{"endtime":"2022-05-25T21:16:53.017048Z","timestamp":"2022-05-25T21:16:53.017048Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":217,"vxlan_id":0}
{"endtime":"2022-05-25T21:16:50.069892Z","timestamp":"2022-05-25T21:16:50.069892Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":176,"vxlan_id":0}
{"endtime":"2022-05-25T21:16:50.069892Z","timestamp":"2022-05-25T21:16:50.069892Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":177,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:16:45.602095+0000","flow_id":2065117394894815,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":54573,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:15:52.225916Z","timestamp":"2022-05-25T21:15:52.225916Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":281,"vxlan_id":0}
{"endtime":"2022-05-25T21:15:50.049776Z","timestamp":"2022-05-25T21:15:50.049776Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":227,"vxlan_id":0}
{"endtime":"2022-05-25T21:15:50.049776Z","timestamp":"2022-05-25T21:15:50.049776Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":203,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:15:45.591528+0000","flow_id":1745301241200456,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":54560,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:14:52.187558Z","timestamp":"2022-05-25T21:14:52.187558Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"endtime":"2022-05-25T21:14:50.029537Z","timestamp":"2022-05-25T21:14:50.029537Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":0}
{"endtime":"2022-05-25T21:14:50.029537Z","timestamp":"2022-05-25T21:14:50.029537Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":173,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:14:45.578271+0000","flow_id":360191464164206,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53426,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:13:52.153086Z","timestamp":"2022-05-25T21:13:52.153086Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":257,"vxlan_id":0}
{"endtime":"2022-05-25T21:13:50.009616Z","timestamp":"2022-05-25T21:13:50.009616Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":271,"vxlan_id":0}
{"endtime":"2022-05-25T21:13:50.009616Z","timestamp":"2022-05-25T21:13:50.009616Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":184,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:13:45.560477+0000","flow_id":1608369085963747,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53410,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:12:52.118313Z","timestamp":"2022-05-25T21:12:52.118313Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":298,"vxlan_id":0}
{"endtime":"2022-05-25T21:12:49.237409Z","timestamp":"2022-05-25T21:12:49.237409Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"endtime":"2022-05-25T21:12:49.237409Z","timestamp":"2022-05-25T21:12:49.237409Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:12:45.532950+0000","flow_id":1125374239825922,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53398,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:11:52.077886Z","timestamp":"2022-05-25T21:11:52.077886Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":292,"vxlan_id":0}
{"endtime":"2022-05-25T21:11:49.215958Z","timestamp":"2022-05-25T21:11:49.215958Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":243,"vxlan_id":0}
{"endtime":"2022-05-25T21:11:49.215958Z","timestamp":"2022-05-25T21:11:49.215958Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":196,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:11:45.496985+0000","flow_id":1583385253334508,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53384,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:10:52.047043Z","timestamp":"2022-05-25T21:10:52.047043Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":281,"vxlan_id":0}
{"endtime":"2022-05-25T21:10:49.195735Z","timestamp":"2022-05-25T21:10:49.195735Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":203,"vxlan_id":0}
{"endtime":"2022-05-25T21:10:49.195735Z","timestamp":"2022-05-25T21:10:49.195735Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":603,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:10:45.458948+0000","flow_id":1870546762856872,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53369,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T21:09:52.013443Z","timestamp":"2022-05-25T21:09:52.013443Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":296,"vxlan_id":0}
{"endtime":"2022-05-25T21:09:49.175273Z","timestamp":"2022-05-25T21:09:49.175273Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":216,"vxlan_id":0}
{"endtime":"2022-05-25T21:09:49.175273Z","timestamp":"2022-05-25T21:09:49.175273Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:09:45.453462+0000","flow_id":116202942343603,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53353,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:08:51.215978Z","timestamp":"2022-05-25T21:08:51.215978Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":0}
{"endtime":"2022-05-25T21:08:49.156049Z","timestamp":"2022-05-25T21:08:49.156049Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":176,"vxlan_id":0}
{"endtime":"2022-05-25T21:08:49.156049Z","timestamp":"2022-05-25T21:08:49.156049Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":486,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:08:45.432784+0000","flow_id":855070457288812,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53337,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:07:51.181433Z","timestamp":"2022-05-25T21:07:51.181433Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":257,"vxlan_id":0}
{"endtime":"2022-05-25T21:07:49.135177Z","timestamp":"2022-05-25T21:07:49.135177Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":0}
{"endtime":"2022-05-25T21:07:49.135177Z","timestamp":"2022-05-25T21:07:49.135177Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:07:45.393398+0000","flow_id":1103594441013219,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53324,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T21:06:51.134869Z","timestamp":"2022-05-25T21:06:51.134869Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"endtime":"2022-05-25T21:06:49.115733Z","timestamp":"2022-05-25T21:06:49.115733Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":222,"vxlan_id":0}
{"endtime":"2022-05-25T21:06:49.115733Z","timestamp":"2022-05-25T21:06:49.115733Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":179,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:06:45.384375+0000","flow_id":650299293684906,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53311,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:05:51.100569Z","timestamp":"2022-05-25T21:05:51.100569Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":286,"vxlan_id":0}
{"endtime":"2022-05-25T21:05:49.089647Z","timestamp":"2022-05-25T21:05:49.089647Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"endtime":"2022-05-25T21:05:49.089647Z","timestamp":"2022-05-25T21:05:49.089647Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":180,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:05:45.370840+0000","flow_id":1527679503917491,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53295,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:04:51.062713Z","timestamp":"2022-05-25T21:04:51.062713Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":334,"vxlan_id":0}
{"endtime":"2022-05-25T21:04:49.070090Z","timestamp":"2022-05-25T21:04:49.070090Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":0}
{"endtime":"2022-05-25T21:04:49.070090Z","timestamp":"2022-05-25T21:04:49.070090Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":191,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:04:45.339057+0000","flow_id":149415904798598,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53276,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:03:51.026960Z","timestamp":"2022-05-25T21:03:51.026960Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T21:03:49.050553Z","timestamp":"2022-05-25T21:03:49.050553Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":212,"vxlan_id":0}
{"endtime":"2022-05-25T21:03:49.050553Z","timestamp":"2022-05-25T21:03:49.050553Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":169,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:03:45.323244+0000","flow_id":1692855348356936,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53261,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:02:50.241085Z","timestamp":"2022-05-25T21:02:50.241085Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":247,"vxlan_id":0}
{"endtime":"2022-05-25T21:02:49.030338Z","timestamp":"2022-05-25T21:02:49.030338Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":0}
{"endtime":"2022-05-25T21:02:49.030338Z","timestamp":"2022-05-25T21:02:49.030338Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":176,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:02:45.315644+0000","flow_id":1176759189227875,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53248,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:01:50.202522Z","timestamp":"2022-05-25T21:01:50.202522Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":320,"vxlan_id":0}
{"endtime":"2022-05-25T21:01:49.010713Z","timestamp":"2022-05-25T21:01:49.010713Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":201,"vxlan_id":0}
{"endtime":"2022-05-25T21:01:49.010713Z","timestamp":"2022-05-25T21:01:49.010713Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:01:45.303405+0000","flow_id":877911065845659,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53236,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T21:00:50.166691Z","timestamp":"2022-05-25T21:00:50.166691Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":299,"vxlan_id":0}
{"endtime":"2022-05-25T21:00:48.225709Z","timestamp":"2022-05-25T21:00:48.225709Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":262,"vxlan_id":0}
{"endtime":"2022-05-25T21:00:48.225709Z","timestamp":"2022-05-25T21:00:48.225709Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":196,"vxlan_id":2467405}
{"timestamp":"2022-05-25T21:00:45.273497+0000","flow_id":424053277795499,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53221,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:59:50.130772Z","timestamp":"2022-05-25T20:59:50.130772Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"endtime":"2022-05-25T20:59:48.205380Z","timestamp":"2022-05-25T20:59:48.205380Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"endtime":"2022-05-25T20:59:48.205380Z","timestamp":"2022-05-25T20:59:48.205380Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:59:45.271789+0000","flow_id":308114926673608,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53204,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:58:50.092989Z","timestamp":"2022-05-25T20:58:50.092989Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":285,"vxlan_id":0}
{"endtime":"2022-05-25T20:58:48.186193Z","timestamp":"2022-05-25T20:58:48.186193Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":241,"vxlan_id":0}
{"endtime":"2022-05-25T20:58:48.186193Z","timestamp":"2022-05-25T20:58:48.186193Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":156,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:58:45.239849+0000","flow_id":71376325404819,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53189,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:57:50.056967Z","timestamp":"2022-05-25T20:57:50.056967Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":0}
{"endtime":"2022-05-25T20:57:48.164987Z","timestamp":"2022-05-25T20:57:48.164987Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":214,"vxlan_id":0}
{"endtime":"2022-05-25T20:57:48.164987Z","timestamp":"2022-05-25T20:57:48.164987Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":159,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:57:45.219605+0000","flow_id":1822030761119177,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53173,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:56:50.025676Z","timestamp":"2022-05-25T20:56:50.025676Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":241,"vxlan_id":0}
{"endtime":"2022-05-25T20:56:48.144994Z","timestamp":"2022-05-25T20:56:48.144994Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":218,"vxlan_id":0}
{"endtime":"2022-05-25T20:56:48.144994Z","timestamp":"2022-05-25T20:56:48.144994Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":638,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:56:45.212559+0000","flow_id":1037786908800704,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53160,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:55:49.225258Z","timestamp":"2022-05-25T20:55:49.225258Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":251,"vxlan_id":0}
{"endtime":"2022-05-25T20:55:48.124453Z","timestamp":"2022-05-25T20:55:48.124453Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"endtime":"2022-05-25T20:55:48.124453Z","timestamp":"2022-05-25T20:55:48.124453Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2580,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:55:45.197764+0000","flow_id":366169983926949,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53147,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:54:49.187992Z","timestamp":"2022-05-25T20:54:49.187992Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":305,"vxlan_id":0}
{"endtime":"2022-05-25T20:54:48.104090Z","timestamp":"2022-05-25T20:54:48.104090Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T20:54:48.104090Z","timestamp":"2022-05-25T20:54:48.104090Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":311,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:54:45.171368+0000","flow_id":644170328149094,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53129,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:53:49.149372Z","timestamp":"2022-05-25T20:53:49.149372Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":239,"vxlan_id":0}
{"endtime":"2022-05-25T20:53:48.083646Z","timestamp":"2022-05-25T20:53:48.083646Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T20:53:48.083646Z","timestamp":"2022-05-25T20:53:48.083646Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2487,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:53:45.159066+0000","flow_id":1451448082195662,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53112,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:52:49.115811Z","timestamp":"2022-05-25T20:52:49.115811Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":242,"vxlan_id":0}
{"endtime":"2022-05-25T20:52:48.063823Z","timestamp":"2022-05-25T20:52:48.063823Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":0}
{"endtime":"2022-05-25T20:52:48.063823Z","timestamp":"2022-05-25T20:52:48.063823Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":1367,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:52:45.152947+0000","flow_id":2153645166379200,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53099,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:51:49.078402Z","timestamp":"2022-05-25T20:51:49.078402Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":559,"vxlan_id":0}
{"endtime":"2022-05-25T20:51:48.044280Z","timestamp":"2022-05-25T20:51:48.044280Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":216,"vxlan_id":0}
{"endtime":"2022-05-25T20:51:48.044280Z","timestamp":"2022-05-25T20:51:48.044280Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":175,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:51:45.132929+0000","flow_id":1525145418201959,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53086,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:50:49.041519Z","timestamp":"2022-05-25T20:50:49.041519Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":308,"vxlan_id":0}
{"endtime":"2022-05-25T20:50:48.024679Z","timestamp":"2022-05-25T20:50:48.024679Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":217,"vxlan_id":0}
{"endtime":"2022-05-25T20:50:48.024679Z","timestamp":"2022-05-25T20:50:48.024679Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":158,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:50:45.131646+0000","flow_id":555148525276776,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53074,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:49:48.248968Z","timestamp":"2022-05-25T20:49:48.248968Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":247,"vxlan_id":0}
{"endtime":"2022-05-25T20:49:48.005495Z","timestamp":"2022-05-25T20:49:48.005495Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":0}
{"endtime":"2022-05-25T20:49:48.005495Z","timestamp":"2022-05-25T20:49:48.005495Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:49:45.083561+0000","flow_id":2062656272416520,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53054,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:48:48.213151Z","timestamp":"2022-05-25T20:48:48.213151Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":252,"vxlan_id":0}
{"endtime":"2022-05-25T20:48:47.234490Z","timestamp":"2022-05-25T20:48:47.234490Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":260,"vxlan_id":0}
{"endtime":"2022-05-25T20:48:47.234490Z","timestamp":"2022-05-25T20:48:47.234490Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":1107,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:48:45.065026+0000","flow_id":1108520693770304,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53038,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:47:48.178819Z","timestamp":"2022-05-25T20:47:48.178819Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":234,"vxlan_id":0}
{"endtime":"2022-05-25T20:47:47.214405Z","timestamp":"2022-05-25T20:47:47.214405Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":191,"vxlan_id":0}
{"endtime":"2022-05-25T20:47:47.214405Z","timestamp":"2022-05-25T20:47:47.214405Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":166,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:47:45.038839+0000","flow_id":1225468354333607,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53025,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:46:48.144942Z","timestamp":"2022-05-25T20:46:48.144942Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":219,"vxlan_id":0}
{"endtime":"2022-05-25T20:46:47.185125Z","timestamp":"2022-05-25T20:46:47.185125Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":791,"vxlan_id":0}
{"endtime":"2022-05-25T20:46:47.185125Z","timestamp":"2022-05-25T20:46:47.185125Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:46:45.032001+0000","flow_id":1645842569459121,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":53012,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:45:48.114943Z","timestamp":"2022-05-25T20:45:48.114943Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":0}
{"endtime":"2022-05-25T20:45:47.157623Z","timestamp":"2022-05-25T20:45:47.157623Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"endtime":"2022-05-25T20:45:47.157623Z","timestamp":"2022-05-25T20:45:47.157623Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":136,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:45:45.019924+0000","flow_id":1235806332723113,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52998,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:44:48.079524Z","timestamp":"2022-05-25T20:44:48.079524Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":244,"vxlan_id":0}
{"endtime":"2022-05-25T20:44:47.134067Z","timestamp":"2022-05-25T20:44:47.134067Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"endtime":"2022-05-25T20:44:47.134067Z","timestamp":"2022-05-25T20:44:47.134067Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:44:45.006182+0000","flow_id":23453025234766,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55897,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:43:48.047115Z","timestamp":"2022-05-25T20:43:48.047115Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":270,"vxlan_id":0}
{"endtime":"2022-05-25T20:43:47.114295Z","timestamp":"2022-05-25T20:43:47.114295Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":212,"vxlan_id":0}
{"endtime":"2022-05-25T20:43:47.114295Z","timestamp":"2022-05-25T20:43:47.114295Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":234,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:43:44.969427+0000","flow_id":591299237429987,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55880,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:42:48.010971Z","timestamp":"2022-05-25T20:42:48.010971Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":291,"vxlan_id":0}
{"endtime":"2022-05-25T20:42:47.094140Z","timestamp":"2022-05-25T20:42:47.094140Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":0}
{"endtime":"2022-05-25T20:42:47.094140Z","timestamp":"2022-05-25T20:42:47.094140Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:42:44.952132+0000","flow_id":1160240666257309,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55867,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:41:47.223877Z","timestamp":"2022-05-25T20:41:47.223877Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":283,"vxlan_id":0}
{"endtime":"2022-05-25T20:41:47.074987Z","timestamp":"2022-05-25T20:41:47.074987Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"endtime":"2022-05-25T20:41:47.074987Z","timestamp":"2022-05-25T20:41:47.074987Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":183,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:41:44.919612+0000","flow_id":145116551971632,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55855,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:40:47.190975Z","timestamp":"2022-05-25T20:40:47.190975Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"endtime":"2022-05-25T20:40:47.053490Z","timestamp":"2022-05-25T20:40:47.053490Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":207,"vxlan_id":0}
{"endtime":"2022-05-25T20:40:47.053490Z","timestamp":"2022-05-25T20:40:47.053490Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":1334,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:40:44.911688+0000","flow_id":747356862324618,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55841,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:39:47.158515Z","timestamp":"2022-05-25T20:39:47.158515Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T20:39:47.034364Z","timestamp":"2022-05-25T20:39:47.034364Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":225,"vxlan_id":0}
{"endtime":"2022-05-25T20:39:47.034364Z","timestamp":"2022-05-25T20:39:47.034364Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":175,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:39:44.885169+0000","flow_id":1586670777431029,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55824,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:38:47.123966Z","timestamp":"2022-05-25T20:38:47.123966Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":268,"vxlan_id":0}
{"endtime":"2022-05-25T20:38:47.014990Z","timestamp":"2022-05-25T20:38:47.014990Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":278,"vxlan_id":0}
{"endtime":"2022-05-25T20:38:47.014990Z","timestamp":"2022-05-25T20:38:47.014990Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2886,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:38:44.883579+0000","flow_id":1944072182068211,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55807,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:37:47.089912Z","timestamp":"2022-05-25T20:37:47.089912Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"endtime":"2022-05-25T20:37:46.245435Z","timestamp":"2022-05-25T20:37:46.245435Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"endtime":"2022-05-25T20:37:46.245435Z","timestamp":"2022-05-25T20:37:46.245435Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":146,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:37:44.876269+0000","flow_id":1738639597391602,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55794,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:36:47.055119Z","timestamp":"2022-05-25T20:36:47.055119Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":0}
{"endtime":"2022-05-25T20:36:46.225352Z","timestamp":"2022-05-25T20:36:46.225352Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":236,"vxlan_id":0}
{"endtime":"2022-05-25T20:36:46.225352Z","timestamp":"2022-05-25T20:36:46.225352Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":809,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:36:44.863426+0000","flow_id":1327001337865816,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55781,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:35:47.021931Z","timestamp":"2022-05-25T20:35:47.021931Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":327,"vxlan_id":0}
{"endtime":"2022-05-25T20:35:46.204044Z","timestamp":"2022-05-25T20:35:46.204044Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":205,"vxlan_id":0}
{"endtime":"2022-05-25T20:35:46.204044Z","timestamp":"2022-05-25T20:35:46.204044Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":193,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:35:44.857361+0000","flow_id":2043174245632765,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55769,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:34:46.228850Z","timestamp":"2022-05-25T20:34:46.228850Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":271,"vxlan_id":0}
{"endtime":"2022-05-25T20:34:46.182986Z","timestamp":"2022-05-25T20:34:46.182986Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"endtime":"2022-05-25T20:34:46.182986Z","timestamp":"2022-05-25T20:34:46.182986Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":191,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:34:44.843374+0000","flow_id":277637740400781,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55752,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:33:46.197450Z","timestamp":"2022-05-25T20:33:46.197450Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"endtime":"2022-05-25T20:33:46.162029Z","timestamp":"2022-05-25T20:33:46.162029Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":246,"vxlan_id":0}
{"endtime":"2022-05-25T20:33:46.162029Z","timestamp":"2022-05-25T20:33:46.162029Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:33:44.814706+0000","flow_id":579247519837884,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55736,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:32:46.160341Z","timestamp":"2022-05-25T20:32:46.160341Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":292,"vxlan_id":0}
{"endtime":"2022-05-25T20:32:46.142092Z","timestamp":"2022-05-25T20:32:46.142092Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":216,"vxlan_id":0}
{"endtime":"2022-05-25T20:32:46.142092Z","timestamp":"2022-05-25T20:32:46.142092Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:32:44.791962+0000","flow_id":1119644596096675,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55722,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:31:46.128294Z","timestamp":"2022-05-25T20:31:46.128294Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":287,"vxlan_id":0}
{"endtime":"2022-05-25T20:31:46.122555Z","timestamp":"2022-05-25T20:31:46.122555Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":232,"vxlan_id":0}
{"endtime":"2022-05-25T20:31:46.122555Z","timestamp":"2022-05-25T20:31:46.122555Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":208,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:31:44.761302+0000","flow_id":2076481701320261,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55706,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:30:46.102558Z","timestamp":"2022-05-25T20:30:46.102558Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":0}
{"endtime":"2022-05-25T20:30:46.102558Z","timestamp":"2022-05-25T20:30:46.102558Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":1554,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:30:46.099873Z","timestamp":"2022-05-25T20:30:46.099873Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":261,"vxlan_id":0}
{"timestamp":"2022-05-25T20:30:44.754391+0000","flow_id":2120689795758976,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55692,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:29:46.083764Z","timestamp":"2022-05-25T20:29:46.083764Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":0}
{"endtime":"2022-05-25T20:29:46.083764Z","timestamp":"2022-05-25T20:29:46.083764Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:29:46.068468Z","timestamp":"2022-05-25T20:29:46.068468Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":288,"vxlan_id":0}
{"timestamp":"2022-05-25T20:29:44.731895+0000","flow_id":59453382073802,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55675,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:28:46.063358Z","timestamp":"2022-05-25T20:28:46.063358Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":233,"vxlan_id":0}
{"endtime":"2022-05-25T20:28:46.063358Z","timestamp":"2022-05-25T20:28:46.063358Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":170,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:28:46.032348Z","timestamp":"2022-05-25T20:28:46.032348Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":238,"vxlan_id":0}
{"timestamp":"2022-05-25T20:28:44.725208+0000","flow_id":778581227342169,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55660,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:27:46.044277Z","timestamp":"2022-05-25T20:27:46.044277Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":199,"vxlan_id":0}
{"endtime":"2022-05-25T20:27:46.044277Z","timestamp":"2022-05-25T20:27:46.044277Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:27:45.248326Z","timestamp":"2022-05-25T20:27:45.248326Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":283,"vxlan_id":0}
{"timestamp":"2022-05-25T20:27:44.714230+0000","flow_id":556905076416148,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55645,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:26:46.025572Z","timestamp":"2022-05-25T20:26:46.025572Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"endtime":"2022-05-25T20:26:46.025572Z","timestamp":"2022-05-25T20:26:46.025572Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:26:45.211562Z","timestamp":"2022-05-25T20:26:45.211562Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":233,"vxlan_id":0}
{"timestamp":"2022-05-25T20:26:44.708509+0000","flow_id":1940636161066973,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55632,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:25:45.249967Z","timestamp":"2022-05-25T20:25:45.249967Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"endtime":"2022-05-25T20:25:45.249967Z","timestamp":"2022-05-25T20:25:45.249967Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":137,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:25:45.176996Z","timestamp":"2022-05-25T20:25:45.176996Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":358,"vxlan_id":0}
{"timestamp":"2022-05-25T20:25:44.693548+0000","flow_id":203820102079473,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55619,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:24:45.230552Z","timestamp":"2022-05-25T20:24:45.230552Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":282,"vxlan_id":0}
{"endtime":"2022-05-25T20:24:45.230552Z","timestamp":"2022-05-25T20:24:45.230552Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":233,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:24:45.141273Z","timestamp":"2022-05-25T20:24:45.141273Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":239,"vxlan_id":0}
{"timestamp":"2022-05-25T20:24:44.661573+0000","flow_id":2179586658719376,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55602,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:23:45.212060Z","timestamp":"2022-05-25T20:23:45.212060Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":271,"vxlan_id":0}
{"endtime":"2022-05-25T20:23:45.212060Z","timestamp":"2022-05-25T20:23:45.212060Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:23:45.107319Z","timestamp":"2022-05-25T20:23:45.107319Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":305,"vxlan_id":0}
{"timestamp":"2022-05-25T20:23:44.639509+0000","flow_id":1238829903166110,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55587,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:22:45.191308Z","timestamp":"2022-05-25T20:22:45.191308Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":0}
{"endtime":"2022-05-25T20:22:45.191308Z","timestamp":"2022-05-25T20:22:45.191308Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":169,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:22:45.073968Z","timestamp":"2022-05-25T20:22:45.073968Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":250,"vxlan_id":0}
{"timestamp":"2022-05-25T20:22:44.631912+0000","flow_id":1447741403456177,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55574,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:21:45.172858Z","timestamp":"2022-05-25T20:21:45.172858Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":205,"vxlan_id":0}
{"endtime":"2022-05-25T20:21:45.172858Z","timestamp":"2022-05-25T20:21:45.172858Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":168,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:21:45.037188Z","timestamp":"2022-05-25T20:21:45.037188Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":296,"vxlan_id":0}
{"timestamp":"2022-05-25T20:21:44.592004+0000","flow_id":1421374595268844,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55559,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:20:45.152117Z","timestamp":"2022-05-25T20:20:45.152117Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"endtime":"2022-05-25T20:20:45.152117Z","timestamp":"2022-05-25T20:20:45.152117Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":3128,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:20:45.004232Z","timestamp":"2022-05-25T20:20:45.004232Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":280,"vxlan_id":0}
{"timestamp":"2022-05-25T20:20:44.586029+0000","flow_id":705510917325559,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55546,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:19:45.127293Z","timestamp":"2022-05-25T20:19:45.127293Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":237,"vxlan_id":0}
{"endtime":"2022-05-25T20:19:45.127293Z","timestamp":"2022-05-25T20:19:45.127293Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":501,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:19:44.569832+0000","flow_id":419715199570555,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55527,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:19:44.217481Z","timestamp":"2022-05-25T20:19:44.217481Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":278,"vxlan_id":0}
{"endtime":"2022-05-25T20:18:45.108676Z","timestamp":"2022-05-25T20:18:45.108676Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"endtime":"2022-05-25T20:18:45.108676Z","timestamp":"2022-05-25T20:18:45.108676Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":176,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:18:44.547920+0000","flow_id":1703300531769487,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55512,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:18:44.185456Z","timestamp":"2022-05-25T20:18:44.185456Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":329,"vxlan_id":0}
{"endtime":"2022-05-25T20:17:45.091662Z","timestamp":"2022-05-25T20:17:45.091662Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":190,"vxlan_id":0}
{"endtime":"2022-05-25T20:17:45.091662Z","timestamp":"2022-05-25T20:17:45.091662Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":181,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:17:44.546049+0000","flow_id":1999051975839688,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55498,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:17:44.151192Z","timestamp":"2022-05-25T20:17:44.151192Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"endtime":"2022-05-25T20:16:45.067612Z","timestamp":"2022-05-25T20:16:45.067612Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":219,"vxlan_id":0}
{"endtime":"2022-05-25T20:16:45.067612Z","timestamp":"2022-05-25T20:16:45.067612Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:16:44.530211+0000","flow_id":633282436534145,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55484,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T20:16:44.117084Z","timestamp":"2022-05-25T20:16:44.117084Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T20:15:45.046127Z","timestamp":"2022-05-25T20:15:45.046127Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T20:15:45.046127Z","timestamp":"2022-05-25T20:15:45.046127Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:15:44.527084+0000","flow_id":1979900708783029,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55470,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:15:44.082717Z","timestamp":"2022-05-25T20:15:44.082717Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":281,"vxlan_id":0}
{"endtime":"2022-05-25T20:14:45.018887Z","timestamp":"2022-05-25T20:14:45.018887Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":172,"vxlan_id":0}
{"endtime":"2022-05-25T20:14:45.018887Z","timestamp":"2022-05-25T20:14:45.018887Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":2467405}
{"timestamp":"2022-05-25T20:14:44.520497+0000","flow_id":622106923797019,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56143,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:14:44.050937Z","timestamp":"2022-05-25T20:14:44.050937Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"timestamp":"2022-05-25T20:13:44.489981+0000","flow_id":848778113862368,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56128,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:13:44.243398Z","timestamp":"2022-05-25T20:13:44.243398Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":259,"vxlan_id":0}
{"endtime":"2022-05-25T20:13:44.243398Z","timestamp":"2022-05-25T20:13:44.243398Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":173,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:13:44.011962Z","timestamp":"2022-05-25T20:13:44.011962Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":314,"vxlan_id":0}
{"timestamp":"2022-05-25T20:12:44.473495+0000","flow_id":1007417021969513,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56115,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:12:44.223034Z","timestamp":"2022-05-25T20:12:44.223034Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":196,"vxlan_id":0}
{"endtime":"2022-05-25T20:12:44.223034Z","timestamp":"2022-05-25T20:12:44.223034Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":163,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:12:43.219064Z","timestamp":"2022-05-25T20:12:43.219064Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":230,"vxlan_id":0}
{"timestamp":"2022-05-25T20:11:44.467760+0000","flow_id":1755261018577745,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56102,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:11:44.203140Z","timestamp":"2022-05-25T20:11:44.203140Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":223,"vxlan_id":0}
{"endtime":"2022-05-25T20:11:44.203140Z","timestamp":"2022-05-25T20:11:44.203140Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:11:43.185597Z","timestamp":"2022-05-25T20:11:43.185597Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":313,"vxlan_id":0}
{"timestamp":"2022-05-25T20:10:44.461512+0000","flow_id":384663936041812,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56087,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:10:44.183096Z","timestamp":"2022-05-25T20:10:44.183096Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":252,"vxlan_id":0}
{"endtime":"2022-05-25T20:10:44.183096Z","timestamp":"2022-05-25T20:10:44.183096Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:10:43.150412Z","timestamp":"2022-05-25T20:10:43.150412Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":295,"vxlan_id":0}
{"timestamp":"2022-05-25T20:09:44.455927+0000","flow_id":2075304793795922,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56070,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:09:44.163188Z","timestamp":"2022-05-25T20:09:44.163188Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":199,"vxlan_id":0}
{"endtime":"2022-05-25T20:09:44.163188Z","timestamp":"2022-05-25T20:09:44.163188Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:09:43.110610Z","timestamp":"2022-05-25T20:09:43.110610Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":289,"vxlan_id":0}
{"timestamp":"2022-05-25T20:08:44.450202+0000","flow_id":879311016743757,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56055,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:08:44.143508Z","timestamp":"2022-05-25T20:08:44.143508Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":240,"vxlan_id":0}
{"endtime":"2022-05-25T20:08:44.143508Z","timestamp":"2022-05-25T20:08:44.143508Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":169,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:08:43.075251Z","timestamp":"2022-05-25T20:08:43.075251Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":310,"vxlan_id":0}
{"timestamp":"2022-05-25T20:07:44.444139+0000","flow_id":1011815048855349,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56041,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:07:44.123796Z","timestamp":"2022-05-25T20:07:44.123796Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":710,"vxlan_id":0}
{"endtime":"2022-05-25T20:07:44.123796Z","timestamp":"2022-05-25T20:07:44.123796Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":465,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:07:43.040430Z","timestamp":"2022-05-25T20:07:43.040430Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":292,"vxlan_id":0}
{"timestamp":"2022-05-25T20:06:44.437162+0000","flow_id":819795647046134,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56026,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:06:44.104783Z","timestamp":"2022-05-25T20:06:44.104783Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":282,"vxlan_id":0}
{"endtime":"2022-05-25T20:06:44.104783Z","timestamp":"2022-05-25T20:06:44.104783Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":172,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:06:43.007185Z","timestamp":"2022-05-25T20:06:43.007185Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"timestamp":"2022-05-25T20:05:44.431043+0000","flow_id":1272373526956495,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56013,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:05:44.085193Z","timestamp":"2022-05-25T20:05:44.085193Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":829,"vxlan_id":0}
{"endtime":"2022-05-25T20:05:44.085193Z","timestamp":"2022-05-25T20:05:44.085193Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":205,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:05:42.222567Z","timestamp":"2022-05-25T20:05:42.222567Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":244,"vxlan_id":0}
{"timestamp":"2022-05-25T20:04:44.424533+0000","flow_id":1514790067129562,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55994,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:04:44.059007Z","timestamp":"2022-05-25T20:04:44.059007Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":291,"vxlan_id":0}
{"endtime":"2022-05-25T20:04:44.059007Z","timestamp":"2022-05-25T20:04:44.059007Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":158,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:04:42.187795Z","timestamp":"2022-05-25T20:04:42.187795Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":255,"vxlan_id":0}
{"timestamp":"2022-05-25T20:03:44.409301+0000","flow_id":1221916243268828,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55978,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:03:44.040136Z","timestamp":"2022-05-25T20:03:44.040136Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":214,"vxlan_id":0}
{"endtime":"2022-05-25T20:03:44.040136Z","timestamp":"2022-05-25T20:03:44.040136Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:03:42.153448Z","timestamp":"2022-05-25T20:03:42.153448Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":212,"vxlan_id":0}
{"timestamp":"2022-05-25T20:02:44.391323+0000","flow_id":95372087456444,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55965,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:02:44.020854Z","timestamp":"2022-05-25T20:02:44.020854Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":192,"vxlan_id":0}
{"endtime":"2022-05-25T20:02:44.020854Z","timestamp":"2022-05-25T20:02:44.020854Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":173,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:02:42.116461Z","timestamp":"2022-05-25T20:02:42.116461Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":253,"vxlan_id":0}
{"timestamp":"2022-05-25T20:01:44.384685+0000","flow_id":1790694459485551,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55952,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:01:43.243585Z","timestamp":"2022-05-25T20:01:43.243585Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":197,"vxlan_id":0}
{"endtime":"2022-05-25T20:01:43.243585Z","timestamp":"2022-05-25T20:01:43.243585Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":219,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:01:42.076507Z","timestamp":"2022-05-25T20:01:42.076507Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":330,"vxlan_id":0}
{"timestamp":"2022-05-25T20:00:44.368197+0000","flow_id":2059804221412985,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55937,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T20:00:43.225091Z","timestamp":"2022-05-25T20:00:43.225091Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":201,"vxlan_id":0}
{"endtime":"2022-05-25T20:00:43.225091Z","timestamp":"2022-05-25T20:00:43.225091Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":156,"vxlan_id":2467405}
{"endtime":"2022-05-25T20:00:42.030678Z","timestamp":"2022-05-25T20:00:42.030678Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":257,"vxlan_id":0}
{"timestamp":"2022-05-25T19:59:44.361315+0000","flow_id":1337837394875918,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55920,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:59:43.205397Z","timestamp":"2022-05-25T19:59:43.205397Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":230,"vxlan_id":0}
{"endtime":"2022-05-25T19:59:43.205397Z","timestamp":"2022-05-25T19:59:43.205397Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:59:41.233171Z","timestamp":"2022-05-25T19:59:41.233171Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":259,"vxlan_id":0}
{"timestamp":"2022-05-25T19:58:44.345702+0000","flow_id":127773304962744,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55904,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:58:43.188085Z","timestamp":"2022-05-25T19:58:43.188085Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":216,"vxlan_id":0}
{"endtime":"2022-05-25T19:58:43.188085Z","timestamp":"2022-05-25T19:58:43.188085Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":496,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:58:41.192760Z","timestamp":"2022-05-25T19:58:41.192760Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":299,"vxlan_id":0}
{"timestamp":"2022-05-25T19:57:44.339300+0000","flow_id":1538356525147029,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55891,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:57:43.169189Z","timestamp":"2022-05-25T19:57:43.169189Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"endtime":"2022-05-25T19:57:43.169189Z","timestamp":"2022-05-25T19:57:43.169189Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":220,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:57:41.151131Z","timestamp":"2022-05-25T19:57:41.151131Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":286,"vxlan_id":0}
{"timestamp":"2022-05-25T19:56:44.332294+0000","flow_id":1402781583597840,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55875,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:56:43.148866Z","timestamp":"2022-05-25T19:56:43.148866Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":262,"vxlan_id":0}
{"endtime":"2022-05-25T19:56:43.148866Z","timestamp":"2022-05-25T19:56:43.148866Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":168,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:56:41.117307Z","timestamp":"2022-05-25T19:56:41.117307Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":262,"vxlan_id":0}
{"timestamp":"2022-05-25T19:55:44.315761+0000","flow_id":1055103977048546,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55861,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:55:43.129450Z","timestamp":"2022-05-25T19:55:43.129450Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":692,"vxlan_id":0}
{"endtime":"2022-05-25T19:55:43.129450Z","timestamp":"2022-05-25T19:55:43.129450Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":191,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:55:41.087339Z","timestamp":"2022-05-25T19:55:41.087339Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":239,"vxlan_id":0}
{"timestamp":"2022-05-25T19:54:44.310182+0000","flow_id":1625071903093698,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55843,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:54:43.109489Z","timestamp":"2022-05-25T19:54:43.109489Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":193,"vxlan_id":0}
{"endtime":"2022-05-25T19:54:43.109489Z","timestamp":"2022-05-25T19:54:43.109489Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":179,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:54:41.045477Z","timestamp":"2022-05-25T19:54:41.045477Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"timestamp":"2022-05-25T19:53:44.304246+0000","flow_id":373973695634690,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55828,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:53:43.089270Z","timestamp":"2022-05-25T19:53:43.089270Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":250,"vxlan_id":0}
{"endtime":"2022-05-25T19:53:43.089270Z","timestamp":"2022-05-25T19:53:43.089270Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":722,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:53:41.010206Z","timestamp":"2022-05-25T19:53:41.010206Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":277,"vxlan_id":0}
{"timestamp":"2022-05-25T19:52:44.298156+0000","flow_id":309720980937353,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55815,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:52:43.070095Z","timestamp":"2022-05-25T19:52:43.070095Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":213,"vxlan_id":0}
{"endtime":"2022-05-25T19:52:43.070095Z","timestamp":"2022-05-25T19:52:43.070095Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":151,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:52:40.229909Z","timestamp":"2022-05-25T19:52:40.229909Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"timestamp":"2022-05-25T19:51:44.281320+0000","flow_id":1353823231680149,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55801,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:51:43.050074Z","timestamp":"2022-05-25T19:51:43.050074Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":0}
{"endtime":"2022-05-25T19:51:43.050074Z","timestamp":"2022-05-25T19:51:43.050074Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:51:40.195063Z","timestamp":"2022-05-25T19:51:40.195063Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":220,"vxlan_id":0}
{"timestamp":"2022-05-25T19:50:44.266028+0000","flow_id":1305934342391660,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55787,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:50:43.030274Z","timestamp":"2022-05-25T19:50:43.030274Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":203,"vxlan_id":0}
{"endtime":"2022-05-25T19:50:43.030274Z","timestamp":"2022-05-25T19:50:43.030274Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:50:40.159250Z","timestamp":"2022-05-25T19:50:40.159250Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":257,"vxlan_id":0}
{"timestamp":"2022-05-25T19:49:44.259968+0000","flow_id":1642651184590772,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55768,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:49:43.011123Z","timestamp":"2022-05-25T19:49:43.011123Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":266,"vxlan_id":0}
{"endtime":"2022-05-25T19:49:43.011123Z","timestamp":"2022-05-25T19:49:43.011123Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":194,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:49:40.108481Z","timestamp":"2022-05-25T19:49:40.108481Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":270,"vxlan_id":0}
{"timestamp":"2022-05-25T19:48:44.253969+0000","flow_id":277637559539829,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55752,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:48:42.240738Z","timestamp":"2022-05-25T19:48:42.240738Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":230,"vxlan_id":0}
{"endtime":"2022-05-25T19:48:42.240738Z","timestamp":"2022-05-25T19:48:42.240738Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":191,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:48:40.066904Z","timestamp":"2022-05-25T19:48:40.066904Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"timestamp":"2022-05-25T19:47:44.248852+0000","flow_id":275442827314345,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55738,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:47:42.220251Z","timestamp":"2022-05-25T19:47:42.220251Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":0}
{"endtime":"2022-05-25T19:47:42.220251Z","timestamp":"2022-05-25T19:47:42.220251Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":176,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:47:40.033564Z","timestamp":"2022-05-25T19:47:40.033564Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":243,"vxlan_id":0}
{"timestamp":"2022-05-25T19:46:44.242540+0000","flow_id":134305903051621,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55725,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:46:42.200765Z","timestamp":"2022-05-25T19:46:42.200765Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"endtime":"2022-05-25T19:46:42.200765Z","timestamp":"2022-05-25T19:46:42.200765Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":177,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:46:40.003122Z","timestamp":"2022-05-25T19:46:40.003122Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":230,"vxlan_id":0}
{"timestamp":"2022-05-25T19:45:44.226543+0000","flow_id":974191048804007,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55712,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:45:42.180319Z","timestamp":"2022-05-25T19:45:42.180319Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":180,"vxlan_id":0}
{"endtime":"2022-05-25T19:45:42.180319Z","timestamp":"2022-05-25T19:45:42.180319Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":180,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:45:39.217794Z","timestamp":"2022-05-25T19:45:39.217794Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":293,"vxlan_id":0}
{"timestamp":"2022-05-25T19:44:44.210889+0000","flow_id":604888281915321,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58188,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:44:42.162027Z","timestamp":"2022-05-25T19:44:42.162027Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":203,"vxlan_id":0}
{"endtime":"2022-05-25T19:44:42.162027Z","timestamp":"2022-05-25T19:44:42.162027Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":1091,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:44:39.183911Z","timestamp":"2022-05-25T19:44:39.183911Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":289,"vxlan_id":0}
{"timestamp":"2022-05-25T19:43:44.201142+0000","flow_id":282516622672548,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58171,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:43:42.142196Z","timestamp":"2022-05-25T19:43:42.142196Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":216,"vxlan_id":0}
{"endtime":"2022-05-25T19:43:42.142196Z","timestamp":"2022-05-25T19:43:42.142196Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":207,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:43:39.151005Z","timestamp":"2022-05-25T19:43:39.151005Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":271,"vxlan_id":0}
{"timestamp":"2022-05-25T19:42:44.193661+0000","flow_id":350944037759966,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58159,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:42:42.123829Z","timestamp":"2022-05-25T19:42:42.123829Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"endtime":"2022-05-25T19:42:42.123829Z","timestamp":"2022-05-25T19:42:42.123829Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:42:39.112721Z","timestamp":"2022-05-25T19:42:39.112721Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":0}
{"timestamp":"2022-05-25T19:41:44.187954+0000","flow_id":1728039397938674,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58146,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:41:42.104421Z","timestamp":"2022-05-25T19:41:42.104421Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":232,"vxlan_id":0}
{"endtime":"2022-05-25T19:41:42.104421Z","timestamp":"2022-05-25T19:41:42.104421Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:41:39.069191Z","timestamp":"2022-05-25T19:41:39.069191Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":264,"vxlan_id":0}
{"timestamp":"2022-05-25T19:40:44.182722+0000","flow_id":1369529883869830,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58133,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:40:42.084779Z","timestamp":"2022-05-25T19:40:42.084779Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":197,"vxlan_id":0}
{"endtime":"2022-05-25T19:40:42.084779Z","timestamp":"2022-05-25T19:40:42.084779Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:40:39.024680Z","timestamp":"2022-05-25T19:40:39.024680Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":279,"vxlan_id":0}
{"timestamp":"2022-05-25T19:39:44.176911+0000","flow_id":200968062937873,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58116,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:39:42.065641Z","timestamp":"2022-05-25T19:39:42.065641Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":197,"vxlan_id":0}
{"endtime":"2022-05-25T19:39:42.065641Z","timestamp":"2022-05-25T19:39:42.065641Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":158,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:39:38.234413Z","timestamp":"2022-05-25T19:39:38.234413Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":283,"vxlan_id":0}
{"timestamp":"2022-05-25T19:38:44.170411+0000","flow_id":2137113546232424,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58101,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:38:42.046956Z","timestamp":"2022-05-25T19:38:42.046956Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":206,"vxlan_id":0}
{"endtime":"2022-05-25T19:38:42.046956Z","timestamp":"2022-05-25T19:38:42.046956Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:38:38.194383Z","timestamp":"2022-05-25T19:38:38.194383Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":294,"vxlan_id":0}
{"timestamp":"2022-05-25T19:37:44.165200+0000","flow_id":581429143033384,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58086,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:37:42.028942Z","timestamp":"2022-05-25T19:37:42.028942Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":241,"vxlan_id":0}
{"endtime":"2022-05-25T19:37:42.028942Z","timestamp":"2022-05-25T19:37:42.028942Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:37:38.150799Z","timestamp":"2022-05-25T19:37:38.150799Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":399,"vxlan_id":0}
{"timestamp":"2022-05-25T19:36:44.149289+0000","flow_id":87095583194987,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58073,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:36:42.010111Z","timestamp":"2022-05-25T19:36:42.010111Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":219,"vxlan_id":0}
{"endtime":"2022-05-25T19:36:42.010111Z","timestamp":"2022-05-25T19:36:42.010111Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:36:38.116081Z","timestamp":"2022-05-25T19:36:38.116081Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":251,"vxlan_id":0}
{"timestamp":"2022-05-25T19:35:44.109114+0000","flow_id":1447414801121075,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58061,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:35:41.240759Z","timestamp":"2022-05-25T19:35:41.240759Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":260,"vxlan_id":0}
{"endtime":"2022-05-25T19:35:41.240759Z","timestamp":"2022-05-25T19:35:41.240759Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:35:38.083464Z","timestamp":"2022-05-25T19:35:38.083464Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":332,"vxlan_id":0}
{"timestamp":"2022-05-25T19:34:44.082443+0000","flow_id":811733867620505,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58044,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:34:41.221553Z","timestamp":"2022-05-25T19:34:41.221553Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":258,"vxlan_id":0}
{"endtime":"2022-05-25T19:34:41.221553Z","timestamp":"2022-05-25T19:34:41.221553Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:34:38.049743Z","timestamp":"2022-05-25T19:34:38.049743Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":301,"vxlan_id":0}
{"timestamp":"2022-05-25T19:33:44.061380+0000","flow_id":568557110355941,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58028,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:33:41.201844Z","timestamp":"2022-05-25T19:33:41.201844Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":242,"vxlan_id":0}
{"endtime":"2022-05-25T19:33:41.201844Z","timestamp":"2022-05-25T19:33:41.201844Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:33:38.017193Z","timestamp":"2022-05-25T19:33:38.017193Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":246,"vxlan_id":0}
{"timestamp":"2022-05-25T19:32:44.047623+0000","flow_id":976896827110616,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58015,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:32:41.181746Z","timestamp":"2022-05-25T19:32:41.181746Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":190,"vxlan_id":0}
{"endtime":"2022-05-25T19:32:41.181746Z","timestamp":"2022-05-25T19:32:41.181746Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":165,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:32:37.228787Z","timestamp":"2022-05-25T19:32:37.228787Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":254,"vxlan_id":0}
{"timestamp":"2022-05-25T19:31:44.046229+0000","flow_id":1382616613825740,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":58002,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:31:41.162027Z","timestamp":"2022-05-25T19:31:41.162027Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T19:31:41.162027Z","timestamp":"2022-05-25T19:31:41.162027Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":208,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:31:37.181209Z","timestamp":"2022-05-25T19:31:37.181209Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":224,"vxlan_id":0}
{"timestamp":"2022-05-25T19:30:44.023405+0000","flow_id":734299886458446,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57988,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:30:41.143541Z","timestamp":"2022-05-25T19:30:41.143541Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":205,"vxlan_id":0}
{"endtime":"2022-05-25T19:30:41.143541Z","timestamp":"2022-05-25T19:30:41.143541Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":184,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:30:37.145041Z","timestamp":"2022-05-25T19:30:37.145041Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"timestamp":"2022-05-25T19:29:43.995814+0000","flow_id":1017394061900272,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57972,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:29:41.123020Z","timestamp":"2022-05-25T19:29:41.123020Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":250,"vxlan_id":0}
{"endtime":"2022-05-25T19:29:41.123020Z","timestamp":"2022-05-25T19:29:41.123020Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":181,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:29:37.103528Z","timestamp":"2022-05-25T19:29:37.103528Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":272,"vxlan_id":0}
{"timestamp":"2022-05-25T19:28:43.972977+0000","flow_id":1565281561059541,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57956,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:28:41.103234Z","timestamp":"2022-05-25T19:28:41.103234Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"endtime":"2022-05-25T19:28:41.103234Z","timestamp":"2022-05-25T19:28:41.103234Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:28:37.062779Z","timestamp":"2022-05-25T19:28:37.062779Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":233,"vxlan_id":0}
{"timestamp":"2022-05-25T19:27:43.950354+0000","flow_id":1488405937466737,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57943,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:27:41.083942Z","timestamp":"2022-05-25T19:27:41.083942Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T19:27:41.083942Z","timestamp":"2022-05-25T19:27:41.083942Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:27:37.026738Z","timestamp":"2022-05-25T19:27:37.026738Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":303,"vxlan_id":0}
{"timestamp":"2022-05-25T19:26:43.920204+0000","flow_id":863715825273571,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57929,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:26:41.063343Z","timestamp":"2022-05-25T19:26:41.063343Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":0}
{"endtime":"2022-05-25T19:26:41.063343Z","timestamp":"2022-05-25T19:26:41.063343Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":164,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:26:36.235187Z","timestamp":"2022-05-25T19:26:36.235187Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"timestamp":"2022-05-25T19:25:43.893945+0000","flow_id":1311715270030674,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57915,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:25:41.044047Z","timestamp":"2022-05-25T19:25:41.044047Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"endtime":"2022-05-25T19:25:41.044047Z","timestamp":"2022-05-25T19:25:41.044047Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":162,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:25:36.195094Z","timestamp":"2022-05-25T19:25:36.195094Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":240,"vxlan_id":0}
{"timestamp":"2022-05-25T19:24:43.874335+0000","flow_id":988441667638669,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57898,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:24:41.024155Z","timestamp":"2022-05-25T19:24:41.024155Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":0}
{"endtime":"2022-05-25T19:24:41.024155Z","timestamp":"2022-05-25T19:24:41.024155Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":164,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:24:36.160705Z","timestamp":"2022-05-25T19:24:36.160705Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":243,"vxlan_id":0}
{"timestamp":"2022-05-25T19:23:43.858024+0000","flow_id":817759663411558,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57883,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:23:41.004342Z","timestamp":"2022-05-25T19:23:41.004342Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":219,"vxlan_id":0}
{"endtime":"2022-05-25T19:23:41.004342Z","timestamp":"2022-05-25T19:23:41.004342Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":4644,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:23:36.126690Z","timestamp":"2022-05-25T19:23:36.126690Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":320,"vxlan_id":0}
{"timestamp":"2022-05-25T19:22:43.823895+0000","flow_id":1242579169671416,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57870,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:22:40.224957Z","timestamp":"2022-05-25T19:22:40.224957Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":281,"vxlan_id":0}
{"endtime":"2022-05-25T19:22:40.224957Z","timestamp":"2022-05-25T19:22:40.224957Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":192,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:22:36.084444Z","timestamp":"2022-05-25T19:22:36.084444Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":341,"vxlan_id":0}
{"timestamp":"2022-05-25T19:21:43.809548+0000","flow_id":1387306678692427,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57855,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:21:40.200839Z","timestamp":"2022-05-25T19:21:40.200839Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"endtime":"2022-05-25T19:21:40.200839Z","timestamp":"2022-05-25T19:21:40.200839Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":163,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:21:36.040738Z","timestamp":"2022-05-25T19:21:36.040738Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":301,"vxlan_id":0}
{"timestamp":"2022-05-25T19:20:43.793418+0000","flow_id":2131766241127213,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57842,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:20:40.180273Z","timestamp":"2022-05-25T19:20:40.180273Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":258,"vxlan_id":0}
{"endtime":"2022-05-25T19:20:40.180273Z","timestamp":"2022-05-25T19:20:40.180273Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":162,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:20:36.000532Z","timestamp":"2022-05-25T19:20:36.000532Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":288,"vxlan_id":0}
{"timestamp":"2022-05-25T19:19:43.772416+0000","flow_id":1505001659679155,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57823,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:19:40.160710Z","timestamp":"2022-05-25T19:19:40.160710Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":205,"vxlan_id":0}
{"endtime":"2022-05-25T19:19:40.160710Z","timestamp":"2022-05-25T19:19:40.160710Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":173,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:19:35.208043Z","timestamp":"2022-05-25T19:19:35.208043Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":247,"vxlan_id":0}
{"timestamp":"2022-05-25T19:18:43.766654+0000","flow_id":128408802785597,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57808,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:18:40.142680Z","timestamp":"2022-05-25T19:18:40.142680Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":232,"vxlan_id":0}
{"endtime":"2022-05-25T19:18:40.142680Z","timestamp":"2022-05-25T19:18:40.142680Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2337,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:18:35.166979Z","timestamp":"2022-05-25T19:18:35.166979Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":294,"vxlan_id":0}
{"timestamp":"2022-05-25T19:17:43.743452+0000","flow_id":1410344867547090,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57794,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:17:40.123550Z","timestamp":"2022-05-25T19:17:40.123550Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":305,"vxlan_id":0}
{"endtime":"2022-05-25T19:17:40.123550Z","timestamp":"2022-05-25T19:17:40.123550Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":179,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:17:35.129985Z","timestamp":"2022-05-25T19:17:35.129985Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":270,"vxlan_id":0}
{"timestamp":"2022-05-25T19:16:43.731543+0000","flow_id":1907946889660637,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57781,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:16:40.104644Z","timestamp":"2022-05-25T19:16:40.104644Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":243,"vxlan_id":0}
{"endtime":"2022-05-25T19:16:40.104644Z","timestamp":"2022-05-25T19:16:40.104644Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":177,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:16:35.090887Z","timestamp":"2022-05-25T19:16:35.090887Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":385,"vxlan_id":0}
{"timestamp":"2022-05-25T19:15:43.702938+0000","flow_id":797375717149514,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":57767,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:15:40.083542Z","timestamp":"2022-05-25T19:15:40.083542Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":0}
{"endtime":"2022-05-25T19:15:40.083542Z","timestamp":"2022-05-25T19:15:40.083542Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":181,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:15:35.053081Z","timestamp":"2022-05-25T19:15:35.053081Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":299,"vxlan_id":0}
{"timestamp":"2022-05-25T19:14:43.687380+0000","flow_id":574978011657561,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52381,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:14:40.062528Z","timestamp":"2022-05-25T19:14:40.062528Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"endtime":"2022-05-25T19:14:40.062528Z","timestamp":"2022-05-25T19:14:40.062528Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":175,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:14:35.011943Z","timestamp":"2022-05-25T19:14:35.011943Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":325,"vxlan_id":0}
{"timestamp":"2022-05-25T19:13:43.672666+0000","flow_id":1512745462136397,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52366,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:13:40.040482Z","timestamp":"2022-05-25T19:13:40.040482Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":212,"vxlan_id":0}
{"endtime":"2022-05-25T19:13:40.040482Z","timestamp":"2022-05-25T19:13:40.040482Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":162,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:13:34.230852Z","timestamp":"2022-05-25T19:13:34.230852Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":308,"vxlan_id":0}
{"timestamp":"2022-05-25T19:12:43.651229+0000","flow_id":920293374421077,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52353,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:12:40.020696Z","timestamp":"2022-05-25T19:12:40.020696Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":250,"vxlan_id":0}
{"endtime":"2022-05-25T19:12:40.020696Z","timestamp":"2022-05-25T19:12:40.020696Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:12:34.196064Z","timestamp":"2022-05-25T19:12:34.196064Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":248,"vxlan_id":0}
{"timestamp":"2022-05-25T19:11:43.633132+0000","flow_id":1500760347984469,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52341,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:11:39.243103Z","timestamp":"2022-05-25T19:11:39.243103Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T19:11:39.243103Z","timestamp":"2022-05-25T19:11:39.243103Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":201,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:11:34.153864Z","timestamp":"2022-05-25T19:11:34.153864Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":276,"vxlan_id":0}
{"timestamp":"2022-05-25T19:10:43.607963+0000","flow_id":780172205950057,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52326,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:10:39.223123Z","timestamp":"2022-05-25T19:10:39.223123Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":218,"vxlan_id":0}
{"endtime":"2022-05-25T19:10:39.223123Z","timestamp":"2022-05-25T19:10:39.223123Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":165,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:10:34.119505Z","timestamp":"2022-05-25T19:10:34.119505Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":289,"vxlan_id":0}
{"timestamp":"2022-05-25T19:09:43.587062+0000","flow_id":804567616308444,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52309,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:09:39.202453Z","timestamp":"2022-05-25T19:09:39.202453Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":195,"vxlan_id":0}
{"endtime":"2022-05-25T19:09:39.202453Z","timestamp":"2022-05-25T19:09:39.202453Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:09:34.083648Z","timestamp":"2022-05-25T19:09:34.083648Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":251,"vxlan_id":0}
{"timestamp":"2022-05-25T19:08:43.570574+0000","flow_id":1640604471372175,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52294,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:08:39.182895Z","timestamp":"2022-05-25T19:08:39.182895Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":273,"vxlan_id":0}
{"endtime":"2022-05-25T19:08:39.182895Z","timestamp":"2022-05-25T19:08:39.182895Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:08:34.048018Z","timestamp":"2022-05-25T19:08:34.048018Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"timestamp":"2022-05-25T19:07:43.559516+0000","flow_id":1908354876131361,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52280,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:07:39.161256Z","timestamp":"2022-05-25T19:07:39.161256Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":224,"vxlan_id":0}
{"endtime":"2022-05-25T19:07:39.161256Z","timestamp":"2022-05-25T19:07:39.161256Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":225,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:07:34.012832Z","timestamp":"2022-05-25T19:07:34.012832Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":286,"vxlan_id":0}
{"timestamp":"2022-05-25T19:06:43.535000+0000","flow_id":182591915500030,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52268,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:06:39.140822Z","timestamp":"2022-05-25T19:06:39.140822Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"endtime":"2022-05-25T19:06:39.140822Z","timestamp":"2022-05-25T19:06:39.140822Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:06:33.223800Z","timestamp":"2022-05-25T19:06:33.223800Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":237,"vxlan_id":0}
{"timestamp":"2022-05-25T19:05:43.531764+0000","flow_id":1975491649541519,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52255,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:05:39.121455Z","timestamp":"2022-05-25T19:05:39.121455Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":205,"vxlan_id":0}
{"endtime":"2022-05-25T19:05:39.121455Z","timestamp":"2022-05-25T19:05:39.121455Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":157,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:05:33.195429Z","timestamp":"2022-05-25T19:05:33.195429Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":270,"vxlan_id":0}
{"timestamp":"2022-05-25T19:04:43.518420+0000","flow_id":727067059271514,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52235,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:04:39.093219Z","timestamp":"2022-05-25T19:04:39.093219Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"endtime":"2022-05-25T19:04:39.093219Z","timestamp":"2022-05-25T19:04:39.093219Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":164,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:04:33.162213Z","timestamp":"2022-05-25T19:04:33.162213Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":275,"vxlan_id":0}
{"timestamp":"2022-05-25T19:03:43.502114+0000","flow_id":1951188569252577,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52220,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:03:39.073072Z","timestamp":"2022-05-25T19:03:39.073072Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":224,"vxlan_id":0}
{"endtime":"2022-05-25T19:03:39.073072Z","timestamp":"2022-05-25T19:03:39.073072Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":168,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:03:33.119191Z","timestamp":"2022-05-25T19:03:33.119191Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":278,"vxlan_id":0}
{"timestamp":"2022-05-25T19:02:43.482966+0000","flow_id":77923546766421,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52207,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T19:02:39.052916Z","timestamp":"2022-05-25T19:02:39.052916Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":266,"vxlan_id":0}
{"endtime":"2022-05-25T19:02:39.052916Z","timestamp":"2022-05-25T19:02:39.052916Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:02:33.078246Z","timestamp":"2022-05-25T19:02:33.078246Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":217,"vxlan_id":0}
{"timestamp":"2022-05-25T19:01:43.455564+0000","flow_id":1982213257675830,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52195,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:01:39.033654Z","timestamp":"2022-05-25T19:01:39.033654Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":274,"vxlan_id":0}
{"endtime":"2022-05-25T19:01:39.033654Z","timestamp":"2022-05-25T19:01:39.033654Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":214,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:01:33.037211Z","timestamp":"2022-05-25T19:01:33.037211Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":325,"vxlan_id":0}
{"timestamp":"2022-05-25T19:00:43.430686+0000","flow_id":1161180862974591,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52181,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T19:00:39.003739Z","timestamp":"2022-05-25T19:00:39.003739Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"endtime":"2022-05-25T19:00:39.003739Z","timestamp":"2022-05-25T19:00:39.003739Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":156,"vxlan_id":2467405}
{"endtime":"2022-05-25T19:00:32.240356Z","timestamp":"2022-05-25T19:00:32.240356Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":243,"vxlan_id":0}
{"timestamp":"2022-05-25T18:59:43.418193+0000","flow_id":271723196784785,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52163,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:59:38.233672Z","timestamp":"2022-05-25T18:59:38.233672Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":0}
{"endtime":"2022-05-25T18:59:38.233672Z","timestamp":"2022-05-25T18:59:38.233672Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":181,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:59:32.199387Z","timestamp":"2022-05-25T18:59:32.199387Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":338,"vxlan_id":0}
{"timestamp":"2022-05-25T18:58:43.393382+0000","flow_id":1384796179920996,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52148,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:58:38.213330Z","timestamp":"2022-05-25T18:58:38.213330Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":243,"vxlan_id":0}
{"endtime":"2022-05-25T18:58:38.213330Z","timestamp":"2022-05-25T18:58:38.213330Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":163,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:58:32.157842Z","timestamp":"2022-05-25T18:58:32.157842Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":280,"vxlan_id":0}
{"timestamp":"2022-05-25T18:57:43.380389+0000","flow_id":2133653788783272,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52134,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:57:38.194632Z","timestamp":"2022-05-25T18:57:38.194632Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":0}
{"endtime":"2022-05-25T18:57:38.194632Z","timestamp":"2022-05-25T18:57:38.194632Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":170,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:57:32.115721Z","timestamp":"2022-05-25T18:57:32.115721Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":305,"vxlan_id":0}
{"timestamp":"2022-05-25T18:56:43.353238+0000","flow_id":169599600107056,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52121,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:56:38.174368Z","timestamp":"2022-05-25T18:56:38.174368Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":192,"vxlan_id":0}
{"endtime":"2022-05-25T18:56:38.174368Z","timestamp":"2022-05-25T18:56:38.174368Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":166,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:56:32.083420Z","timestamp":"2022-05-25T18:56:32.083420Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":220,"vxlan_id":0}
{"timestamp":"2022-05-25T18:55:43.331682+0000","flow_id":1669758658278434,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52107,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:55:38.153707Z","timestamp":"2022-05-25T18:55:38.153707Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":282,"vxlan_id":0}
{"endtime":"2022-05-25T18:55:38.153707Z","timestamp":"2022-05-25T18:55:38.153707Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":165,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:55:32.051394Z","timestamp":"2022-05-25T18:55:32.051394Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"timestamp":"2022-05-25T18:54:43.308070+0000","flow_id":699886319399320,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52091,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:54:38.133302Z","timestamp":"2022-05-25T18:54:38.133302Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T18:54:38.133302Z","timestamp":"2022-05-25T18:54:38.133302Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":169,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:54:32.011427Z","timestamp":"2022-05-25T18:54:32.011427Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":344,"vxlan_id":0}
{"timestamp":"2022-05-25T18:53:43.275160+0000","flow_id":660121360792335,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52074,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:53:38.112449Z","timestamp":"2022-05-25T18:53:38.112449Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":206,"vxlan_id":0}
{"endtime":"2022-05-25T18:53:38.112449Z","timestamp":"2022-05-25T18:53:38.112449Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:53:31.218301Z","timestamp":"2022-05-25T18:53:31.218301Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":224,"vxlan_id":0}
{"timestamp":"2022-05-25T18:52:43.257425+0000","flow_id":1461570844223610,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52062,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:52:38.089035Z","timestamp":"2022-05-25T18:52:38.089035Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":295,"vxlan_id":0}
{"endtime":"2022-05-25T18:52:38.089035Z","timestamp":"2022-05-25T18:52:38.089035Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":181,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:52:31.181403Z","timestamp":"2022-05-25T18:52:31.181403Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"timestamp":"2022-05-25T18:51:43.252173+0000","flow_id":1625896289030489,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52044,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:51:38.068405Z","timestamp":"2022-05-25T18:51:38.068405Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":223,"vxlan_id":0}
{"endtime":"2022-05-25T18:51:38.068405Z","timestamp":"2022-05-25T18:51:38.068405Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":167,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:51:31.147086Z","timestamp":"2022-05-25T18:51:31.147086Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":238,"vxlan_id":0}
{"timestamp":"2022-05-25T18:50:43.243042+0000","flow_id":1617430904548896,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52031,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:50:38.041682Z","timestamp":"2022-05-25T18:50:38.041682Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":250,"vxlan_id":0}
{"endtime":"2022-05-25T18:50:38.041682Z","timestamp":"2022-05-25T18:50:38.041682Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":193,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:50:31.108379Z","timestamp":"2022-05-25T18:50:31.108379Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":281,"vxlan_id":0}
{"timestamp":"2022-05-25T18:49:43.229210+0000","flow_id":296249568213997,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":52013,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:49:38.021303Z","timestamp":"2022-05-25T18:49:38.021303Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":220,"vxlan_id":0}
{"endtime":"2022-05-25T18:49:38.021303Z","timestamp":"2022-05-25T18:49:38.021303Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:49:31.072400Z","timestamp":"2022-05-25T18:49:31.072400Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":322,"vxlan_id":0}
{"timestamp":"2022-05-25T18:48:43.195748+0000","flow_id":1587580873985147,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":51996,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:48:37.249582Z","timestamp":"2022-05-25T18:48:37.249582Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":208,"vxlan_id":0}
{"endtime":"2022-05-25T18:48:37.249582Z","timestamp":"2022-05-25T18:48:37.249582Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":558,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:48:31.038141Z","timestamp":"2022-05-25T18:48:31.038141Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":395,"vxlan_id":0}
{"timestamp":"2022-05-25T18:47:43.159437+0000","flow_id":1099131419319279,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":51982,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:47:37.228558Z","timestamp":"2022-05-25T18:47:37.228558Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":0}
{"endtime":"2022-05-25T18:47:37.228558Z","timestamp":"2022-05-25T18:47:37.228558Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:47:30.248699Z","timestamp":"2022-05-25T18:47:30.248699Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":306,"vxlan_id":0}
{"timestamp":"2022-05-25T18:46:43.150888+0000","flow_id":1861735071036588,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":51970,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:46:37.208159Z","timestamp":"2022-05-25T18:46:37.208159Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":262,"vxlan_id":0}
{"endtime":"2022-05-25T18:46:37.208159Z","timestamp":"2022-05-25T18:46:37.208159Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":184,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:46:30.216178Z","timestamp":"2022-05-25T18:46:30.216178Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":290,"vxlan_id":0}
{"timestamp":"2022-05-25T18:45:43.136605+0000","flow_id":1460522844676132,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":51954,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:45:37.188641Z","timestamp":"2022-05-25T18:45:37.188641Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":251,"vxlan_id":0}
{"endtime":"2022-05-25T18:45:37.188641Z","timestamp":"2022-05-25T18:45:37.188641Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":190,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:45:30.178892Z","timestamp":"2022-05-25T18:45:30.178892Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":314,"vxlan_id":0}
{"timestamp":"2022-05-25T18:44:43.124880+0000","flow_id":2111504591347768,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56217,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:44:37.167412Z","timestamp":"2022-05-25T18:44:37.167412Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":0}
{"endtime":"2022-05-25T18:44:37.167412Z","timestamp":"2022-05-25T18:44:37.167412Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":177,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:44:30.137470Z","timestamp":"2022-05-25T18:44:30.137470Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":256,"vxlan_id":0}
{"timestamp":"2022-05-25T18:43:43.108862+0000","flow_id":603459965380383,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56202,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:43:37.146411Z","timestamp":"2022-05-25T18:43:37.146411Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"endtime":"2022-05-25T18:43:37.146411Z","timestamp":"2022-05-25T18:43:37.146411Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":130,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:43:30.100801Z","timestamp":"2022-05-25T18:43:30.100801Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":272,"vxlan_id":0}
{"timestamp":"2022-05-25T18:42:43.074249+0000","flow_id":1982488060879504,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56188,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:42:37.121905Z","timestamp":"2022-05-25T18:42:37.121905Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":195,"vxlan_id":0}
{"endtime":"2022-05-25T18:42:37.121905Z","timestamp":"2022-05-25T18:42:37.121905Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":165,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:42:30.058107Z","timestamp":"2022-05-25T18:42:30.058107Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":293,"vxlan_id":0}
{"timestamp":"2022-05-25T18:41:43.059008+0000","flow_id":1451230667185818,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56175,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:41:37.101583Z","timestamp":"2022-05-25T18:41:37.101583Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":230,"vxlan_id":0}
{"endtime":"2022-05-25T18:41:37.101583Z","timestamp":"2022-05-25T18:41:37.101583Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":189,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:41:30.019079Z","timestamp":"2022-05-25T18:41:30.019079Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"timestamp":"2022-05-25T18:40:43.021938+0000","flow_id":2150152838794850,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56162,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:40:37.081429Z","timestamp":"2022-05-25T18:40:37.081429Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":276,"vxlan_id":0}
{"endtime":"2022-05-25T18:40:37.081429Z","timestamp":"2022-05-25T18:40:37.081429Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:40:29.224768Z","timestamp":"2022-05-25T18:40:29.224768Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":0}
{"timestamp":"2022-05-25T18:39:43.010351+0000","flow_id":624290541019499,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56145,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:39:37.062575Z","timestamp":"2022-05-25T18:39:37.062575Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":290,"vxlan_id":0}
{"endtime":"2022-05-25T18:39:37.062575Z","timestamp":"2022-05-25T18:39:37.062575Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":194,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:39:29.183325Z","timestamp":"2022-05-25T18:39:29.183325Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":258,"vxlan_id":0}
{"timestamp":"2022-05-25T18:38:42.999084+0000","flow_id":289323890128615,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56131,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:38:37.042427Z","timestamp":"2022-05-25T18:38:37.042427Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":225,"vxlan_id":0}
{"endtime":"2022-05-25T18:38:37.042427Z","timestamp":"2022-05-25T18:38:37.042427Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":3385,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:38:29.144866Z","timestamp":"2022-05-25T18:38:29.144866Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":283,"vxlan_id":0}
{"timestamp":"2022-05-25T18:37:42.981597+0000","flow_id":1007418795812467,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56115,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:37:37.022427Z","timestamp":"2022-05-25T18:37:37.022427Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":201,"vxlan_id":0}
{"endtime":"2022-05-25T18:37:37.022427Z","timestamp":"2022-05-25T18:37:37.022427Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":504,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:37:29.102278Z","timestamp":"2022-05-25T18:37:29.102278Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"timestamp":"2022-05-25T18:36:42.972776+0000","flow_id":1755260644937237,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56102,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:36:37.000826Z","timestamp":"2022-05-25T18:36:37.000826Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":181,"vxlan_id":0}
{"endtime":"2022-05-25T18:36:37.000826Z","timestamp":"2022-05-25T18:36:37.000826Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2504,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:36:29.067868Z","timestamp":"2022-05-25T18:36:29.067868Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":279,"vxlan_id":0}
{"timestamp":"2022-05-25T18:35:42.972725+0000","flow_id":1874385853921267,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56090,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:35:36.230140Z","timestamp":"2022-05-25T18:35:36.230140Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":191,"vxlan_id":0}
{"endtime":"2022-05-25T18:35:36.230140Z","timestamp":"2022-05-25T18:35:36.230140Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":486,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:35:29.033556Z","timestamp":"2022-05-25T18:35:29.033556Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":294,"vxlan_id":0}
{"timestamp":"2022-05-25T18:34:42.947643+0000","flow_id":993745755597799,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56073,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:34:36.209705Z","timestamp":"2022-05-25T18:34:36.209705Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":0}
{"endtime":"2022-05-25T18:34:36.209705Z","timestamp":"2022-05-25T18:34:36.209705Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:34:28.236099Z","timestamp":"2022-05-25T18:34:28.236099Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":701,"vxlan_id":0}
{"timestamp":"2022-05-25T18:33:42.931606+0000","flow_id":1238337696696467,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56059,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:33:36.189029Z","timestamp":"2022-05-25T18:33:36.189029Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":273,"vxlan_id":0}
{"endtime":"2022-05-25T18:33:36.189029Z","timestamp":"2022-05-25T18:33:36.189029Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":150,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:33:28.202140Z","timestamp":"2022-05-25T18:33:28.202140Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":266,"vxlan_id":0}
{"timestamp":"2022-05-25T18:32:42.911875+0000","flow_id":685369243393936,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56045,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:32:36.168415Z","timestamp":"2022-05-25T18:32:36.168415Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":251,"vxlan_id":0}
{"endtime":"2022-05-25T18:32:36.168415Z","timestamp":"2022-05-25T18:32:36.168415Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":158,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:32:28.174625Z","timestamp":"2022-05-25T18:32:28.174625Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":301,"vxlan_id":0}
{"timestamp":"2022-05-25T18:31:42.905685+0000","flow_id":1138413127246341,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56031,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:31:36.148577Z","timestamp":"2022-05-25T18:31:36.148577Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":197,"vxlan_id":0}
{"endtime":"2022-05-25T18:31:36.148577Z","timestamp":"2022-05-25T18:31:36.148577Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:31:28.145528Z","timestamp":"2022-05-25T18:31:28.145528Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"timestamp":"2022-05-25T18:30:42.894698+0000","flow_id":1660139980612944,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56018,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:30:36.128517Z","timestamp":"2022-05-25T18:30:36.128517Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":734,"vxlan_id":0}
{"endtime":"2022-05-25T18:30:36.128517Z","timestamp":"2022-05-25T18:30:36.128517Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:30:28.113503Z","timestamp":"2022-05-25T18:30:28.113503Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":247,"vxlan_id":0}
{"timestamp":"2022-05-25T18:29:42.866922+0000","flow_id":1613140149547589,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":56001,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:29:36.104196Z","timestamp":"2022-05-25T18:29:36.104196Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":715,"vxlan_id":0}
{"endtime":"2022-05-25T18:29:36.104196Z","timestamp":"2022-05-25T18:29:36.104196Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":176,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:29:28.081832Z","timestamp":"2022-05-25T18:29:28.081832Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":283,"vxlan_id":0}
{"timestamp":"2022-05-25T18:28:42.849941+0000","flow_id":368729206206855,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55989,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:28:36.083428Z","timestamp":"2022-05-25T18:28:36.083428Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":244,"vxlan_id":0}
{"endtime":"2022-05-25T18:28:36.083428Z","timestamp":"2022-05-25T18:28:36.083428Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":665,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:28:28.049521Z","timestamp":"2022-05-25T18:28:28.049521Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":278,"vxlan_id":0}
{"timestamp":"2022-05-25T18:27:42.828411+0000","flow_id":1811526828596000,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55972,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:27:36.062728Z","timestamp":"2022-05-25T18:27:36.062728Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":179,"vxlan_id":0}
{"endtime":"2022-05-25T18:27:36.062728Z","timestamp":"2022-05-25T18:27:36.062728Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:27:28.016473Z","timestamp":"2022-05-25T18:27:28.016473Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"timestamp":"2022-05-25T18:26:42.814643+0000","flow_id":983261708951811,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55958,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:26:36.043216Z","timestamp":"2022-05-25T18:26:36.043216Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"endtime":"2022-05-25T18:26:36.043216Z","timestamp":"2022-05-25T18:26:36.043216Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":208,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:26:27.235305Z","timestamp":"2022-05-25T18:26:27.235305Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":248,"vxlan_id":0}
{"timestamp":"2022-05-25T18:25:42.790641+0000","flow_id":2067637868090067,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55945,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:25:36.023316Z","timestamp":"2022-05-25T18:25:36.023316Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"endtime":"2022-05-25T18:25:36.023316Z","timestamp":"2022-05-25T18:25:36.023316Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":180,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:25:27.204275Z","timestamp":"2022-05-25T18:25:27.204275Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":248,"vxlan_id":0}
{"timestamp":"2022-05-25T18:24:42.771480+0000","flow_id":352182828963464,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55928,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:24:36.003685Z","timestamp":"2022-05-25T18:24:36.003685Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":217,"vxlan_id":0}
{"endtime":"2022-05-25T18:24:36.003685Z","timestamp":"2022-05-25T18:24:36.003685Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":169,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:24:27.168031Z","timestamp":"2022-05-25T18:24:27.168031Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":211,"vxlan_id":0}
{"timestamp":"2022-05-25T18:23:42.752437+0000","flow_id":1531567959602049,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55915,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:23:35.233434Z","timestamp":"2022-05-25T18:23:35.233434Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":260,"vxlan_id":0}
{"endtime":"2022-05-25T18:23:35.233434Z","timestamp":"2022-05-25T18:23:35.233434Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:23:27.136788Z","timestamp":"2022-05-25T18:23:27.136788Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":254,"vxlan_id":0}
{"timestamp":"2022-05-25T18:22:42.742508+0000","flow_id":1260952803742127,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55900,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:22:35.213118Z","timestamp":"2022-05-25T18:22:35.213118Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":259,"vxlan_id":0}
{"endtime":"2022-05-25T18:22:35.213118Z","timestamp":"2022-05-25T18:22:35.213118Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":203,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:22:27.106063Z","timestamp":"2022-05-25T18:22:27.106063Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":272,"vxlan_id":0}
{"timestamp":"2022-05-25T18:21:42.708346+0000","flow_id":2056060768012130,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55886,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:21:35.192834Z","timestamp":"2022-05-25T18:21:35.192834Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T18:21:35.192834Z","timestamp":"2022-05-25T18:21:35.192834Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":172,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:21:27.076742Z","timestamp":"2022-05-25T18:21:27.076742Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":292,"vxlan_id":0}
{"timestamp":"2022-05-25T18:20:42.699388+0000","flow_id":1005687857128423,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55871,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:20:35.173112Z","timestamp":"2022-05-25T18:20:35.173112Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":219,"vxlan_id":0}
{"endtime":"2022-05-25T18:20:35.173112Z","timestamp":"2022-05-25T18:20:35.173112Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:20:27.044034Z","timestamp":"2022-05-25T18:20:27.044034Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"timestamp":"2022-05-25T18:19:42.683465+0000","flow_id":1887309347569004,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55852,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:19:35.153023Z","timestamp":"2022-05-25T18:19:35.153023Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T18:19:35.153023Z","timestamp":"2022-05-25T18:19:35.153023Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:19:26.247512Z","timestamp":"2022-05-25T18:19:26.247512Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":253,"vxlan_id":0}
{"timestamp":"2022-05-25T18:18:42.667518+0000","flow_id":2069568428367079,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55839,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:18:35.132045Z","timestamp":"2022-05-25T18:18:35.132045Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":804,"vxlan_id":0}
{"endtime":"2022-05-25T18:18:35.132045Z","timestamp":"2022-05-25T18:18:35.132045Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:18:26.210012Z","timestamp":"2022-05-25T18:18:26.210012Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"timestamp":"2022-05-25T18:17:42.648222+0000","flow_id":1779013886860498,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55822,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:17:35.113292Z","timestamp":"2022-05-25T18:17:35.113292Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":233,"vxlan_id":0}
{"endtime":"2022-05-25T18:17:35.113292Z","timestamp":"2022-05-25T18:17:35.113292Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":165,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:17:26.170045Z","timestamp":"2022-05-25T18:17:26.170045Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":259,"vxlan_id":0}
{"timestamp":"2022-05-25T18:16:42.638599+0000","flow_id":110855027588314,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55810,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:16:35.093044Z","timestamp":"2022-05-25T18:16:35.093044Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":0}
{"endtime":"2022-05-25T18:16:35.093044Z","timestamp":"2022-05-25T18:16:35.093044Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":177,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:16:26.128384Z","timestamp":"2022-05-25T18:16:26.128384Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":288,"vxlan_id":0}
{"timestamp":"2022-05-25T18:15:42.608219+0000","flow_id":366079160238141,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":55795,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:15:35.072881Z","timestamp":"2022-05-25T18:15:35.072881Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":279,"vxlan_id":0}
{"endtime":"2022-05-25T18:15:35.072881Z","timestamp":"2022-05-25T18:15:35.072881Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":213,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:15:26.083972Z","timestamp":"2022-05-25T18:15:26.083972Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":306,"vxlan_id":0}
{"timestamp":"2022-05-25T18:14:42.584909+0000","flow_id":457570549675726,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60205,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:14:35.047526Z","timestamp":"2022-05-25T18:14:35.047526Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":0}
{"endtime":"2022-05-25T18:14:35.047526Z","timestamp":"2022-05-25T18:14:35.047526Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:14:26.043753Z","timestamp":"2022-05-25T18:14:26.043753Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":348,"vxlan_id":0}
{"timestamp":"2022-05-25T18:13:42.562048+0000","flow_id":823944140968328,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60193,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:13:35.027500Z","timestamp":"2022-05-25T18:13:35.027500Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":252,"vxlan_id":0}
{"endtime":"2022-05-25T18:13:35.027500Z","timestamp":"2022-05-25T18:13:35.027500Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":146,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:13:26.002544Z","timestamp":"2022-05-25T18:13:26.002544Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":226,"vxlan_id":0}
{"timestamp":"2022-05-25T18:12:42.532667+0000","flow_id":669310281980184,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60177,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:12:35.007589Z","timestamp":"2022-05-25T18:12:35.007589Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"endtime":"2022-05-25T18:12:35.007589Z","timestamp":"2022-05-25T18:12:35.007589Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:12:25.213897Z","timestamp":"2022-05-25T18:12:25.213897Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":217,"vxlan_id":0}
{"timestamp":"2022-05-25T18:11:42.520106+0000","flow_id":1127220363847605,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60163,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:11:34.237612Z","timestamp":"2022-05-25T18:11:34.237612Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":211,"vxlan_id":0}
{"endtime":"2022-05-25T18:11:34.237612Z","timestamp":"2022-05-25T18:11:34.237612Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:11:25.170775Z","timestamp":"2022-05-25T18:11:25.170775Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":256,"vxlan_id":0}
{"timestamp":"2022-05-25T18:10:42.511401+0000","flow_id":601482003138032,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60149,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:10:34.217007Z","timestamp":"2022-05-25T18:10:34.217007Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":208,"vxlan_id":0}
{"endtime":"2022-05-25T18:10:34.217007Z","timestamp":"2022-05-25T18:10:34.217007Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":195,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:10:25.131234Z","timestamp":"2022-05-25T18:10:25.131234Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":269,"vxlan_id":0}
{"timestamp":"2022-05-25T18:09:42.498920+0000","flow_id":83242655306543,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60131,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:09:34.195991Z","timestamp":"2022-05-25T18:09:34.195991Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":0}
{"endtime":"2022-05-25T18:09:34.195991Z","timestamp":"2022-05-25T18:09:34.195991Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":180,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:09:25.089915Z","timestamp":"2022-05-25T18:09:25.089915Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":285,"vxlan_id":0}
{"timestamp":"2022-05-25T18:08:42.466682+0000","flow_id":48296649998770,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60119,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:08:34.169522Z","timestamp":"2022-05-25T18:08:34.169522Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":268,"vxlan_id":0}
{"endtime":"2022-05-25T18:08:34.169522Z","timestamp":"2022-05-25T18:08:34.169522Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":664,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:08:25.049123Z","timestamp":"2022-05-25T18:08:25.049123Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":255,"vxlan_id":0}
{"timestamp":"2022-05-25T18:07:42.439324+0000","flow_id":1279895698057797,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60102,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T18:07:34.140946Z","timestamp":"2022-05-25T18:07:34.140946Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":228,"vxlan_id":0}
{"endtime":"2022-05-25T18:07:34.140946Z","timestamp":"2022-05-25T18:07:34.140946Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":201,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:07:24.247805Z","timestamp":"2022-05-25T18:07:24.247805Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":242,"vxlan_id":0}
{"timestamp":"2022-05-25T18:06:42.422977+0000","flow_id":1344842042061430,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60089,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:06:34.121275Z","timestamp":"2022-05-25T18:06:34.121275Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":273,"vxlan_id":0}
{"endtime":"2022-05-25T18:06:34.121275Z","timestamp":"2022-05-25T18:06:34.121275Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":153,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:06:24.207331Z","timestamp":"2022-05-25T18:06:24.207331Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":0}
{"timestamp":"2022-05-25T18:05:42.393469+0000","flow_id":1136705775532425,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60076,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:05:34.101460Z","timestamp":"2022-05-25T18:05:34.101460Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":280,"vxlan_id":0}
{"endtime":"2022-05-25T18:05:34.101460Z","timestamp":"2022-05-25T18:05:34.101460Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":174,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:05:24.164907Z","timestamp":"2022-05-25T18:05:24.164907Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":214,"vxlan_id":0}
{"timestamp":"2022-05-25T18:04:42.383209+0000","flow_id":1470377485833535,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60057,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:04:34.081644Z","timestamp":"2022-05-25T18:04:34.081644Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":233,"vxlan_id":0}
{"endtime":"2022-05-25T18:04:34.081644Z","timestamp":"2022-05-25T18:04:34.081644Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":148,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:04:24.126632Z","timestamp":"2022-05-25T18:04:24.126632Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":247,"vxlan_id":0}
{"timestamp":"2022-05-25T18:03:42.360474+0000","flow_id":1894645088811179,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60044,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:03:34.061267Z","timestamp":"2022-05-25T18:03:34.061267Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":0}
{"endtime":"2022-05-25T18:03:34.061267Z","timestamp":"2022-05-25T18:03:34.061267Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":148,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:03:24.090344Z","timestamp":"2022-05-25T18:03:24.090344Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":236,"vxlan_id":0}
{"timestamp":"2022-05-25T18:02:42.338471+0000","flow_id":202365693260341,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60029,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:02:34.041179Z","timestamp":"2022-05-25T18:02:34.041179Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":222,"vxlan_id":0}
{"endtime":"2022-05-25T18:02:34.041179Z","timestamp":"2022-05-25T18:02:34.041179Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":152,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:02:24.046796Z","timestamp":"2022-05-25T18:02:24.046796Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":286,"vxlan_id":0}
{"timestamp":"2022-05-25T18:01:42.320310+0000","flow_id":1922813623983274,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60015,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:01:34.018982Z","timestamp":"2022-05-25T18:01:34.018982Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":199,"vxlan_id":0}
{"endtime":"2022-05-25T18:01:34.018982Z","timestamp":"2022-05-25T18:01:34.018982Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":149,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:01:23.241506Z","timestamp":"2022-05-25T18:01:23.241506Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":276,"vxlan_id":0}
{"timestamp":"2022-05-25T18:00:42.307075+0000","flow_id":1937672059398056,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":60002,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T18:00:33.243160Z","timestamp":"2022-05-25T18:00:33.243160Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":0}
{"endtime":"2022-05-25T18:00:33.243160Z","timestamp":"2022-05-25T18:00:33.243160Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":2467405}
{"endtime":"2022-05-25T18:00:23.204328Z","timestamp":"2022-05-25T18:00:23.204328Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":271,"vxlan_id":0}
{"timestamp":"2022-05-25T17:59:42.299192+0000","flow_id":1681264655358084,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59985,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:59:33.224651Z","timestamp":"2022-05-25T17:59:33.224651Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":0}
{"endtime":"2022-05-25T17:59:33.224651Z","timestamp":"2022-05-25T17:59:33.224651Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":167,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:59:23.167823Z","timestamp":"2022-05-25T17:59:23.167823Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":244,"vxlan_id":0}
{"timestamp":"2022-05-25T17:58:42.281402+0000","flow_id":1016854685606140,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59971,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:58:33.207323Z","timestamp":"2022-05-25T17:58:33.207323Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":237,"vxlan_id":0}
{"endtime":"2022-05-25T17:58:33.207323Z","timestamp":"2022-05-25T17:58:33.207323Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":180,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:58:23.122126Z","timestamp":"2022-05-25T17:58:23.122126Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":260,"vxlan_id":0}
{"timestamp":"2022-05-25T17:57:42.250527+0000","flow_id":1763599170577114,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59954,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:57:33.188501Z","timestamp":"2022-05-25T17:57:33.188501Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":859,"vxlan_id":0}
{"endtime":"2022-05-25T17:57:33.188501Z","timestamp":"2022-05-25T17:57:33.188501Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:57:23.083599Z","timestamp":"2022-05-25T17:57:23.083599Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"timestamp":"2022-05-25T17:56:42.239490+0000","flow_id":228923599906176,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59942,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:56:33.167875Z","timestamp":"2022-05-25T17:56:33.167875Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":217,"vxlan_id":0}
{"endtime":"2022-05-25T17:56:33.167875Z","timestamp":"2022-05-25T17:56:33.167875Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:56:23.050337Z","timestamp":"2022-05-25T17:56:23.050337Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"timestamp":"2022-05-25T17:55:42.203592+0000","flow_id":1587615025206207,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59928,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:55:33.141130Z","timestamp":"2022-05-25T17:55:33.141130Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":223,"vxlan_id":0}
{"endtime":"2022-05-25T17:55:33.141130Z","timestamp":"2022-05-25T17:55:33.141130Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:55:23.016093Z","timestamp":"2022-05-25T17:55:23.016093Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":285,"vxlan_id":0}
{"timestamp":"2022-05-25T17:54:42.197856+0000","flow_id":1630324176107648,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59911,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:54:33.121499Z","timestamp":"2022-05-25T17:54:33.121499Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":262,"vxlan_id":0}
{"endtime":"2022-05-25T17:54:33.121499Z","timestamp":"2022-05-25T17:54:33.121499Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:54:22.224402Z","timestamp":"2022-05-25T17:54:22.224402Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":262,"vxlan_id":0}
{"timestamp":"2022-05-25T17:53:42.174276+0000","flow_id":251358349784293,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59897,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:53:33.101612Z","timestamp":"2022-05-25T17:53:33.101612Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":203,"vxlan_id":0}
{"endtime":"2022-05-25T17:53:33.101612Z","timestamp":"2022-05-25T17:53:33.101612Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:53:22.195751Z","timestamp":"2022-05-25T17:53:22.195751Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":247,"vxlan_id":0}
{"timestamp":"2022-05-25T17:52:42.157115+0000","flow_id":2036544322559468,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59882,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:52:33.077690Z","timestamp":"2022-05-25T17:52:33.077690Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":261,"vxlan_id":0}
{"endtime":"2022-05-25T17:52:33.077690Z","timestamp":"2022-05-25T17:52:33.077690Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":201,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:52:22.152652Z","timestamp":"2022-05-25T17:52:22.152652Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"timestamp":"2022-05-25T17:51:42.148330+0000","flow_id":302713265848833,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59868,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:51:33.055385Z","timestamp":"2022-05-25T17:51:33.055385Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":263,"vxlan_id":0}
{"endtime":"2022-05-25T17:51:33.055385Z","timestamp":"2022-05-25T17:51:33.055385Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":175,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:51:22.115067Z","timestamp":"2022-05-25T17:51:22.115067Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":249,"vxlan_id":0}
{"timestamp":"2022-05-25T17:50:42.127083+0000","flow_id":1447266211785036,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59855,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:50:33.035843Z","timestamp":"2022-05-25T17:50:33.035843Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":257,"vxlan_id":0}
{"endtime":"2022-05-25T17:50:33.035843Z","timestamp":"2022-05-25T17:50:33.035843Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":488,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:50:22.071132Z","timestamp":"2022-05-25T17:50:22.071132Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":265,"vxlan_id":0}
{"timestamp":"2022-05-25T17:49:42.114451+0000","flow_id":409947853990022,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59837,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:49:33.014783Z","timestamp":"2022-05-25T17:49:33.014783Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":216,"vxlan_id":0}
{"endtime":"2022-05-25T17:49:33.014783Z","timestamp":"2022-05-25T17:49:33.014783Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":179,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:49:22.033948Z","timestamp":"2022-05-25T17:49:22.033948Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":274,"vxlan_id":0}
{"timestamp":"2022-05-25T17:48:42.099097+0000","flow_id":705611251219354,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59824,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:48:32.245202Z","timestamp":"2022-05-25T17:48:32.245202Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"endtime":"2022-05-25T17:48:32.245202Z","timestamp":"2022-05-25T17:48:32.245202Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:48:21.245352Z","timestamp":"2022-05-25T17:48:21.245352Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":280,"vxlan_id":0}
{"timestamp":"2022-05-25T17:47:42.090370+0000","flow_id":735270143929712,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59805,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:47:32.225508Z","timestamp":"2022-05-25T17:47:32.225508Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":221,"vxlan_id":0}
{"endtime":"2022-05-25T17:47:32.225508Z","timestamp":"2022-05-25T17:47:32.225508Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":186,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:47:21.207624Z","timestamp":"2022-05-25T17:47:21.207624Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":325,"vxlan_id":0}
{"timestamp":"2022-05-25T17:46:42.068754+0000","flow_id":1344558495565058,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59793,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:46:32.206632Z","timestamp":"2022-05-25T17:46:32.206632Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":257,"vxlan_id":0}
{"endtime":"2022-05-25T17:46:32.206632Z","timestamp":"2022-05-25T17:46:32.206632Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":177,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:46:21.171973Z","timestamp":"2022-05-25T17:46:21.171973Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":287,"vxlan_id":0}
{"timestamp":"2022-05-25T17:45:42.058412+0000","flow_id":327342732260519,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59776,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:45:32.187669Z","timestamp":"2022-05-25T17:45:32.187669Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":273,"vxlan_id":0}
{"endtime":"2022-05-25T17:45:32.187669Z","timestamp":"2022-05-25T17:45:32.187669Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":178,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:45:21.136051Z","timestamp":"2022-05-25T17:45:21.136051Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":248,"vxlan_id":0}
{"timestamp":"2022-05-25T17:44:42.042802+0000","flow_id":1167917220259363,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59600,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:44:32.167903Z","timestamp":"2022-05-25T17:44:32.167903Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":273,"vxlan_id":0}
{"endtime":"2022-05-25T17:44:32.167903Z","timestamp":"2022-05-25T17:44:32.167903Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":209,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:44:21.100455Z","timestamp":"2022-05-25T17:44:21.100455Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":282,"vxlan_id":0}
{"timestamp":"2022-05-25T17:43:42.012736+0000","flow_id":1492187247096286,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59588,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T17:43:32.148795Z","timestamp":"2022-05-25T17:43:32.148795Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":190,"vxlan_id":0}
{"endtime":"2022-05-25T17:43:32.148795Z","timestamp":"2022-05-25T17:43:32.148795Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:43:21.062616Z","timestamp":"2022-05-25T17:43:21.062616Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":241,"vxlan_id":0}
{"timestamp":"2022-05-25T17:42:41.982086+0000","flow_id":2062885317637219,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59571,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T17:42:32.129444Z","timestamp":"2022-05-25T17:42:32.129444Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":239,"vxlan_id":0}
{"endtime":"2022-05-25T17:42:32.129444Z","timestamp":"2022-05-25T17:42:32.129444Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":212,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:42:21.027512Z","timestamp":"2022-05-25T17:42:21.027512Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":232,"vxlan_id":0}
{"timestamp":"2022-05-25T17:41:41.971407+0000","flow_id":1250754242660850,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59558,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:41:32.110876Z","timestamp":"2022-05-25T17:41:32.110876Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":202,"vxlan_id":0}
{"endtime":"2022-05-25T17:41:32.110876Z","timestamp":"2022-05-25T17:41:32.110876Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":197,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:41:20.246193Z","timestamp":"2022-05-25T17:41:20.246193Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":777,"vxlan_id":0}
{"timestamp":"2022-05-25T17:40:41.961138+0000","flow_id":2043023233477935,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59545,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:40:32.092772Z","timestamp":"2022-05-25T17:40:32.092772Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":809,"vxlan_id":0}
{"endtime":"2022-05-25T17:40:32.092772Z","timestamp":"2022-05-25T17:40:32.092772Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":161,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:40:20.211107Z","timestamp":"2022-05-25T17:40:20.211107Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":240,"vxlan_id":0}
{"timestamp":"2022-05-25T17:39:41.945730+0000","flow_id":166339417040550,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59528,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:39:32.074975Z","timestamp":"2022-05-25T17:39:32.074975Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":200,"vxlan_id":0}
{"endtime":"2022-05-25T17:39:32.074975Z","timestamp":"2022-05-25T17:39:32.074975Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:39:20.171998Z","timestamp":"2022-05-25T17:39:20.171998Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":254,"vxlan_id":0}
{"timestamp":"2022-05-25T17:38:41.926920+0000","flow_id":940427811341779,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59515,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:38:32.057378Z","timestamp":"2022-05-25T17:38:32.057378Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":225,"vxlan_id":0}
{"endtime":"2022-05-25T17:38:32.057378Z","timestamp":"2022-05-25T17:38:32.057378Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":399,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:38:20.133221Z","timestamp":"2022-05-25T17:38:20.133221Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":305,"vxlan_id":0}
{"timestamp":"2022-05-25T17:37:41.898778+0000","flow_id":313935960321580,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59500,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:37:32.039781Z","timestamp":"2022-05-25T17:37:32.039781Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":215,"vxlan_id":0}
{"endtime":"2022-05-25T17:37:32.039781Z","timestamp":"2022-05-25T17:37:32.039781Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":213,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:37:20.100047Z","timestamp":"2022-05-25T17:37:20.100047Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":254,"vxlan_id":0}
{"timestamp":"2022-05-25T17:36:41.882711+0000","flow_id":326103598723137,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59485,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:36:32.020137Z","timestamp":"2022-05-25T17:36:32.020137Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":193,"vxlan_id":0}
{"endtime":"2022-05-25T17:36:32.020137Z","timestamp":"2022-05-25T17:36:32.020137Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2773,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:36:20.063561Z","timestamp":"2022-05-25T17:36:20.063561Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":248,"vxlan_id":0}
{"timestamp":"2022-05-25T17:35:41.883603+0000","flow_id":2056101389232558,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59473,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T17:35:32.001225Z","timestamp":"2022-05-25T17:35:32.001225Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":734,"vxlan_id":0}
{"endtime":"2022-05-25T17:35:32.001225Z","timestamp":"2022-05-25T17:35:32.001225Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":192,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:35:20.023160Z","timestamp":"2022-05-25T17:35:20.023160Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":340,"vxlan_id":0}
{"timestamp":"2022-05-25T17:34:41.876407+0000","flow_id":251439879379037,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59456,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:34:31.231576Z","timestamp":"2022-05-25T17:34:31.231576Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":215,"vxlan_id":0}
{"endtime":"2022-05-25T17:34:31.231576Z","timestamp":"2022-05-25T17:34:31.231576Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":190,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:34:19.236465Z","timestamp":"2022-05-25T17:34:19.236465Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":297,"vxlan_id":0}
{"timestamp":"2022-05-25T17:33:41.868811+0000","flow_id":15635433470409,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59443,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:33:31.211590Z","timestamp":"2022-05-25T17:33:31.211590Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":213,"vxlan_id":0}
{"endtime":"2022-05-25T17:33:31.211590Z","timestamp":"2022-05-25T17:33:31.211590Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2432,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:33:19.195390Z","timestamp":"2022-05-25T17:33:19.195390Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":235,"vxlan_id":0}
{"timestamp":"2022-05-25T17:32:41.862934+0000","flow_id":866313832042074,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59428,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:32:31.188836Z","timestamp":"2022-05-25T17:32:31.188836Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":785,"vxlan_id":0}
{"endtime":"2022-05-25T17:32:31.188836Z","timestamp":"2022-05-25T17:32:31.188836Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":188,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:32:19.141886Z","timestamp":"2022-05-25T17:32:19.141886Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":229,"vxlan_id":0}
{"timestamp":"2022-05-25T17:31:41.849874+0000","flow_id":1716326510751128,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59414,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:31:31.169037Z","timestamp":"2022-05-25T17:31:31.169037Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":198,"vxlan_id":0}
{"endtime":"2022-05-25T17:31:31.169037Z","timestamp":"2022-05-25T17:31:31.169037Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":184,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:31:19.099385Z","timestamp":"2022-05-25T17:31:19.099385Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":232,"vxlan_id":0}
{"timestamp":"2022-05-25T17:30:41.835105+0000","flow_id":1011226020769054,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59400,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:30:31.149877Z","timestamp":"2022-05-25T17:30:31.149877Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":271,"vxlan_id":0}
{"endtime":"2022-05-25T17:30:31.149877Z","timestamp":"2022-05-25T17:30:31.149877Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":192,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:30:19.060150Z","timestamp":"2022-05-25T17:30:19.060150Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":280,"vxlan_id":0}
{"timestamp":"2022-05-25T17:29:41.810146+0000","flow_id":1921028939142435,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59384,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T17:29:31.130134Z","timestamp":"2022-05-25T17:29:31.130134Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":272,"vxlan_id":0}
{"endtime":"2022-05-25T17:29:31.130134Z","timestamp":"2022-05-25T17:29:31.130134Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:29:19.018305Z","timestamp":"2022-05-25T17:29:19.018305Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":246,"vxlan_id":0}
{"timestamp":"2022-05-25T17:28:41.804622+0000","flow_id":1248915945504557,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59371,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:28:31.111427Z","timestamp":"2022-05-25T17:28:31.111427Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"endtime":"2022-05-25T17:28:31.111427Z","timestamp":"2022-05-25T17:28:31.111427Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":172,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:28:18.223645Z","timestamp":"2022-05-25T17:28:18.223645Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":272,"vxlan_id":0}
{"timestamp":"2022-05-25T17:27:41.798731+0000","flow_id":1499162211068020,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59356,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:27:31.093203Z","timestamp":"2022-05-25T17:27:31.093203Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":215,"vxlan_id":0}
{"endtime":"2022-05-25T17:27:31.093203Z","timestamp":"2022-05-25T17:27:31.093203Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":182,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:27:18.187219Z","timestamp":"2022-05-25T17:27:18.187219Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":267,"vxlan_id":0}
{"timestamp":"2022-05-25T17:26:41.794678+0000","flow_id":894061444667570,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59342,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:26:31.073943Z","timestamp":"2022-05-25T17:26:31.073943Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":187,"vxlan_id":0}
{"endtime":"2022-05-25T17:26:31.073943Z","timestamp":"2022-05-25T17:26:31.073943Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":195,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:26:18.147988Z","timestamp":"2022-05-25T17:26:18.147988Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":231,"vxlan_id":0}
{"timestamp":"2022-05-25T17:25:41.787571+0000","flow_id":1630742821338424,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59327,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:25:31.054296Z","timestamp":"2022-05-25T17:25:31.054296Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":231,"vxlan_id":0}
{"endtime":"2022-05-25T17:25:31.054296Z","timestamp":"2022-05-25T17:25:31.054296Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":170,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:25:18.113529Z","timestamp":"2022-05-25T17:25:18.113529Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":329,"vxlan_id":0}
{"timestamp":"2022-05-25T17:24:41.780540+0000","flow_id":165420235071993,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59311,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:24:31.029439Z","timestamp":"2022-05-25T17:24:31.029439Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":251,"vxlan_id":0}
{"endtime":"2022-05-25T17:24:31.029439Z","timestamp":"2022-05-25T17:24:31.029439Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":170,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:24:18.080318Z","timestamp":"2022-05-25T17:24:18.080318Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":321,"vxlan_id":0}
{"timestamp":"2022-05-25T17:23:41.745087+0000","flow_id":360609314854669,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59298,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:23:31.010331Z","timestamp":"2022-05-25T17:23:31.010331Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":283,"vxlan_id":0}
{"endtime":"2022-05-25T17:23:31.010331Z","timestamp":"2022-05-25T17:23:31.010331Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":185,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:23:18.045980Z","timestamp":"2022-05-25T17:23:18.045980Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":794,"vxlan_id":0}
{"timestamp":"2022-05-25T17:22:41.738534+0000","flow_id":819741314907532,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59282,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:22:30.240357Z","timestamp":"2022-05-25T17:22:30.240357Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":222,"vxlan_id":0}
{"endtime":"2022-05-25T17:22:30.240357Z","timestamp":"2022-05-25T17:22:30.240357Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":173,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:22:18.006149Z","timestamp":"2022-05-25T17:22:18.006149Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":259,"vxlan_id":0}
{"timestamp":"2022-05-25T17:21:41.707518+0000","flow_id":567719072466048,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59269,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:21:30.221945Z","timestamp":"2022-05-25T17:21:30.221945Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":210,"vxlan_id":0}
{"endtime":"2022-05-25T17:21:30.221945Z","timestamp":"2022-05-25T17:21:30.221945Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":167,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:21:17.219490Z","timestamp":"2022-05-25T17:21:17.219490Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":284,"vxlan_id":0}
{"timestamp":"2022-05-25T17:20:41.681780+0000","flow_id":1781363009740666,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59254,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:20:30.204009Z","timestamp":"2022-05-25T17:20:30.204009Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":223,"vxlan_id":0}
{"endtime":"2022-05-25T17:20:30.204009Z","timestamp":"2022-05-25T17:20:30.204009Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":2296,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:20:17.168707Z","timestamp":"2022-05-25T17:20:17.168707Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":255,"vxlan_id":0}
{"timestamp":"2022-05-25T17:19:41.660796+0000","flow_id":1327692052822249,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59235,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:19:30.186114Z","timestamp":"2022-05-25T17:19:30.186114Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":260,"vxlan_id":0}
{"endtime":"2022-05-25T17:19:30.186114Z","timestamp":"2022-05-25T17:19:30.186114Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":444,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:19:17.130189Z","timestamp":"2022-05-25T17:19:17.130189Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":517,"vxlan_id":0}
{"timestamp":"2022-05-25T17:18:41.639540+0000","flow_id":290360810125749,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59223,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"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"}}
{"endtime":"2022-05-25T17:18:30.168259Z","timestamp":"2022-05-25T17:18:30.168259Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":196,"vxlan_id":0}
{"endtime":"2022-05-25T17:18:30.168259Z","timestamp":"2022-05-25T17:18:30.168259Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":166,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:18:17.094077Z","timestamp":"2022-05-25T17:18:17.094077Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":424,"vxlan_id":0}
{"timestamp":"2022-05-25T17:17:41.629517+0000","flow_id":386471436850026,"in_iface":"\\Device\\NPF_{A38A7903-B96D-49BB-9429-F9CCE8548A9C}","event_type":"tls","src_ip":"10.0.1.14","src_port":59207,"dest_ip":"10.0.1.12","dest_port":8089,"proto":"TCP","tls":{"subject":"CN=SplunkServerDefaultCert, O=SplunkUser","issuerdn":"C=US, ST=CA, L=San Francisco, O=Splunk, CN=SplunkCommonCA, Email=support@splunk.com","serial":"00:94:B1:FC:2D:43:FA:AA:B5","fingerprint":"","version":"TLS 1.2","notbefore":"2022-04-27T13:44:58","notafter":"2025-04-26T13:44:58","certificate":"MIIDMjCCAhoCCQCUsfwtQ/qqtTANBgkqhkiG9w0BAQsFADB/MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoMBlNwbHVuazEXMBUGA1UEAwwOU3BsdW5rQ29tbW9uQ0ExITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAc3BsdW5rLmNvbTAeFw0yMjA0MjcxMzQ0NThaFw0yNTA0MjYxMzQ0NThaMDcxIDAeBgNVBAMMF1NwbHVua1NlcnZlckRlZmF1bHRDZXJ0MRMwEQYDVQQKDApTcGx1bmtVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFLm+EDWY8O5RGjNVkyH4evi8IFgac/DyHue0QLTdfaRpNn639nEw9fmbqkD2H4Efqsera60ZDsW+Ee/mG284wSLfjhRr71I/H72nDoMaDf7Rai1obn0DR7gPMmqMbI6F9RZ7GiyPfISTchzVtRKi7JQ+cKl8C0kfxgzWjMO3Q2yxnkWPeKoTlKyc8IZHsQ9PKgoAVWUYpwh9vJOfmWtVZ3MvlkdDU1IGW2tJPLuSdaWMQMvPETnyhfEc9NAK1P8tqieUFtLv8VtDapSPguz9OL6QebQvi6Ujf+SoeRSqrHTxfDcsZGigyMlaVkbwflL0vbfqXb0A0HCgbHLXkRREwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBSNtatIicceJlEj1SwJKBL/pAQnIVgWOUkeWOLiuJVX4Yrv0BFCojwZXjF1nFGu/JCi0pLrZxhGyGL38D0O/kbnfLdHKf8m3iMdSPNyEixKYiYRuY3gVZDvpaOJZ4ijLDHZXFX31YpeUMj4LqMIxsLwjNmovIdBloFJZleu2YXMOqtSWe2PzpZC4r0+7PLDvAT0Z8r9+xWQG/WDlHn3LAgB30Yl6S+9ffB2gE/Rm5P9YEh7PNbQx7TD6BaEHUiXbrouDqa842t22jLGtATF020ySXAbwscj18WEWQUX/cVfQdJx063cl0ldUCaOxrmRveFfLUOnPkjj5CC22vKRcec"}}
{"endtime":"2022-05-25T17:17:30.149670Z","timestamp":"2022-05-25T17:17:30.149670Z","count":1,"src_ip":"10.0.1.18","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":280,"vxlan_id":0}
{"endtime":"2022-05-25T17:17:30.149670Z","timestamp":"2022-05-25T17:17:30.149670Z","count":1,"src_ip":"10.0.1.14","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":169,"vxlan_id":2467405}
{"endtime":"2022-05-25T17:17:17.057249Z","timestamp":"2022-05-25T17:17:17.057249Z","count":1,"src_ip":"10.0.1.20","ssl_issuer":"C = US, ST = CA, L = San Francisco, O = Splunk, CN = SplunkCommonCA, emailAddress = support@splunk.com","ssl_cert_md5":"D1DC2E32B680EB15AC57ACC90578E606","ssl_cert_sha1":"792BF929951C46A494D25E1377914E4050D9F31C","ssl_cert_sha256":"40EEA5A0348D91965B0951C4B76B05A6C4BCC24D200EEE94E8739B0C5C97951D","ssl_subject":"CN = SplunkServerDefaultCert, O = SplunkUser","ssl_validity_end":"Apr 26 13:44:58 2025 GMT","ssl_validity_start":"Apr 27 13:44:58 2022 GMT","ssl_cert_self_signed":0,"initial_rtt":231,"vxlan_id":0}