`MH}PK@zCVdi!)be+hCiL~r{Q~&_%xi>w`usD34a<+%Uc>A zPWa!N`1@B${LM-Hf0jS357Tg}f243~Uz*?FO45_+OT&k`^ve5b8XhVAslWfL!~a?R zX?b~f;-7y_^7|7>IDKBza8L4lUzCJDk?2d`A4e+hslGIvzCWkoG`(qfPhxKxPW7eX zv^`0~ssGb(7=?-Nnp&_|2+rZVfMcR;2>1LkiYA^24{}-9&A@rZr(8`qxpl}8PJXQ4 z_GMtJM`fCD--O+PhwlOQS?Dl)VN7bZ4FPKh zFRpEmftC|?4}tdiqcTI#-Ea%&D3e#5Z6Ag#^7caSt=KCC=P+buHi8Fd=ADSgkLEV) zgbsv8na$vXtTyNvqE2kNFo++XY2p=U8*FO=O&jE8euXPGv>rrw z2q%B&VsHv*ac#R77-$A@KZLX4Hpm4w%nh*5fef63IEQey-G}p|z_$X&IgI;3T!(OG zT7ls_@DMOu+dc*y*C9-V4MJvS8{%;eL&h-T25~<`Y%0>e9ao&gpc}+>h~amE2NRu5 zI0tcNo&=6-8z&8SKo8Q?^lO~BAH>3y;A$J~VAfpM_wvXfb70}^+28gmDhy9KxAtM;PZI&LNzc4uo-LP!@+! zUWQ+V@Bn;bUEU2X0AXy&LNx)S0WzgFt4y@2xq1fv^WQG4&mgFel+16#5shMKL*}} za}ehc?{@*~#ueuv&LN!q0pmfOLyXHK4(A}wA)J{D5ym-)a|mZ?tR z;~eC*f-BA;o(N}f&GZAunRz|pAfpY}VO)oBZMYg3&Zf5mDg)?&v=x`nYK7{Mw zwV=hBxe++dVca*p5%_x$k8r~~5PmP{ab|7@4bCB)4R?SB=P=Hu_aPo<=KYBOH=IuZ ze-PLK+<)n8MBsabN9;A@!b3l|;itZ5uj_tluY-=R$DC08nBdrs}>>u+3N$XD{&p8UnR z81E|;J96dn=Dte4SSZJF`9f!I-^%@!gr&2Xhp>dS+?q=uXw7%VRQtMfmG(WE%KpAw zV`J{3#>m2=F(E|0Y~j)iY7vzB3zd9t?o=OF-d}FqT*#GI6%n&+Nl@7i)3ZI@P?N7T zF35EB_O%x~_h+1dMuf|iQohig>CN@#E{fs|(x2_|!~*QxlP&e+3Qz*yP=R6dwus90 z;<{F=p*qRg_I%^kTz7M+yR4P$%9eL6T(rVNu#nIi?ETiB?bz+{uEmRphj12@*+ORk zmMw`0I?^z-L$|cYIWM@7@2Mtb`Xb&r^I%VZN2M#D>*<`^SnTR5 zqkxF(vz@_E@$3R0D@gEyAPbjO5iMR+1)&UxBG0H?3fJW>(s|ppY)K5jR|x=T#RyUt z1I8yYB%X@V9KD&l$eWl?!YHxk`I00s(A?AA+|ue)5@cl&|DgW=o~K%9DIyORiMTmn*pfiU6E>P`1Xd{z6Ac z3zQkj8*{zA#XZ#;TYK^yxmCqJRUtZ#ZFrbFS2FLszH(o-u(@k{p@X*OLKbIBxkA=d zcAnHio%(?OU0zl-CqX&7Ga0APU~tjz}-nqlMhQP!>^-1SOK-V16Bs zP^%XV5#c!!5!=gX7AVJ)^=5bHI(B6X9+)$47sGQKOL&|iBqV@vIakn@Im9z}^{Zzx zax?=w@|9gECBgf6ytDbrMROZFQI+KSgH`>7h}j0~v*!viJ1uSR@A77e<%!>z7*E51 zZ5BL)Heyc#b@UX=slU26pd_=3Qq30X0*kUv3MJ9QeMR+f!&<6RIqnc|Ni2oQAw!ZJ zLY{*(ec96Pj$&`Gs^nakL7vjJn>RL}w`J?*RiO^<%(eG-uR`5w9x^X4h7-+vK-U+# zij8~F6ALc&JUdWbRZAk82#Pp@KO#6hX)&CN>hJ9<M-Z!VrDN3hj&iE72L9zbWbCP80MHgAO{ zobBlLb(W2uBqrO}hr+tPP=P>iLcUVW`T%M*w4>VV%u!VX+hBPOcijzj26`3j>{NBi zN}9-i0%NSbJQou_~C|aajzbNR=nrES<77`v#H2bA&CAZTg)64Hi#g#?fgsj<^ ztL!Rjr}lJ}E9iVBHK{|l=$8bCZAT5K+VY;RLa{SJK8f~W1pgIer}$^|-* z>?WXBxxXBDm&|jxJ(xacURQpf5r9IE4zZUC&aFArV0&`S_R;k*5Z-|t;bVjz$QsRL zP3aC#37)`>t4Qp*g(vEqcjotOW#y#|V>hD}C3#g33XkV*FBW?i!J{64G3=4eZEQzp z)T7-U+e-QF?p&!6854+6Q*`u{HWk;wH?E&rUbPFqMxh?E?qV6{c6Rq?OPvZXji^SPRo8(^p_1F2%4DH|(4A!#L~n&deV9@=6tkUc z@NQBpdAPkF9r{Y^u6$R>WU{U_cypB3C6?CyzA{IVq;iDfYzK#sLM~d78?$BIgS9Cr zqmpk0``VK7S8h+XqaO(im0YFRmy9Mrjcvq;Z_Ib^s%&A~?ajawArxrD%&^7oTqvbA zqVXmd-s^lS&h`=smCID+o#3%Oh;%xRAl6sXmoMl5^&vzl=di3{B!S8Me%AT&o7|jKDIxLLGYKK=h!U3F$D+4tkK% z=J*)jdcl%>Pmif^2$Z!~1l%z={XsIFoO?P;j^ zJdcamTw2LGH(Lr-S$luaZZ}Yb5jrz&-3+WX>ayu&<|QjUeGOTyrH;*oo|@`x zf$+@CbY{}ZV33asI?-`w22{mhzF->!)Wg@V+EOZpULblI-P>f8EoxcN4kfhZ{&oz7 zcT_@~FGzSN>P2xV+4+!!+qC<(tLJS~Skld4=P@A;P(q6m<9d*`+iRJyxpnBQn5V?E1X;$m4d%CCq)BEZMhr{Y9`tT8($u;)*B1(XV0D9;kX%D91_dxK zlEdg6*yBgg3pdG$au;15L%spMcJ&&qErL|eL{%FlCOd-dg>qsy!nr;xd2VB+w7=Po z&MM<0igvy_tSYh>$^nUbWS#kP9|o)HMH`Xp%d3k8O%gk}+SCw_w`aZyL|)SFV5RPL z`eTqzicNeVZ6;dPk0WbLXdI#&-= z(QVt2l2%YzqHh?A8Jg*CmKd}|tS!8Vwf23|hn;nar{>J#h`>4w3m3aF!iKSQbSqSA zXbX7s=mn@sR(A*8GPf}<@0MX(uGEVH5!D0E9g%pB4zA9JvClsA!YfJPs*-3d37ITD zG0w9&6`o`ck#yj7IrNi++)^r!SMVRhu&sI9ZG%z|&=WvF=4i2rv zu#c|YW!^379@yk4y{$=oZ)!l(KFw`RP3K@qg#`eKRbxqptPi6WA>m!Ul})Y9<&CXM z6B)M_iFWdSO8c7I+Z?B)kI0vtoj>x?2km zbf_vjOkrTYLuW$BqPU=nFt!xI!0wJ_yw;SH=|4A4(p4(n=RRETA2`TeDrEj^YvpVqigJ1x`Bm`UxeaYYsp*tofkXhf5~XH7D6k z_|$cGtS(_%#fRZkSBau~h4;Q_xY7}C^3;@SI$05t3>b#aZ2@h9dJzb^(nSj-TZPp~ z7=}fSt){NgZ=yJiyJ1E~joMNayD!MWd?masmUm@4Lw0wUa{Ck8ygWX86oB4toc$8P zg$jJCRJW%u+nqDSo5PF>T!iT~TMoQax;rSPdMMSkBl*I9JV3>c@bH+)$MBFbb#O!tPfidS89pa1(^$0W@k_&FqdL!n`bA*drQX4;?6zw3>#vSs+h@HS?UHn)p(zMX|7Z(tI=QA&O?awJkSJgQDeZ>1Q@nFI00Oiv^(v1;VJEJ z#k)qwu5EF1>E=nzG#wh$8iPE#(;rnJA)>L|*AsQfLKHeT@stL9mM`xz1Utj53+jgG zUBiTm>e*nexS!Tl)qB3_&K1i2rCe*>p&~3kjg@eSsxQ}pA*k|t^rL)9fzK5@H(8^T z#wHUnF)Lme(c^3`bZ*j%)vEgvn~H^Ivy{^t!R`%)%r_OqL?7c5EMnl69CbM`kK^%+6wKkAcLU`_DIsnn)K=i{QD}vDMb)us5rpibyGJ~Fh&7mua zOl(DwvTN)r_Fc_0Mv>_(CG)nm*qhrC$&1h=Eq3sRWx#95n|b!l?6j&^GLmfW;-I!C zgemOFRIL>X%QTX*5e8V(2rCE1V8K|ZYP;N6l(RVI^9Z5sUZN(Wim8w zNvm;Wh+BbUr`Wwtn{3n0c?_Ad(bef5V};60G82?`T7{*<$FrexOopVTuc*cwna!Np z+?d_JJzk3(_1cnWRP_aulAvOe9t69Dc6yug9Wv(Wa#Q3lHCh z;`O-^r}0P~p>Ydt&1P{(*2PgCi$#b^`}Q^_9v`meLY?3Z!HZ*e&gQ4?C3o^!Ug~od^Vz&RT1$ zWidsfzC;sUj~8P%9fca^gjAMIeV~U3s5`_*PjYosT#941RxYOtIabYVX5Fg^>|3I- zp*q<3Jd`%~c_I?p$JYduv2@u%9kO)Qf&YdzPLcVrHLgfJC0^${ z^y;}l8|w7}I>?wf!GJFoeBtY>XvB&!u6<^I*{9htnc=4t>`&&r9IdG~k|_Zlm5MQ= z3iuw%o~&9I#ZO<0d&_HZ;hGoE z;Bc-TZ{3eY{Jk6U;c@2JpxrzGOS<+WJ9^Zde{T`)#^_x?UU4v4lS5-2e2ifYyt#Ck zkteUKh|e#2)R;Guybi0q!5dFL*p)#wqsX(NSm@r8t?X*;@8e*Uk{>yd>D&_LTsX*z zK2o%bQ@&d{N6{6Edv%Z^cVGg>YvHs4mWBE-lz)`jW+CT3Ft4x;oeSsl2R&$b*1G>Cku<0=)wz9AUMHMgxjLso6s&Q1}&i3yPyqT?{%Mz6)xiTEA{jaNDJ!n)UB zK}YKrPqjCTLD}+tlu^s?BNTf+uqzbS>{No27{!AoG~Z!X%LGSbE(8iO^yc*is^IrDT+r!`K^|T;zVbt4h)p61uj;yJ)YFd<#X4#)Ccjf8k#B~ zdAAk1q-?VtjQKrMkJ2R8tMlYtA)k%FQm)cpO0a1A6Z9=GCAb-F#cI0Be01x@){0CF zs!!4w3OB3#PF)SNk;kSkSm%djyn1~Q3TYi%Omf!fHqs!gP@lEp4Z_>ZwW<0eCA0%r zs2v{IZfsuB!SAv>M`f2Dp)jE&k&Yu&q+Li%Ps|sfgxN&IHU%i5H3M3PR?XOT+7v0I zyJ%LGMVr%LUNcsbFE_WN8CFeb+4c$6`jmHK;Y_+Z4?RKj7y?aJ)rFxVGUY$i=+H$n zF7+}WgLn_{@3dVh0mPkywCPl&Z z=v(_c)h8LQ{~m+*0tX*CsAgS&U?vbWF6e=pFOa+?B!qI5I_xX6pf=2}@znb#SUM_t zH;|s5ZvB1&542$IeJDQyY{gOSJMh5 zJ{62%FUZB|u^BE?+QlhOWvN-a8wlQn4?Pu+ELe*bey4LUCue zx4T$2dsW3C^aVK#1TWc)LJzzL^O&}m?q&6^F0RS%Q`;H{(2QlituKl8#Nu3iEfKZ8 zx?{-<_F!@~U%;~&(qL>-1n3)hn~*OT#mfTRoPVDuDHPl7W>H*#%~xX|!`Hb$M>C95 zRc;y8DcIc+Tb$dM>%ig!FP0;Ru&es36s|e&R2UwxU#ECv&b*R&_1%n(1-Ri?G)*Rv zErou3{gJGxv3xeF6J@7Lq>aMITiDuAec#o`?*lPot48rmjk*kIXn=n9NR^fVE&|+cBi!^id1#X(q&Bd*rQenxnWSS9d6y`|{&|+L2Mk1B9 zo)8U)`}ApNcsD1gI%s^rRI$T4=1s*N;r$5auZ;k=6~uZJb+1Q#ZxS&3iI370Zz7>0 zY~@yLMG``K&=axse>I`2{Jkni7*%cEMOz1iN2t5V+AcixPHT&rfVCtGykL&^`v9!r z9&Q-zjCwFJoMfHm*a=QFz+PSy*WJM_ylTdok;D2iMq}tcX{m^p|Z6k`wRLh+auD;bbdOR1RL7MXDzFxhY*dvZpEw&Q*8; zMu{U%QpQX{O&U+*M(u{FXT2y_gt0oBoT2C3-4WEeau}Mzz1S5bgxu>(05A>0@@Csb zugTQ9ojMsFNz#x!{TS^)gW=`4Doj6c4$>`~s`&9qZFpt@vw29qtG9eqg7IGCP?2U!De#rB=WLSt+EqK$sY-d^-}us=kJ1;DeU z5lNowX!~e+PV=J0mx8EsW(L>Io}!_4;X4*yE0T}d0Yx7sGHf>=4V57vW{}8)Z0CjjWy}ntQ0Rpn7B-(s zdesqWf|_yPP&0Ah(UO-rRu&>^g4{yKSmuTDC9B-MEAIiz7mspT%Q;>d zUSo_7Xr+f+QMdvx>S}{xQKZ*v7_s|LG*Zq2(zwFY;34e5gukgtgESlFMCWF%8&-9x zrVqU|jV`V!dr3_+On8{`&7sl?`Zdw`X(HZ(k{SaM$@BJ~A%Qy`j@ z@w3Hm_B;jivY_|*Wq*;zgcXSBkfGOrQ3c~}&pBtFnfky|is<_hz?gEtma6y^Gz=_a zPd!wEtGbJp#|yC|k@3cv>F8u=Nho;@M#00R7UxO0A)Xf~>NjBvw-PhCzjwLyb%j z7C2Q4t`$i}&h2_?0`ybxC6RJpXRb%h^%L8e-PgKhbp-dBsi@QeeCSXj)UpLd7xXAF zJWeQ0!P)GC*r_dVE|y=l=U3;-C`Wd`wB}N1nM@?!veA7&5!=Z1xwRM($6qcm+pSfx zYuTXk{Cs)hBvHJ_F;9-ibW~B+Fdb{9c|ot}1qSBz2^3sl@2i}+qN zpX+SFk2+uta_H1>wLd#<>Lt!r#YR-9?O=YhsgHA=2{~$qSS^6f1uN9sW|}e-34AS- z@{`$of4d!W!drS7`!x2apX&m{%AJC-z{^JE5(DO?3H@J;!+9cuZNWR#8r?n{bPeh* z^PUR)#HKxTBSog5f~*f*GRhwr^gqj!25L5oVeh zH4|dMX4{{JB1|QFQ6>sYjJSz^t*CUNS&(nGNlw2-tBOWD95;H-b_1HxPt_pmI47Rf zqc_&YH{11raUVy=t>h~UG9`AWv5i>^-Kr{4uv#5yP;3pv&+}@~OAMMCZ=Gg|<}7SP z5nuV?RU#oT))J0|Bx(rRv2)YnYP5AfHi%Z8QAZ5eI3d=?HHmABYQnG^gJ&##(PTBc zKd8jmctyKi9PC35-X%!w8X3Mc7hjBAIGXs*CZ~Syi1mM75By+ zPlKT0$m@m`-|4v>vbWkA#;d_jC#Ey8wupf+ydDMLQz7hX-QU|@jCb7P4<1-+x2y`a zn%^-z=}&naMw!V*uiM9@4K2oPiamRBY-2a8HrCAm11htE@NyKsJ^r4^3F5bAT98*v zkLw8b70iz3UbaDMG>Ha}I=Tj_WJBX+03?k|3S)VB6g>S?4cuOgFG6w0i)iwNPA66# zpeEM+&m6p(K*%3v9t&3Y!lb}N+xnZh&<%*h>uL1p{bxdf(+tHoa}x=Cyj1-KTUfcASXyfdZ9>8^AG2ujpm-=7q_=B6 zYcSY#wFi#~qLRf!A;K?D2_7i38It+lYd(0Z}2jg4e-8NOPdYS(ID z^bRXUWT#ghu?nl2u?<}_K9AVzH#^U`N(CQsXA5Q^#V$W->^JMZ@bwDb$Q*=M-mvv@ zjM>@A7&Ch&#}N7!n34*ZR>*1~Y{%b1IjOdnN{2xiSPB8KIr5PsF8d2Z>(AA8q48is&dsUXtZiA^A=)RmL8C5_>2(k>>jYZbkVoiuFRk;4>u+%`K_ywhy8w`@;6 zXH?8u!+>>UGjKOb9j7JGZ{#q0eW^9M`O6Vq`}wu?D(=M)iFt@(H{_QR_(pD((wOD|Fm}VCv46Sa?ItefHS{%V?8T`6WF~d}0((v!ytGD+?$0LsNOU@ z##+D!vRuLKLwIN~Q)6mlF$t?@QQ`WIJ{%+Ozp#CTv14= z8KDQyXDoD6y`8nZsTw!1@If(Kpj!5{tNkpx-y)>-S$DFf#Lk&#Du7lq?JK{9$@hKp z>*qqXlaqttch3dp4+2)Bc23nat5t&9^OZeVc8nkQs){m`!vTKTq6ZCE(yhOhq(` zqZ8sqwQ$Vx;DTsZZIViH8|q+TB;B>Q_h4Tj$=ts!TmD6@gK@L@KVTe7U-4>FsKScAqGH7%O4 zvI5-CfeIIQ#FqQ^e7E72Fg|dDpw;k>3i-boVaaGbdmWe@D^TTn<4g32O$G{BqCKl#S(-JLBoCf=gtT0ujL6Wv` z0n_It0Ipz!30WAEV{I97W<8z&Nt6AtQVH1F=J5G_Exp8nh|{7Ol0)XqAAJqhXgRi(jXBW{T53a|)8mNwZ*s&>Zn;Og2UYwUQgX?qVVQJ>vMh+`S zEtziyeGDoNGrmq@87KFUn^1QmxfEi*+s-Q0!VP=zJ|fy3DO|L#uOD0TQ#Ph;3>W(D zEoMDpEEck9R3gYEqc>kRbN(X1r4GN@S^-axjEdcw2w7P2kSg}cVuz`fA0^gqC z9A8Il#&i>Z`Kumw@7c}5^?$2pE>ia7yyAQ0lh7Yt&qNShLFXm5fzS22BTMF>o)(pP*@n_vJW%Y zIp}Yo%HUKRJe(G~1 z`k>o5#O0iM#(YP^C}K)Yrl5w(mAJ=1op@=$|6ktTJHW1@{2M>h&Y4qh-Mx4FCfRID z*-bAH(gT4sk`Q_lLMRcE4XJ>I(5ny-P>`n5dlLnbAPOo73A{=ZL{z{6h=QH+ex5n! z-o3k<_vZAa6%j$?O7{F6HC3jEaq4H%0=P*YGwesx%KpOKSq$~owYsu1TGX@ z<+^E~#eAHZ&;$P8I4&o3llEyo(&nIXm|Xbd!E%?R^-2_dVk(4)KJl?LQe|1=j8qu` z@o6bJD3#)l*}8xPmeRX9pCpk_N^zB~AhSz=Tf1LI3_#(=6o zGKlk99gkS=h_rW>J`zvlp7SN*&VtQr<2ounZWbFseO$-xvLvOAgi~r6;Hvl>5!P_ELzMz2?2Ii7%g z-chGif^TB5UmQ<*p9$~HU2?5SAOp*ST4h+PQgaDk&!%xJe=K1oW^dTg12yz!I# z<=H7a_$3LX9OwrThK%&ViE#`1%)V*p2_(*zJ`q#Bz5`-%k(D9&T3k`znT_Lsaq0Ks zl6*Ln;iyxl_hO4Jgd>3Mus5u7yyK#M@M|1Z32bppg1XCJF#OV7RM;`n?2jmq6S%85 z+LYT}{&+h{pB|wQv`ysapG1=>1r?Ov<33i1bdq@&5%w?*^LMJCoI3)=rc@(B4TiSB@r- zjWxPS0}`+t5MPP%%B?DM@qM7799szx<;Y}w27JKux$o+Yf7g~q2$cbP4NcyF?`cP@$Pl98+`wNrb@0Y9AoUI}>|4$MMd85m0< zI{XyNFc1Sc&_ur&Qd9PeGHlnt8nN^As7;CTb71P4jSG(I<+tLmQRWjXFqes~SVh<) z1o?M2y7K)taa<{fqFDfo0*^p6|V-q|Of z4#36_*}!{`)IrIJm}qnKF1CyHiJk+OLBgz+S(j{D-S6`x{~OaK7)K+~oKnsYxq|A5 zmm+PJUqGIYi5Cxj4eGF@6=qbiSHm0u+$WN1=*_ldIvtCIq1uF9kg)ofvo4uF7fxrS zc8DkX;3d3;mJ2|QmB4E`sse(M zO4C|SqQM$4g6*9K&Pt4FnR=AkM9XtPq^Wj5Y-!OC%wKBcfFhKz`^qqc*hJQgZu^f$ z?7_X^lo+cS=ZKhZiFfXd+;`#Pg$tMVHpS#PYSpR@7Hw8d5N1!;v1H|-ttS|TUiN&A zNig-5n;gfLv+l8FBTGoEyrB0qqay+R07RTlMPO!xfIVg{FUCFQ=-1jr*+RIV_^%Qa zjl{UpfeGbmjO#IK$MIVPlF3h;hl7-1h%w8E&A~90;=b)qoAgQ#9^PA0(E51XWoamEs2!!}aH(Y^G4X%8}Op~%_hC`2Q0;4MBFvGfLd)ek)) z3nm80G8sRrp%h`j9?bHZ)s?YkaQa3ZwVu`*NU45eDE# zm7eGh@@k5gDFot>*&NjXK?e=PHNh~8pemwWt`+g?VJC=RSDAg(NzQ&*5}t538T+J| zFX2LJBkX3XtOT(K#Rm9F#(m;Q0t^x~TxcIA5QcBS25u(I>uKFW}ACDEkhtS#1@cHRl$PimWth>tUZX=j+6o z=+&%U^Q|T8$?AEmd7fjQD;`gbXBX=zRzmbvfFJ0DJLbBj#9;Tv!Vz%UF&pp$Bz+V{ zb2rATsy82=jDE6DO!vvKs`rWM3rnUOr6KK;FJ{q8Ad%!72yG~{q+g~Ox5Sm&AJAnD<;}?;CcSU<+$H`c`R5|i};>-BDvZuSxF=kJ7m+Kh)|I9I}B8QpV zO2byH7XUS-Vcwkvv^T!D>!ub{vfm`59wRPNRsa+Usq`^=-PF@#evQq%fPvX~3{s%9 z#E%sBMnNvBXzWpaGJr~B)B#*^xr%&buLe#jeJRek8i!Y-2{BCfiK-}>WGX>8elvMw zLd)VFfGaBFWr{(tj^1#}`b~)j#q0;ir{VZOzvLau1966~wX4UK$XZeahpm|HqWjU7 zi;7$z0hO?W?1_C=&!i|`o2 z>q$OSC$p?s2&H`Mljq;!K7#kgm(o915qB1zuc&yZJh$WhCkU@2ypM3Ni0k+f?pE^r zdudr&JP$z_k1z%Kj>Ua3?*G7d-^Fu)JcAJ?A}mC3k#-5<&%^V*2*1EHeeWqepNi*i zAPiELbtuAV2xAehLE0w>^(gxc-Xq(x-o*VM2%UKTF78yve^7Q2-mk>_a(sU^p0^@U z+L?I2DS5sO_cZccg*Zy<|L^;VzYXD6$alD7Suf+;f5Eel=ThFLCQ&eTUke@p{L*ly7JfHyU@Ulj^2#AAontvlRDI zKd8@?wgPdb=Tq@aaW^LS@8MpmyZ`+?q`k14bjy#wLHSGdmCDv5ZC`{^xzf1Pcc@*Z z{9i<#QW?5mg!iiuZb$ej!W#&sbgGl;p}CnV`+>Ctlk~&K5FMX5JsSl<0--3LnBzeD#`%}sDJIS5$SN<#2N8g}6^luM+hsKr4 zl;*Njp603&R!i}8KQ-*_^Et`0z`Yuw4PhF>0SHGRRF>=M_gks}w} z1md0PyG=(?QoJQOD$H)B3e0b>?m5}iPkGB(AQF>8xr>fL@7@32wQKn<(|zZQuJ*tq88$|6wd!n9g3y-;oe>MLVt zr_K1Wl`+OsurlJrV~ykCZlYEg_xs8Of+?I|a4hWkmC-a%G$xgCYq9ZQ;4B*AjU%jCs2<0{eJ(2U7i~myVS0Q|zeqE2#c4eQHN36We!`O0iI_^r<5G z;T4K2;{o^$c9HL3#YAAg?$Ld}eKa{VAJu2Z*Wzba=*+#!f@=*Zjq2deUy;#Rzbf9>0-PYJR%QW;JPz2j|GK8wflw9y47}MiP+4oaih-cL z78t3|f;MwV+pPOEf_`EdqH|>&&I~qs^NJ58QM-fEUtnP_&qU?8L& zVN|jdbu77^muiYnGpkIdMARN_rG72hyBSWFQbfCRsq!7x9V zP)@;N;ATin68Y1YQ|P4(btXB1UCL4Fvhn9KYrQ6yDuZA}bdvmElBj{DN>1HP_C2<+e08w7J1Cz;wH!wC?%9KF96981`&*{y$M34(b z`FZP6CmMXd$BzAP#%p(dFIP+?q3c-F+Wv7X%B!bu3UCB|>aL0tHjV#l_kD3sXnQNenGEP zDHd5*FNDxrnKPjmFb#%{O%%ZKjjHLVI0mGGBM+vX`|+cgpDsZ*V~!tznxST#hY zRPA0hUcH)CKR7+84j=QpI!`(W`KgH8o)40B@ec z8|SUOuEXsV3%$j*-s@2BFy$hiXW?5{qDcJo>x zhwx@TmN&CG&KH7aegtdgKV;4wjCbnS8D*c&1GYp4;+r;a;LYM{Y4K>~E@uT>xdFjl zk+L-OdxsTU_G)V6zWIyzfImBGs^Mw#m*ezTFjsoY^PHU+(?gl38r9#qW~VCc$mAA#Q~&sf7+=lzA$()h@T2+Z4x< znq2WtrRh&=rm1}V#xVrcJFeq*$|p@8O|d9PIVqQrqVJnbYC!&^j2*|&Rhh5EEwfP# zeTCls+jE?o@+gmmbbjZ|x? z=F%5??-)ZVk`ao(8MnJn4jK#1Y*8M^IF-hU%2Mrd4jO%oBh3=VhTDiw%9s(Q@j@-k zYD6L$%90^P7wWBLm2qgg#lOm}ed5-bd6!f#jV$_S{?Yd(s-Tf6x5!4dQ9LgU@s*H4 z^A`UT92m-!p?AtnSBA2f3;HvV6wgDP7LN_(Lj4ucg;EwTT7%;e#+8;s!_<0<&$J}e zdNE!dL3p)B5?0+O&+`n()tlCWTylTwb9q^Z_$238gMnp+@NYEj3s_e?gIQlHqTfKBn`98!ws3%KuvpG!?K1BSbp}yYgbki#9O}mHOpX@t;ZW7d_7YW1Z)qED@B<4T)KmHwD<*nlphN)gwEN>LV6Wg=0P<<{M-Mt1i0 zWMcAV^_^om2FAAWCE9*qSgs zp-^tYJEjE($}1SPpqpzdhB^bGWG!rmlCBI-PGYeS2JGCe(YSP<+0;%2YEP z)gUL2e$BSL!Pu`^-dv}d>+p)0`ikcv=DDsSX1aNPiM_!(Ecvi}jp@2z2b=gf6FXS$ zai({$nbtRXk!PyYp^nsG)#5ZoLq#<(G_R6XpF;y>I2X*f!HTTEMbB97Nuvevp^)LN_-Y=kANt?!Czi&a~^V9A2@m?&7RVDSl- zoM1g66d!G|2^ODZ$w}5v@H*CFlW2vEq7`zm^_-VB)z)gK!=x>5rWMow#rN{Zh zN+WfXSw{QIMFLT+fD;r#jpI;Lsm3uYIxX30YWxa=@i?v#IPCjE{|J+lmQ__LZ%o)( zs`F;XVfCCZ7YIakqD~aU$~*uobIQ~Rj25##kVV_$F8)}fBlAsOkjL!Af8G$-3F1Y5 zwrSk~d_F_eI9|sNvbgL%xQkhK-8sxTo7v~E=CfJe8Xn2;Bj$X_?7uTYms#%o2WvrN z8m)*epw=i%9abwC25?Dv)U)z0486=+!2##78RxPE=P`XQ8w%Dj^4ta96c>YT+flQM z*o!%yW#5o3+hyJJIfswc0pOLro73;))bQwhmZgvU8;rqhsYM`fGi&$&VAB>>#})wC zFqh5^{CaUcXE$(saXwJYrHoz1{78g;}^^!zC6{#Ljzh*Z{jQ|RlYmTE6>yl;riuYvU)d2m$7OE;?5 z8C9(ciciZ%GL=^Rgaez0VLcQ7+reH30%1dFwco%n@M5t25aV0&5oyN-F+GUqy`u4Rp8CK1z$cXnmHH;;ev^4|pKd{)hNJ$R8mBuPeDP}x{URi@jUVwDW81iEuItUU z-CTdh&F#0$+&Zju=c6q5JvK@Ra7?~TgSRX^$m9cTsJT`hd(bhN{a9nBA=4N&bnJUG z+fVE}Yd^KGhoJVGuX9?dpE1v$>eB2c*D1J)GU6++3$rM z9G)vPZwoov`>K>$c^M#F=Pe%24)=32N7`Nho|IMXQsNoqLm-zt?}Rr>^)0Dvb+uHN zNOd`Y&E^4D*D7@bP)X({sXRZGO)KfSnJ2jSkb?XdvFCxF7K6h)QBD-Mb9p?7`UpMT zsg?~yVRCE~fVWQi09>sKXv9!Yx>W�PBh>aDI+z@H2S^$`FbS@t3M2cQdOOb+Z~( zgNL9R>#=~U8)oD^Cju-kYG0_W^knNs5(7CD0VQy3A#iK~mWaXe9>6i+F>9qe_7f)t z53nMpWux^nz6>138U8?acQSEO@DvY0;lxW!yh;rLs}H6pr}8odu!0~F6oBU(Nd2~S z6;`I_8oKgbz}6W|wu6ttAatO*0DO~B8$nY)00{q?u@9I#;QEa?;dw!1_;Ltc{8N*2ngr< z>K36M6Do8dl7?J-kKRx=@MeyuK__PaED8S1`XbQ6!S)JOEvEy#r&-p&u_jq7U<|lK zi6(^E7?kzD;XQ2qgq}t#dj-3n$@|z{9D)J_06PQafXdsvZK4|DdV!th{0=7XWX)}A zWQG%K$g47vpW(~X{X#JSFY5;0^t_uUqwE|8 zdF@+-sTToHTG=-1I)DLI9zk#ou&qp?dE5AWv*Is`7ygf9H1MJ_kw=^BzUF$&XKa*} z{Vp5JWH8|cj$1h4LuEQN9xvX6ug6KVt;dMzW_*U;47{{~pJ1N|XqxF9pRP;shNWV@ zUZCc?PjXflyv?(3YyN!~@Q2Z_=a~mxuwe}I0Ah`W0b$e5h^#hpg<_FY1cmBizjq4nIpTdsJgmhd+IikV>;ZrhEIswE1BodJX~hWp6GwdN zh@WclwANsG^fL}b?k61XQrnUKp(8$W#11VUkJEoiH4RPk=JX(YFxI2wgE2`iL=CJn zuZb()iR>VCHjTg!nf^aaehu2T0+=8T(VJ%IOy->la2_@9__4)-o&5JLuq_35$h^$hWK3dP3Il!2_B2r?I_ ztme)X{WS(%)?{b6$9U*}!lFVbz#xjq32USF;nHdk<=2d;26;W3W z7J=8?(xk0yBjCiIkb(5l_y#rE{vGsR30-X_MApR9Kx9ygg6|U_gmo zS~j#O<_uCTF0U0XglE7#sDkEQ7)FP;${hD5?Op2sRbaH><|ya#^*rV5jV7#|y`s&^ zZn3UW`8?<-!*tnDj#agmTCkE@&?yT%rCKTf0V`Uq?B}hAR6YQ9K>mo7Y2naP{$nVA zx5*ENI$D3XgLOWpr^?DsFpH!0A{IvKDt4tv9)3!T#+y*Mi0KO%B8wL?-^A=~{R9{` z1BS^xTd}(EMwO~|KsR~4)a;DI0|4}q>UT_>V~1zjE>oIhl_Cbg`BcttG%S5L zOR+5AE?215kmZX7zZP$Gn0pB&5fI>D>wOzcSBwDRMVli8SiPNJ%r4<~8a)S(0_cL`LllL=mADe@Oa6*eohTHJP zPHP&h&tUsNFguI*0q#5~k&eOh$$X=`$@Ua?WuYcN)mf$|>tPXZ`kXjguU1F9cR8$1 zKj-8%+hNlnKLw^KBMa{f{vHXJJP#>2^CA$*z?t78?z~Wni=@GwXG)cEv!Rp^*o1Pn z>(nJ$U8d!wT3iOCTMcb`f`C4uuZL&p!grYW7$Mqo9cs?SI-ej~z!@Q0mV?H*5tI;! zw^=lhKF?uQglfTGf$-LXuoBX(1wMI-i#NG&*&lh~LoPnz;yo_j=lXe$wCO4f-i#}} z8>9_D{%cTF3((8b9?HK7AbZc-2gnS^; z0F~69&c^b>=d%BSF3E^;1@^U&)CT7>c@W!M)_`?w~NJe!MAx|(;ZVGvCk^Ua^Zjj1pzH*LMqP-j83_KaxQ5wK8aP!zp`Jf3;^Fk@s|@IJa@b@rWh$#O;3G0~ zfHA|W79dQo=4^bZPSzLdz@#APy4w1VhWGq+y748N6#F%Y@a4)cixt3^ zCm2WsaRwy5!L7&L!4XJ{c4gEJ0m4^fRH*9ZTaJtAe#%u(y6Pux78EI-XmCN4Nz_ac z`vA@MN3sjcNcMY%_1H@uzz6fqglK&vt-^3haAQi~%fS3&o9e-Pn03-=UGC)rNBaSL zPovTLBR4gutZJG?_;i@elSZ=*%U(lY!-c8JPumy*%_JU2Vu1= zV|o51*37rDdM`bMl5`e)c?L@IZs{Ek)-7)Jec*gaFE>%-?fup5Tu*d1+LP5tZ?cOn zjK=E1H@Lh3%GK*3jr7|KY{87F?M_j zo!KILEbCDKBzFX~3(>t$7Tv?xy{vE#^pGtdp-S&uhO2Wf3(sTXTm~I7o`+e#V$-}T zC|WchBHMHXNlStM3AGI=7>X(HAB_EoJ3rtdv}5luN28U_>&zQf7*g)w1BQMdfS$j> zgpco8AE71C1UZ-(0qu^Xh5@>|Pw3KC%Tm}!&t(nPMWlz60k0NN*xSlx8-ku-vbV4- zEgeT7wm{Z^QXpj*!r)~{6?VMEl)D**P;W^208&a85RI;czZ(vEw$`RJO$+l zh8`kNmw-g=b?-+lILvyVRGS#9!H^VD_h8<}upossTtM3ojjF|<>501c?qc27FkBkD znyisGajUig-*Ro&i=Z>fRr7)mMjy;ubs8+Z$7R7ObX5BdIRyne&3%rY0X7Yu^Gp^= zCx0Taun!w*o=3uAuyV4|AZpv>ujFTfZIf>>bDR1ZC~o&{jgdChipo_&d8+ttt2CE!)N;j#Zm-ob~0^wkDBlr4G)6#QZ$?}qgeB0^Qj z?Yx3w-{!6Y`2hM>Lv$y&K0toZp{q&gBC`{CDXajufkR0&7P1f!t-OyoP`% zSj}%K+hyFHpn&L*UdqK#Q{Pd?!Vm@-%WGOIGrEs)4xW}%C^t8|NLPj$`tKt(lFpD5Lbg=^|^-lux2k{YW` zUE#}YgsCfI>Wcc*l@;o2)D~XAecum3iXhfmftlZb8SDKkz<6S?{E}#t=P>pvlN0zt z^#i6Svjfyj%KQ#A*+vsMUUtx+iL8u(@Q3pV+~rsXgoS}qd^i>mce-^-fP`Sp!o~t| z!oz(pm4eU#%8sB_749uahdKhKG#jRCu|6T3BjgYqlo*CpSB+T+*$9Kk1*$I_cU;1mD2dP+|U=uqH3QfcfV$ zK2D5h2ogahF|hlMO-kqMd0F-R zQ+`^THEpX6UdnC7HE=Hm6N}rA*bNLCgXfqvtH@LBUPH>~5!9tA+3xUy$A&?4-G3-& z`-9^Omg_-E6G!P{>E?t=lg%*2S*J-14tG{T<)ggnud)^VRqnpTuV9(1Xe%)|&jW2+ z*6~ob0j2ORwouMg9xvLn`DB;#Cfw(_$h;L}PU0c-49>+^t~~I6#3DCD8>h9L#q^o5 zi9XHj3z>Z}FqK^d7%)-A?qd2OK&G;N=sf`rG*B>w!-mSE?a*HuC2HFxUMDTb;B zmoydNA=GF+RjtabNC& z3PlUN`ICrihawtMydMVYRT2F{Ool2<)u(yGFrD!oPefH^2ILcin`cOj;t;S+wfsPS z4GZhi&3siR$cCBG=|!?VhwKLf?4V9#n<0j!ZRm6%mpav+=dKPyUqw-fUUR_y8H~Vw z!fBp0t%$Zco;ri&E@U$dydQvV%f;&jyHPkhggOh#Xqd8oDu(iU&Av?<#^6!mxuj4b z7|)QQCFah*ZDfjOekh=$$VZZ;w-`$mFv-l&fKvAWVg|2bUG3Jioy@ubg9ex@I}F@! zDj3OU@CgDwU(vL?+0+he+FS4(kwsz^VKY# zb-k4bQb)I1+wFW>u?CKgR+T$?6g6acxuc7^U@>e&2p8fDm%t+dIxny(5Ejztg)dW? zNG0DXvJ=f`b^L)B(4z3t|cElF6jQe+G?ef);xs%L|w*y+u>Z zhmwz7#H^n==3{9EEw}PgPUKX4Yz-Cf0^LuX{Ib@^PL0u50Tl|gPr;O7dpV5pT$zKA zJZ*&a8=Z$u9i|_z`)J4%*{()wMl<{gmRn=<(7>?POq3eskO?Fs@)_-A61xEnBAglU z!BeG;wpz`g+$jO!)$1OCiV9shYeoT8PqMy{=c37rzz=(#qh!{By*Y-6{W&&3Pm~3L z81gdIg8WFjYrC@6oblHF1W6v0xK=gze$q{BV_%}hcCT4-=dsiB)|@xkf|mJ^H5bDg z0#c$~ke54I=m>yK6%INs}Mp>~;ju6Mm{ly9iD?BB>K?oU5fTp6@gqDxBegqku zY;0vBpn57=|0=U~!HxqJDJ)U=I{1j10A@Dmw^A_Cz&p=Np;yp} zK_;vo*4q*@@+SeVI-v72Lgaiidl_ra=dBx{%_D#mx;pJk+oQtSCNt|wRAahmEEk=} z09&01s~4grk8tZbU>Y(fV)P(u*Qb35N4XSOJdtSzX#&J`+Y0Iy$Ug8Um6JqZXH~Us z5eG@nK^x@yZ;%xHZ@P3L?2Ryuf;H!u?X2Mv_5&~p*GUarD=7BQL=kuxTZ;XwV^9a!$!yC{H*&xse?yaAT=4E@DtT|^hxJBft z``QDUZ-Ca&NXrD~Cy=l_8peS^h~wTib_4-o_OwQ84t$G#6c>YQHRKqm_raq0*?3J; z;V;n=84cvzW&97iXJVSFl3-i=oof9WR0uMRJwjBgY7bwE*ol_43EwpERB!FSk2Nv| zr!q=vFM(5?wf|UaS_#+)%cHl`u47YE*1SIo>nXd)Bke%FTMI#@pbI+0UtYVOFTKHV z-nRMvYIGoK0DIYS?&Hk616*xeq1wsBe?zk(Rl-is8t8B3U*>E-zLLe3ziZTIir^YqaKdo}Ak{r8Cnp7QyXwI+k~;4&CW>2s}R|YFlf@cLp82GuyEjBF7@soGi9- z+;3*Mq&m|`%yndt`!wr)7gimRMCT5fyAvZ_c$8&#^2{#oEp-FEf|S6nd3W#P&b?%b z1-}Sei=Bt4=BK=Cxq6iA_qg{q7Y}gfL0+vJFh$icgVuMe5um(~G-|l3NAMv5Sfy|f z&(?=^kkE6PLMF`k88_?!8obc0lF(v3<%%;|71@nI+9JhoV!@pZ7T4_kEL1>o?Rt`$ ztZHD2`#!0+y+*e|HG9&;zRA2Bxtgu&l( zhWZ+*P(R$n(>HT|6VKhwGq-W)ZtmDsX*U2%G9{V@t^2nz<_Q70+DPB?_*%9?ZsyelUSxw9D>7-S~@f+=8Y#@ZR>!ohqwtRbY#5uW2dB%;=Ed=U6N$ohLB zax4P$2H-e6|7M0uDxFSoAlXdT$(&}8^6Lg4XJ}P~@zQ9w=AFY%ZrBRj@qkd>@;k5Jn)HNeS++etP>5+jwy36w;ASlfqWV|MIxx@FsxlN zMn~&kCloWir@@-{G|*O9d}crX7BiZ>ZSaXVApL7$Zuj`+mNwT@K4Wdxyr=kbc_dq&KC%U7%ckY( z$h}V1TRjt;t)0tTkGz57rS4>ZYj>wuAm@vY=LJN*_c@YIsUKeV3ubMPXkoevW!;hw*{hrv#w^i!^o(} zp6OpnZ5X4z&+UJ5wS$Qh(Fmo#BB>2$3jQKtho_i2R2}C($|(LRNlK|zrBa^)&eRfh zm^f6R52Ms*_esg$hN==m)lOHw;KC*1Jx(7_K7+;E?Y8Jkn0|t(QBX#8z;EnZ9NsW? z3eJyO24hLi+s)6#kZVIm0dx z{yV1b;(DF)Q?8HVr?RUVU&epM_#xrsbeDe;Nz6|Xl4UTRx5z<)q@KN?Rr4V5fMatz zgH}I^var&ppz9k9XRC2x2s_j^me#4dte@%5L%?JrR}HT`QJh|gijxaB^IBQ+KCf@B zJEd`W13(_k>?sQeTk}>e4i21Py_*HGg?IT3i zypEH{Z%r4->t}0mK_RlP%SXTt5Owa#_Hpok5PlW<`aFY+qHotaRq$f4p)Jfqhod`& z1pmkx?=o<6))Pj_-vQNM8r->Y-z<2nHtlOm<5q>P~)ve_j8A#0}ry(Fly@zj!Yfd zprH5R-f~r|wx+=ttX`fy(pg?SGHc>{PR?v~fkB6vw^i1oRnUR zPS2#J{xq$=MTWfJ=1JoIpbGo}T=4^lH}K0GA{cpsRsT4h*_8%J{xYRrO^FEpTy^l0 z6zuz^&{I`>R7O=fS-(6|-^9FI)-6mfhbG}D$MstI0)G}NcJ)*Txz?E_m4dPbv=fU7 z+1<34b64vuOi)GmiGd73_0^NjWLy**2K#ML1yyvk=sIG}{e@$!d37g8TZ;(klfA7X zuXB)53lLp?n2Dasc))=Evzh3*47ia{{UGE0JR`2J(%-DAkz_n|Wmpxc(WRMv&dh8N zBo{={hQ1>*Iqa7bi*1Be2Y#;*?`YouS@+~Uu-z@#XN$jizb$feBUB0B3|QK;7(LughIvRT~%VOS~nkI z+*hMzz9~veC=B zZNUiN4QS;~@-f-re1vgOiiA)GvZxr21@Lzt3A@~ap0lx|CQhEvX5CLh^A7I)gu4I%C=T6SGy=D%D(*g|^bb|n&Dhi7 z?@(P>8ednzHA-Ef*flB*iPD8ci@zF2i->%taP0!6R_}B85o8qvJ1C8$pLg1@qto~6 zQy`Ge>&nM8{~Ves_J)$@iNb3|#cC8XOj>jI~kuL}xIUQtD`7qy8iB({D&M3UiG9C^8; zUUS`7NNFjZYaRJ_z@xquY?OG?a9-ju-1u$G`4R+1nLAU;&$!+u^qoMQygk=O%$Fln zq`&9r-z(=uDAROR68CXzi0u_`Y&pH3`|7g+XO-xYUfz8aYKAXn&RQdgnlh z4M^RJy~L6gu{%#`7yBh3_d=)Xhj!XY4avf3l0g8kh6i6^1iVY?;cVm7Ei>@^tikca zh|Pb9$jE|oO2ab|1G6s%#=Vp+jR$5b4$vw>-|guFcU^HI$fdj(`abz5N51Q*vt0M| zcu@Y949Yfm(28pn{J*%k5=s%?lzKB64RMyD(MXxmfR!)OU(py1_in5bA)9D4&Q|Ig za1^!IY8s9EO+t3x@>o1=md0X?#dFMVP-`t~Z#3^GS^vb)Wr|UAx~8581`j@R!w=m8=$O)})tXlw z0~NR<9|lH{_uArBN4*4w9v*qO+3IdveZ|$6yXmjE@@+yVT-<3xEqRFeqpkj7=XTll zTedjc3EmCUJ8d0_mu>Nut=@*JDE*%8SNUW3x9kK}ziNBqT%LW$k?`=7!8q89H9CnQF<$lklDR~i$E2gBud)(0vJGw~~)ly))yjlat>eLHJg_ryD zZuoOowF_8%Bg_;?-|1d(gQveE#X}OR!i@U1biN6iu2S+{o%w^V#YP!@pVUu4u)|E= zBb}QuOG?S#=D{h(~z)(Um)zM zs!6AviSl53wp$xa;m7e|q$Y+gHe^TJ8pb&R;+%qrtOD()0}10$4X8y9S}2hXSULq? zL}(Igb49rK`mhbPgYz9+501ZKOfvvz&`5A{tu3h`<66U^o$Y9Jhlb@ZJKP!OkIal{ z>(*Uix6|d1&W>6*R*z{M>x?-GfYyDV?Bd;S7na!b9I(Yene8ppH)D6pQ$aDPi&Ee( zpbx_)*m|CF)igB>0-*!dExNZ$t7pJIc0LWGb@L~lJjZAMf_HdA%DMc=v(E+9EfE|n zxW9Xj1Uq+^hc$YU2V_RQb0U8q0cI%4@k8DyQ+Anfel3 zu8_V6^X0M2Xz99w1(!W$s6nr z@>|r9`&c_x=Fr?=HE1xji~DrC9qaM@Wrjrs5CI{-lDL~JwoEL*p}^;)i=Ma0{!^&m z4RZ@!06xe*rZ5HE1Iq@~$0R&Rmd;76VTk)OBYhiwOaOmu!r<-*)!m$Pp{j1hDHz#t zWufuAhNf(iAieXU3b$$J#9&mZnU6&w*k!agZ_zOeJFNu}As@`-ZP^w83VAJ@Saw9- zBN5o0DpsvVc@v5Fdl~4cV|H?zVb}M?c0;AcKzOtRpdx6e6<9C)2Q77H!i4*4oF?!F zXTRoG=r?$YTTxhA9%xcC?iwM)^PvbitS#bSCTy`cgZg-vvcn988fGYuYho5{QJa19 zeiTY(kUOSZ9f)r>OL2ioZQY`X)NkG5;pduumuUr)rspa*q%}56{5c9*fa!Kcw$~}$ zUu5Kq8HMZ15LMJG8U1QTuW{FL9ln*3Z)Y^Fzt2E@{)deIV@9{BsqzJuK0WO`oyP3U z75k@U`WtC1Z*WE8g9x$*S084gzh{6G;1Ueey}UH1FVFd&1~mqvzLtf5%h-R&|AB| z$jXYFR2f+-bZA2kOU#74fHErQG22z$7?o!PKy?d>eqYea$Q=4dS05N#H4 z6$zY4Fx{v?`p|cW8s6xstju6vY%Z+UaGS#_0^S%|#5!W4kgf+}XlQH301lea0?&k@ znReNhg`U50xI1jj$kd2opnq<+hx1eXQPZ)seY_tvR*uPx*W)x~C2zPMRzQ3+XyJm1 zdIG)Y!A-amR^ka7Wu}I#$BIus$Wow{3jwsS6aNH$kO4>|&ICb292Q&%T+QwvY!4js z7*1e-_@rIlh=Uni+I&k`D*&0I0htZOqvRQd15`kV-ymPhZiI;l*{)V=(HRUbu*FSs zBX*PUV3XVowL2gu!z5M<{0kV{VsETQdh;f|afVgf?B#4A2kF*%&A{n{#H(~N%nrz@ zvOzYg7t+p7U?2zwZH5@x&%%0+4T&j+~3nZzWJ~Z0wO?(P=!@|&qc(|GN^7@Y9^|6N(n{aXwak(nAvE#wcRaeWZ=Atgl zpf3N0x;zSD`X0LsHWXdXnJ$wUOOV|fWV#H^e~|OV*$m!KHxgP;qY=<} zfY$>$fZIZDlfPNOSy%D~Bze?cHCH@M7rbT?wYm;+OZaxfU+yS@&J{Cj)gH*oTq!u*Xsd@Ervkoi=Q=&)_(hh9(GS zF3Ef$mn#w@-3IF4Q192x@zQPtH@af8ZaT?YRKy5FNrO4SYK3ZOru8Dcapgn4p{zgj zL0aGBL|UKs#ZP?pV_)6rdpG$d`pT;x=Qr{loITFpz#<%GEgB7168Pxy@wB8%0sc6t z_31; zlk*3BsCsq`DgDO`W86to<_QR-qpbv~qr@I58pR|?k;l>W1le^sE2 z-}U7$y!0!=`6kr9L>jTL`d=a;jsGMQ4rl*S{-=tsN+{zWZ2hiXri^R#C(8L0x+V1k zDM@z#fmvb;DXr!?>Q2vn-E-jb8g|3id0z+sM;N=tP?fbaX|O`%Chp#4L*P{R*z$f` z6(NDyD%TKUUj$aT%`=CJdUcrk*wugbR4vN?&GtT3h#3{uWT!)eA5)&MLPu*^H=y#wV0U;V=x9P8muA&Ml|0XiJo)BcU__D2r8gfDaPG zp?j6y26d9&;Gg87TJb@s-U|(q%c-IVkp{c4KH)x8mobVvFH~O-Gam)^9|CbYgN`El5Q3H1 z7K-yjc|iyr#ie0_Vn9q3nbJ9F^(f; zK?%o&z;T_xahu@HM8gYMgyTD)&co4EuM&>CKgMx82*s?k=&M_O?;E?r zanGn7kP8-%76nvRl;a7wOF^V$DtXqphnU+m0KZKb9ESzqoz#Z;9lgOhDTTCFm=qpn zNr3{6b9j#7l0~k0)(0`3yWLMjfO~xLA8urT*J3>PronBv{!XdiD*3ij7x<~O3D5n7 za2vLs%8!)BmeRiyo_o-j&wJ_Dg>ygQxr4+q;JNc*d-2?2b&cn~663kSdX`!OR^AoI8%)8|~V0>>vD23>G{FSg>#YvmNjEwwgj% z5X&~kf@ebJNwDAvFjmNC1+XAe`|{iWTP$b~z=Ey7f)AIlU;#+*Il_clg9+yWBRtMd z-od~*J;}`N^7wXfeA~;!4Kvr95yc;8Y4eib0q4o3hbXqi=~1})JyYO;P+TwZ=Geh{ zxtSyZ-v+BqBomHmz@9zTNI!7BLLTUOanG*zdqTv`TA%J|!gI}f-7^8t6n8w*GYA^- ztE}3go(~(eg4!Bx!2c%J(5Y2_r@KE{jm!Az91wE%TpUM1%;qb^Y@W#^{FvWOIe&=R zO^_N=zx(eHzxgxJZ4e3|49?$XF{3TsV&2~wG1}L_kd(=ZuQQ1qm^j@jbg}Nqi4ktk z*DwX6`YQ|$KjY&ufO>J(6qn`aBN* z$)1$n;2kV#WUU8Z&(OmOFI+*N2c;)$JEZ6KhA9X){&3&UwB<8p6W;gWKWtgoF*tdB zo5?Yx$gaiNN_wQT7tS?8wnISwVJd(`>^oDSP?2uYkWMEBml!zhsA|8;E)w65oecHh z`x~m8Wz&Jp&_v-h9X=Q)y21XSutg4;)e1XvTT`dsQG=FD7?~ascFV5gyH!_aw8D{> z{wT6kKFo}~;oTzCtwP@-O4{#fVH(Qsp9kvAAooaM?+h@lL|7h%&zE>25IY04D*$16DKN_K zNkB9pEP6euzQa!#4!v;}fp{DUcZi+Be*q5VASbm@?=`50h58zuy)Z6XgjqbFsdex@ z?@}Z1QqSwKN45@GapqQYr_ps+1Mc0TbiOYA8)O^g(}>I4q<_0iXw6NAryf`0sh>1_ z(!u-*#(u%&R{vuf5Wo51!r}^OY58|pxJzZ6yo{s5FrFwcOC{81|>f!aO z4!&c4!`?W83B$d#sM0Va!-q&Q%#UZ!v@W(mb3XM9Uwt9boT~)!)mQmqyU#B1)kmK9 z9?X=n-ir9@TVlTYKG2*_Yw2iJKxIXHJfQ>=2vG!fDtXuIot_Y92227V5P}HShdpg( z`8z$Nd}~G8Lo6v+z>dv3VYs)m>%E=@){VB|tN)IU8yAR0CR51gcOs6(EI^?W&{ow{7PkA~*k%^5eebW*;!a?oBbdX$4z7 z#gLoDfDwQVk(&Y(uVAa+vLy(_JGKKGO{9maMd~?Me6_zQ zj(3iOy$~QUFp0+m=6!=OZX-5(9lw;xJBYv_bx#Dw0h=9Eu-Oi=*)S4Ls$jC+vO1^4 zWD|LLC?+q?2qG_c_L7$caCBLD5joSiE10$H>u`LBn+&j=@N!w6$%1d>HPUN>vN&R2 z#(vEyd^S81$enoFyW}TbWi2}$yM`uT&&J=ts&L+54tsatpn?6RInLkXli!C_)oFWw z<2dVKf7yVI&!E2Qu#T0M%JJ#XgmU;#oKl4tvYPfvB-fL zAjcFj>-%EpRv@fHNF!ud4M;smih980-QU)P(WoeskEXwaNYNQqX5A6T)^&W6m73cr| znVB=E-E+?EZSUUgyRhs63riKH*$@k03mOer5|J2!CHPI$h>EBvqOrGtUD1do))-rC zi3MYCiHTi|z4!ln&H|e6_xJk0;GDhn+?hEu^R&fuJvo{YF!-` z)XX=@Wy`0%lq~AX&_qPB6Ob%#L=;JiaMZP;AHWKu#IG5Sxqma0Aj>g`V=|Lrc1-Vs zrd(Y%jjvamxS<@B%RAbMKUd-t6}&1{o4Z(e$J+8_(+8N1M)KVBxp;=H+{p2p?M(n2 z+Q*W2;RK`=+2tq)j>cXqRX+79uKZ|p6^=-F@M3X0_zVI&!^HN`*IF?H3_UaA5*PrP z=7v(MNmQ{o9ekU+#b9gFguLy(-4Y*|as2_-vS!zs5SoM|W?0{Xu2##Wb1d+6eL9K< zW2}k5#ctls`zd_(;?RWt!7-2oN0fjh%rIBH+_=~BMEAJdcFE;}`tH`XB!pmIa1oCb zfaqR4oR<&0eTuYZk8f({ zE^W@?)FDmcuEBfCk>~OBo%K#_hvX05mE%Z)m)@w>{xM)0x8T@;=k}=1{t-Ohnq#W< zFE8dI1ii(nqSyv&oezD&B}D4 z5WM}_*5|uA4AUerK{^(6#}}Fl?bfjrc5-00Rk z=s|i-G!p$lHw6&Mf&LPtPS+-P@R?Sp%k8wgIy-v@V+nP#eGbxt$@DUx=xir9F2~$j zC7v>@5v!nTNdB~0v!^vx>J^CortIwQ)W@_?Op9SmiEYi)u-=5apcx!<^ob1*U(}X5 z&aV7#9=?CtaXPq8yZ3_GC#QvdCH_e0Ci_`4($BdrRDjPxtz|-a?vv|B8VZKzTz!+R zuTlCsoEoT}!2ULl^ZClW{i+*Agi7t;1f5xDCqw-fDV-0Hm8*uLZov^i9YY4!Kp+V| z8?rr;IbFXsX7@}P(2UA-riX!0K!r!7F&J40P|}^a49##XT&9pavj?+M7K^0sef?GX zUE{Gcs-?fkcurHkpC>+XyqCU>kt2}@iN)L0ggfy@8+^aq3NCE+=>!5S{T1!$fs7?^?o?i|E?2vaH{Vud2bN~{C0J0ApF=qwpT>3;dicjhz`~Wc56@iSM;p@|V!!g663&DQ_@G4-TW!>cdJwOdR<>3JvcT-rOt=Vg(^>V5W)K!jr9CCykBIH~S4|4}lUr^VCyjVfm zBmnzBpzaNVG%azH?G;ELC|I+h&N_pOsod508&{4WV+dS?jlOyO37XNC8k z&|7#9dFo*nC|2mjnat`8!3=Mqx5A)xoYXoIbdlk9s`P$|K=-zCpNPXJ0B*%l+znHbBJsJhIa;h~_|tY5XtfL_mp6@s)m#CP)U#Vic5QtJmJ zd7+oN%meMm*E4MXEmb>HiE-yieBDZ71mi=>%*n2HohQ<*VBM=`NbW(Q&zY!CBWV&> z#%BK{oR@6M^7xpM`7TOb5_>bfS^j%@@58+PL0*5H*RPAr&BANfPL(}Q6C;Iw(iW!{ z3ilMe=GOM04Y#-y|0dCWR?hBuw0Oozfwy`Z_(d^9AjBzg77_0z3&yd2Y*)THtDzM7Q@oX7Kdts9whz0 z`06Uxe?LPKU>hh)+Xd8Xf8ndonb54i%d__CED1PErFvWF7lrej&_#UkaDvF;9i%vhZfd%q)~fuaHmnfIIs=YRBBR;|i=&!xRT#ySKnUkW}7 z)W-;695%9eY0kdFfxr<{5$ zr%p(F%hGDH^VhV;be#bY^HnKzb&7nyt<-4cy4-l0VcQ?%><@Er(#ZHqtyXJ&rPfzy zT}5u$;**^Ekjy-%E^n0CGLy;IRYja_x;GdIo44Hd=IbpP9+LRP&1v;|1g6?59ssp`+`ec#&Gt49Snl?8dIVp6=3sYhcp+Wq~Hwtx=sNTc; zS4Szud|%9@*5`!re_V9q0cMYtB!F7h+cr7rL>;H8yxpXhDrXdKmMNrS`&pQ(b72P_ zh!-9EI%VM7{R}yXL^5KGFes|=2TYMa+;;}cpYItuOEb|FMWrZY3d z!{`CShSR&wMak$Nx+9p~J#E$N5AWxd^hkTe2>elvMDa1j;H&WbnPb#wpv&m%O7)Gi z$5MI5-;ASU6E)tv?{jqV-uO-J38O(UoggNwNf}-&a{Ld+Vb~U=YJ(?RF`$-Sqt=SK z*6gbt5b>QjL%bZQPza9w6r7!znhge?kUJDTSaShnkFq%@OTQ&7cVam@xlE?Uk=d#E z1hLf#?eWVb7r?QMJ%Bkm@Ja~$4R#0V{7TP5@Hn}+El;`)ysl}EC_V5gIA=_LF8O~^ zkIv`x+yNV^CXQxgEvO@K01aVPiQ)1_Vcz`$CS_#YWj4Jz1t$3whHkfG1w~h8lbwG} z#e~$da;V8x;>QUun*?0ym81+;(^gRF)Ib_lTvAc(zDGhViIO$@&Cq(k(o#XN#Uw5f z{lX3SQQ7{q3=J6y3Qd%HOn9`)JtOUs6SD5VsQ7;@tHrju8P}sYp}PLri(L#8KAv=lTtULEHZ5ehWDI`eJ(mHcIEd&epSW38e@}B{Z6S<`7}Rw zb4A@!ktZwX0Yy^TcKQ^>T_RJ8xBgzETZTM5!k5W{lJ=c7bz6-*hgdw1f8?A1d)u-m zvE}WAjT>Tmw0N;Q+!!0AHTL6zJ~U&ehk+B?lKayPUUsVzn`3!g1LxXYw&ddhE;cu` zsn+8}hiW%*ug)&J69Q$G0({sr#O@wW5VwWBW+<4T&XH;aiATZQ`Ey#V*-Zzef4-k} zNxh0!+rGP;ez1&*b6%r=ej_3Lh()uh?34wwdYTxLlxn4Yo3Z$2UMXh8*6zo{?MF77 z7k5~z$;F4#A84x~l*rwYOW&N6Pv*QQNV-awA(`JwP6fE#Y>GDk5Kd!wcmk50pl>#* zBD*&MhY2&S$vJCX1CfN-hh(Lr2}CeyGbZ_HQ9|uztnpavY!XJg>|szq(t(lU_H%` zLs}e*^8_upO^EIyLf-8Xou(C6i=d2ZKXAQ+%r;e*`x=J4zN8VtAs>rX6hb#+_Nebv zvPaEXL5A$^Z;3{~b~Uso{YQygNgQO%j8xGnkQ2=wMItoKrom^%{int}3!0yk zjYODkQT~l8yh+(t8tVAC4Nbf715F!nmhE0Fnq^^`2v&%oGh5H85d*>@7XL|lwwDAc zGF;v-4JR5tS<#0h@Ia?uk0HMVfTtfqIBz)LT{I3O>4!x9aS$1X$i?DpWs)#rNHBI^ zA+XzTkk+>lrNWtLEEqg~36le04sOG0+r82r#-k#%(ao~d39o9#t{8s>YlNA?nuSau z*o+Dl8=81^f;C{8pCR#HI)>Pi>IAOfcbIoG5IjCdZg|!FzV%PLfVF_;P9|=Ex{Iac zY3uMj0un@JaOf2qerJjdHl&vW;SaPEM~ zdRY(vk=;_@W}LQ?(3zeC6#QtRj}rD=*;YGBRFfy+5~i1bw#c0-U>4eV$;*Yh!d!Ba zp6pIaE{RjmR9ZO`el2eD^~vRjB$waDT;3gy111s|2^fXY2Kd>V>756Z6A|f$e-dFi z-5291U+=PAN4HH;yu27GuZ0K*S$UY81U~iQF7o&Kol;rS~GJlcz z2c^44=5LX17E0YxFe`8N>;-ZHlg33ovbLtdP?882K+c}Y8n`scJ53#l)4y_L$;=F8V$T@0)nrq%%;`QwST|6|&-2C%Goy@mjs%?i#k(FXMM_0A%9OE03(msz!cP4cHk zLl^avnP}aO6fmIx-}H(%?iMd|Bjh8j+xtD21b_A%{5ZJkh^4|^AC$9@h-b^OpX}TW zAkH;&%h?OZiEgud&*VNgq9|}dR_FjBjBEX*rKY-y{&;J#kwa;95~H3!s*na98|WXD zCHb+DEBmrM5k@WKG!#uyr+DTmCKol$ap;V#xE4Msw^AwtUMZg}$uF- zntRy3YM=AOzV1E;SX1i+Z_xRNsh!ls2x3oV`<@>MWD>b*XL5`vhBC#S>IeNYH*_Pq z|GlJ9lZhA{VNaA>8d8_TXc=a>D@fo*_AE+7^l64bWM*4*O-KYNzgSMPHNrQhmA zvjExRkJVHlAl5%pohH=62&>98!EFp$O%r}{us&VjawP>HWhB7gh8H@kTrV$+u)MCH zaSx!FTh=y^R)PAOCI81z)UZD*N?aj3_&K61KPR}-W6dSb_BUZDw6{V<39#_+idF4i zC~N`;)>|gx-bQ--=tx@p2H`MK@unj(0&jMHWA`E6V0vv~x2sKneVMHI$rmXW^RFmQ zy6@yVx=zC*>?-`>r+<&?6z_-u1_u^O?0B&sddE_hYk{nnwM{sFkAM=qR^|07jo8>ele?QhL&cF}NRZgk?>G@J}ugikBxRD$66x zTNEcV20`EcC}aB;*Z|zB-!Os}#tkLwbXj;nh=+v>;odshmAFZ0tk{!Zi(eJ#EZ1#> zFOB*>a5WJfBC%YJ;Igp`S6=m{Jy3&?aI4Hr_@lmZ~;_1Ql<4 z@?#4Shh8q@C8G4M;N$bq*KbvP;aSqR`RIL;9z@q8o1A4LM5LtDU`?Tn*ls5M4bMOh znb>T1Kw#SeXV?V2MKDp%AbW2+dscaKwHD~fF6BRNLyq~KD6$C))7kZJ> z0LF8JTPWd&yz^%0ndy`+26k~DwXe4i{u@_r$BM`iQ1qDNq^n}^p*m5PE;~9qHa&u^ zX~5HQ4=z1!p26pRB4AvRgyYT?ey7>I2JYh)PMaoe39(s*Q8SDx88*@^!zD|r@T5Sc zw@RI7Cx6n(`T2p@-ciZ3pRQD6t$lBhhvyC}99}(a-^2A`Gda}ZoiLvF9CjoH<$gLh znls~Y_poC$k=d_z$)Zht*nCw#%KQDmblv#I0hbFyP|ZlBI&$8L!2 z-@sh4tkVSO!==($Xk1uB+_Axl0xhyp_UmRS>+rvjK(w{~qi`F&-CVv4D|U{`MOC#g zKJb|w%9MlPSCr_{Md;6z@UfkleL_zB_uVQ#@yYw#{VSODOf){PFhE^Rb+9=m=(wm!9|q=_T&+$ zbCF3V`VQ)rmhmp1ATIqq1KYY}OPXa5htF#~3@|1*4W*W6&D+JgUKRoZ{|+Q|%^O=d z$+WNuR%g?azN^IW(3*E2`yE!xaI-0K=8#qsTZDsYH6PKWq2)2i*q>xJS2H}|ar%s0sWOzwk2cyIY*Q})2IOYn8MP%fn6 zj45F?Isb%LTIIq0le+|qLA7+k>Nz zm}$cf_($Eh22WQ9pK>sG;s7g2=niqC8{@JnQB(PN7pZcbi|a0qz3>Iwe$^JQ7&r5q z_QaC-&dVI_i;vJjAw2q0d0!~W`5Ps_Ro>w!ns++k{f;=*&z$ZD|G;-tlexpXHcXMb zlC}4Vg!nI(=Sei|Cc*~)GHhEX39*OVQyzrF-c%2m%q`{K8+M(v=mcbK8-O5As!liK zY)*Wkz_A4f9&F}3(c$E;ALQgD`kd#OlG-jVMIw`fSZ*AucP4)kb-jx9N?-YS(Xdrj zG!|+d1mi_hx<08T(=6J0TD>-z9I1}5U36tSjgmC^IP8JRnMr{)Z};xf5Z%2MF5DeR z#mWo`tV>d@1{+M*Gy)uTgd_FB?nQ2YvN`-xUnL%Mb4KGdF#&fS#5pNP`K^ zBfJxe{oNCe?XB>e?H~xSF!7CYb_dFhKj^wtVD#7GOI|G&9|XD2v4=Xw_#sSI zxqAaVng0&!uNnqLIl)YlJ7nLjvZGPUiD=N1Dk-M3_){u#Zz?1u3v~y4%iDhDU7ynC z8*c4dg1DB|Nj>iAX!Qs(?%XfAuSZFqq|HihrmKShQ4B&`FYCr2=Z}Lc&4DIpr%Ye^ z4g_I#I5)}oP8MDueo2=P4O<}^x&?B%PVTYs%(#E|S|29@>p}3i@u$y8cDJ9~V~tgJ zDDW9{uIgR(BjKI4xXb>|zLUbN^Nte>sy*xw3;dq)lyl`Fm4g>8X#2%(-4$-=*4)r$ zjuAta@NGM6$|q-ZJ`-W}4-F>yGZPn6FWB(dFVgYEQpXS~rvu9sTT~`& zViQfrzRNk{sC3(sbQ=VFE`iwSC?X^I#j$=bG83y_%03*ahoa^uBlQIAdA)z5N_v#Q zHDU+WLc+^N{uxWL5x!hgz=KG}#c33ud*B1YqqZhCisBt<{aWaJ2w{l0JH&jyH|(JL zoOU|Gj##`M8uPi^n9u(VeT0*?+fMQbIj<>Y{sp2U&b=OsX9A#Jw)b+7xecyF__|~t z>%i>k4&JKj#a;$k^<$)~q3Llli{e31ql}+Q+n=VzN3asHe{~oY?CA_pf*_s!rW9Ne zm5;z898h~6O}Mxq;<`pijE9(2{wsNh&E>ulZV%|)lsDbIL3k%AUdrgP#+Dq$)?(_q zrWrioV|2c(&xI4tT|^G_Zeb;*!>x&QG;@qdEkW8~+U3b;3r(c77*vYoLmS3Ozc#H2 zp9Wh(u2po5XwNjAE$W{^r`ajG8jX$Gt($7uAO)%|XlbOt*1TcXU2xOsOkmXE0V!WG zG89akk)Z*#YWdXo)>K=kb$b@tDMk(|znjykyV6cNF8o0D?qt5#3_%d|T;o|Yoh*pQ z#7XX2vkP1-wjd~npmR9z%WOU*5n%(*{LP1LL7@OPgzG7gPOtc>j|r2TbDe3f!Ie~}`I-F`j_hcsOt+V4^;CUiKz9rCjOa7=1N zkUc7`m!-uS`TE)U5GfO1kk?n_x4S%F|2U7cm%AS_xyf*6lJgidJX1({-fQ_}|0(p; zJpU{p+f19&nS~kW_)G{LJ%vML@lbG$P&%b$?lgM3Ua2?^ZN{?Z*!#$Z@&)N0=#