{"actor": {"id": "00ufb5gta21oowKfZ5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -43.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102xP96gJgFT32rsDF3o7IHRg"}, "displayMessage": "Reset factor for user", "eventType": "user.mfa.factor.deactivate", "outcome": {"result": "SUCCESS", "reason": "User reset OKTA_VERIFY_PUSH factor"}, "published": "2024-03-11T16:28:18.167Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"requestId": "5e32024c5d1d1ed06a7d7d7bcce98d24", "dtHash": "3b76be837500675c6436185fd1a47a89f6eb66f513476bc98ef010e9fb7e772e", "requestUri": "/api/v1/devices/guofgkgif6Rfvzahn5d7/lifecycle/deactivate", "url": "/api/v1/devices/guofgkgif6Rfvzahn5d7/lifecycle/deactivate?"}}, "legacyEventType": "core.user.factor.deactivate", "transaction": {"type": "WEB", "id": "5e32024c5d1d1ed06a7d7d7bcce98d24", "detail": {}}, "uuid": "5e2d38e1-dfc4-11ee-be83-538191b64b24", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 40.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15o@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}]}
{"actor": {"id": "00ufb5gta21oowKfZ5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -43.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102xP96gJgFT32rsDF3o7IHRg"}, "displayMessage": "Reset factor for user", "eventType": "user.mfa.factor.deactivate", "outcome": {"result": "SUCCESS", "reason": "User reset OKTA_SOFT_TOKEN factor"}, "published": "2024-03-11T16:28:18.155Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"requestId": "5e32024c5d1d1ed06a7d7d7bcce98d24", "dtHash": "3b76be837500675c6436185fd1a47a89f6eb66f513476bc98ef010e9fb7e772e", "requestUri": "/api/v1/devices/guofgkgif6Rfvzahn5d7/lifecycle/deactivate", "url": "/api/v1/devices/guofgkgif6Rfvzahn5d7/lifecycle/deactivate?"}}, "legacyEventType": "core.user.factor.deactivate", "transaction": {"type": "WEB", "id": "5e32024c5d1d1ed06a7d7d7bcce98d24", "detail": {}}, "uuid": "5e2b641e-dfc4-11ee-be83-538191b64b24", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 40.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}]}
{"actor": {"id": "00ufb5gta21oowKfZ5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 20.7652, "lon": -43.9588}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102xP96gJgFT32rsDF3o7IHRg"}, "displayMessage": "Reset factor for user", "eventType": "user.mfa.factor.deactivate", "outcome": {"result": "SUCCESS", "reason": "User reset SIGNED_NONCE factor"}, "published": "2024-03-11T16:28:18.144Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"requestId": "5e32024c5d1d1ed06a7d7d7bcce98d24", "dtHash": "3b76be837500675c6436185fd1a47a89f6eb66f513476bc98ef010e9fb7e772e", "requestUri": "/api/v1/devices/guofgkgif6Rfvzahn5d7/lifecycle/deactivate", "url": "/api/v1/devices/guofgkgif6Rfvzahn5d7/lifecycle/deactivate?"}}, "legacyEventType": "core.user.factor.deactivate", "transaction": {"type": "WEB", "id": "5e32024c5d1d1ed06a7d7d7bcce98d24", "detail": {}}, "uuid": "5e29b66b-dfc4-11ee-be83-538191b64b24", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10065", "geolocation": {"lat": 40.7652, "lon": -73.9588}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15o@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}]}