{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxkrV0kJrQSbe-I3yZfh6Jug"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:14:11.819Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "b4e26f7e20539c10efb72045d0644923", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "4851aab8817e565d3700436a085b6b08", "authenticatorMethodChallengeTime": "2024-03-05T17:14:09.788Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftebhEGY9ju3wh0cQsLXvuD9i1Gq2N6Dix/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftebhEGY9ju3wh0cQsLXvuD9i1Gq2N6Dix/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "4851aab8817e565d3700436a085b6b08", "detail": {}}, "uuid": "c900abf8-db13-11ee-915f-81ce500def4f", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxkrV0kJrQSbe-I3yZfh6Jug"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:14:09.671Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "b4e26f7e20539c10efb72045d0644923", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "29c165a9513cd87588e67487e71fcf86", "authenticatorMethodChallengeTime": "2024-03-05T17:14:06.260Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "29c165a9513cd87588e67487e71fcf86", "detail": {}}, "uuid": "c7b8ea29-db13-11ee-b621-457cf516b847", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx-Gb6a0z-Qo-lyIDIp67kUg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:14:02.461Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "a3fd9f79898457030c1cdc5a83df23f2", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "3f527472c6530f9364557abdd0fc88c8", "authenticatorMethodChallengeTime": "2024-03-05T17:14:00.122Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftjTy0IHRvfl1Whslc3KFo1mXGtZ7LzEe9/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftjTy0IHRvfl1Whslc3KFo1mXGtZ7LzEe9/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "3f527472c6530f9364557abdd0fc88c8", "detail": {}}, "uuid": "c36cc16b-db13-11ee-999c-fb83059b366f", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx-Gb6a0z-Qo-lyIDIp67kUg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:59.973Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "a3fd9f79898457030c1cdc5a83df23f2", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "7b1dd4a9231a110865ce3d35b1b568d2", "authenticatorMethodChallengeTime": "2024-03-05T17:13:57.739Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "7b1dd4a9231a110865ce3d35b1b568d2", "detail": {}}, "uuid": "c1f11d71-db13-11ee-9b76-e7abcfe6f215", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx17jwJNjkR-aa17Z-kVYV7A"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:54.506Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "0b97a4369b4be43bbe1c58eb45854bcd", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "65e9f2be3d385f37fd00699d8252ace8", "authenticatorMethodChallengeTime": "2024-03-05T17:13:51.553Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftghovBQLrdtdtV2JEpNwh-atmL1sOaokm/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftghovBQLrdtdtV2JEpNwh-atmL1sOaokm/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "65e9f2be3d385f37fd00699d8252ace8", "detail": {}}, "uuid": "beaeeb6e-db13-11ee-abfd-e9cc78898d8f", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx17jwJNjkR-aa17Z-kVYV7A"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:51.438Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "0b97a4369b4be43bbe1c58eb45854bcd", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "ceebc464e226b43ccd4804f8be8d1338", "authenticatorMethodChallengeTime": "2024-03-05T17:13:48.825Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "ceebc464e226b43ccd4804f8be8d1338", "detail": {}}, "uuid": "bcdac73f-db13-11ee-8e80-c1472063399a", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxRD3HfhpWRaWwpvXJU2Wx0Q"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:45.164Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "4becdda3b7876476bec196b17a5d17ec", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "bd270ffdda7da1bbd00ba4874b935835", "authenticatorMethodChallengeTime": "2024-03-05T17:13:42.786Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ft4DPqtHQ7MbTMnMG4fQ3yN8x7u0aDEkKe/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ft4DPqtHQ7MbTMnMG4fQ3yN8x7u0aDEkKe/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "bd270ffdda7da1bbd00ba4874b935835", "detail": {}}, "uuid": "b91d70db-db13-11ee-b24b-6d537ebcc61a", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxRD3HfhpWRaWwpvXJU2Wx0Q"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:42.661Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "4becdda3b7876476bec196b17a5d17ec", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "2fac9758e1441f92346d7d09870a8d07", "authenticatorMethodChallengeTime": "2024-03-05T17:13:39.894Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "2fac9758e1441f92346d7d09870a8d07", "detail": {}}, "uuid": "b79f839b-db13-11ee-915f-81ce500def4f", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxUXWxZgSPQXGfW9nESYVSqA"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:36.059Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "1c6dcf5e72805c43fffff4284ac8abf5", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "330a323f549b99f068170ba9489d71ac", "authenticatorMethodChallengeTime": "2024-03-05T17:13:33.884Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftUcKfhZrVvzFdROOw1ZfZ3BBI_u2SaH03/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftUcKfhZrVvzFdROOw1ZfZ3BBI_u2SaH03/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "330a323f549b99f068170ba9489d71ac", "detail": {}}, "uuid": "b3b02153-db13-11ee-820e-9b729c0be761", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxUXWxZgSPQXGfW9nESYVSqA"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:33.769Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "1c6dcf5e72805c43fffff4284ac8abf5", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "56586c0f4731f7b03caab6c49d61613c", "authenticatorMethodChallengeTime": "2024-03-05T17:13:31.289Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "56586c0f4731f7b03caab6c49d61613c", "detail": {}}, "uuid": "b252b3b7-db13-11ee-8ce5-493d3e5f17d6", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx7LzFGuONTz6vEnNg0QtRzg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:27.896Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "fd575af503200dae63a29b51f5447b5d", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "0c1886134022096b242f804a69feb152", "authenticatorMethodChallengeTime": "2024-03-05T17:13:25.705Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftPC6hnRPAEHsfiXT5wWAYgTtQAOXHQ5wF/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftPC6hnRPAEHsfiXT5wWAYgTtQAOXHQ5wF/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "0c1886134022096b242f804a69feb152", "detail": {}}, "uuid": "aed28e66-db13-11ee-b200-57a5e28fa6ff", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx7LzFGuONTz6vEnNg0QtRzg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:25.591Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "fd575af503200dae63a29b51f5447b5d", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "2d6627106a7e4538ad68e5e76fa0a54e", "authenticatorMethodChallengeTime": "2024-03-05T17:13:23.303Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "2d6627106a7e4538ad68e5e76fa0a54e", "detail": {}}, "uuid": "ad72d704-db13-11ee-af57-f3d6e1a21c89", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxQ2k90UJRQUW3IYhEfbSF9A"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:20.588Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "7483ff10cb3ac9440f9007439fd0adab", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "2f27705f30ea17ef28bcd61ab2953c4e", "authenticatorMethodChallengeTime": "2024-03-05T17:13:17.614Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/fti0MT3H8Dw2HrPZE9S0sfgdY8RgCHpmZt/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/fti0MT3H8Dw2HrPZE9S0sfgdY8RgCHpmZt/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "2f27705f30ea17ef28bcd61ab2953c4e", "detail": {}}, "uuid": "aa77716e-db13-11ee-ba0c-83340c10c07e", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxQ2k90UJRQUW3IYhEfbSF9A"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:17.503Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "7483ff10cb3ac9440f9007439fd0adab", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "73e0775656f24a42f5f8de16d9a9d735", "authenticatorMethodChallengeTime": "2024-03-05T17:13:15.298Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "73e0775656f24a42f5f8de16d9a9d735", "detail": {}}, "uuid": "a8a0b4f5-db13-11ee-b621-457cf516b847", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx5i2TNfnGSz-npj82ZWVgpg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:13.312Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "3b331330db08333fea20fb17cd6e0426", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "95c08ee3524f1a27ee49211b6a6d695d", "authenticatorMethodChallengeTime": "2024-03-05T17:13:11.218Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ft_vPgjwQqk5RDGDG8d9V-MO33XphEJjKZ/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ft_vPgjwQqk5RDGDG8d9V-MO33XphEJjKZ/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "95c08ee3524f1a27ee49211b6a6d695d", "detail": {}}, "uuid": "a6213685-db13-11ee-9a94-b342bccb63da", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx5i2TNfnGSz-npj82ZWVgpg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:11.102Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "3b331330db08333fea20fb17cd6e0426", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "0aaeccb331c2d08b7d2e540511290ff9", "authenticatorMethodChallengeTime": "2024-03-05T17:13:08.420Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "0aaeccb331c2d08b7d2e540511290ff9", "detail": {}}, "uuid": "a4cffed4-db13-11ee-af57-f3d6e1a21c89", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxz5cdCiTjTiinpRjwMrjOcg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:13:06.015Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "34584994dc4dbec49003dc1350dcda61", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "7f40fd4f2bb30a780f0e6fe20206fb7c", "authenticatorMethodChallengeTime": "2024-03-05T17:13:03.828Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftNTMweCUXeBl8_5BNSA0diRaIa5leYWlq/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftNTMweCUXeBl8_5BNSA0diRaIa5leYWlq/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "7f40fd4f2bb30a780f0e6fe20206fb7c", "detail": {}}, "uuid": "a1c7c779-db13-11ee-849c-030e99e06db7", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxz5cdCiTjTiinpRjwMrjOcg"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:13:03.706Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "34584994dc4dbec49003dc1350dcda61", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "50534c3927c7aaf1b0c6f37e89e71ac5", "authenticatorMethodChallengeTime": "2024-03-05T17:12:59.567Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "50534c3927c7aaf1b0c6f37e89e71ac5", "detail": {}}, "uuid": "a06773b6-db13-11ee-b621-457cf516b847", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxGYwGt3ZgR82O_zOdhF8a9Q"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:57.163Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "3ae83602f697978ec8fb519c937c1f17", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "270879b8b37c40c49c02ea1226917dff", "authenticatorMethodChallengeTime": "2024-03-05T17:12:53.908Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftT-vq6S70-qFC4i7fuNCxA33d3N6RyYom/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftT-vq6S70-qFC4i7fuNCxA33d3N6RyYom/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "270879b8b37c40c49c02ea1226917dff", "detail": {}}, "uuid": "9c811223-db13-11ee-9b09-397b8f897d74", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxGYwGt3ZgR82O_zOdhF8a9Q"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:12:53.770Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "3ae83602f697978ec8fb519c937c1f17", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "9b6ac68bd4b1bfe2a133386ba4c064f3", "authenticatorMethodChallengeTime": "2024-03-05T17:12:49.563Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "9b6ac68bd4b1bfe2a133386ba4c064f3", "detail": {}}, "uuid": "9a7b573a-db13-11ee-b24b-6d537ebcc61a", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxkGX908EPQUGQ9atkIIWOLw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:44.975Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "409996511cb3da0c7a9dddadad707356", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "20d795f41883a4d944848bc7edfbee4b", "authenticatorMethodChallengeTime": "2024-03-05T17:12:42.242Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftAf4YaMxDB6MkWby2e4SgsP85QkY-Qm2d/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftAf4YaMxDB6MkWby2e4SgsP85QkY-Qm2d/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "20d795f41883a4d944848bc7edfbee4b", "detail": {}}, "uuid": "953d5405-db13-11ee-81f3-45d33b91d3ec", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxkGX908EPQUGQ9atkIIWOLw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:12:42.108Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "409996511cb3da0c7a9dddadad707356", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "a08ef655264df098a516676b2e8c930b", "authenticatorMethodChallengeTime": "2024-03-05T17:12:39.361Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "a08ef655264df098a516676b2e8c930b", "detail": {}}, "uuid": "9387dcb6-db13-11ee-a7fa-afb7837002bb", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxnt1gNhQASXKXmsXcIyROzQ"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:35.301Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "6cf9180f409c30a820c552bc9bb205cd", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "ad85897d12d8f96ba5cab91b04300058", "authenticatorMethodChallengeTime": "2024-03-05T17:12:32.713Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftNjLxZ8z8ikTc1NV-k4CaoGEh9BQFDUm8/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftNjLxZ8z8ikTc1NV-k4CaoGEh9BQFDUm8/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "ad85897d12d8f96ba5cab91b04300058", "detail": {}}, "uuid": "8f793172-db13-11ee-9ae5-63aa3cc8107e", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxnt1gNhQASXKXmsXcIyROzQ"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:12:32.591Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "6cf9180f409c30a820c552bc9bb205cd", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "e9a96131a5472eb46da5b68954ce7835", "authenticatorMethodChallengeTime": "2024-03-05T17:12:29.687Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "e9a96131a5472eb46da5b68954ce7835", "detail": {}}, "uuid": "8ddbaeb9-db13-11ee-999c-fb83059b366f", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx9SmJ3YEQTD67Ejr5xD0KNA"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:24.273Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "a1de45baa34f6c051684ac1691308b3c", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "6a2bd8866a2ad93f0011f0777696b78c", "authenticatorMethodChallengeTime": "2024-03-05T17:12:21.650Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftJQFvnwbb77GM3my2GxogdXRpkiArKd2j/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftJQFvnwbb77GM3my2GxogdXRpkiArKd2j/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "6a2bd8866a2ad93f0011f0777696b78c", "detail": {}}, "uuid": "88e674b5-db13-11ee-ae7c-57dd17b1dae4", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idx9SmJ3YEQTD67Ejr5xD0KNA"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:12:21.531Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "a1de45baa34f6c051684ac1691308b3c", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "65e554aee0a567901b5aaff702f20526", "authenticatorMethodChallengeTime": "2024-03-05T17:12:18.917Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "65e554aee0a567901b5aaff702f20526", "detail": {}}, "uuid": "87440ef3-db13-11ee-8e80-c1472063399a", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxa7_znUX1SnW5181dYBioLw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:16.149Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "0f628434434fb28ccb208540879560a0", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "7ba481ac17e9b0bb6866c1d251283745", "authenticatorMethodChallengeTime": "2024-03-05T17:12:12.903Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftomShXH8Mx2u_ozwqX4TixcRx1t6ymf6z/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftomShXH8Mx2u_ozwqX4TixcRx1t6ymf6z/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "7ba481ac17e9b0bb6866c1d251283745", "detail": {}}, "uuid": "840ed484-db13-11ee-849c-030e99e06db7", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxa7_znUX1SnW5181dYBioLw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:12:12.783Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "0f628434434fb28ccb208540879560a0", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "bdc4924b58b924c67af1806e44fdf1be", "authenticatorMethodChallengeTime": "2024-03-05T17:12:10.063Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "bdc4924b58b924c67af1806e44fdf1be", "detail": {}}, "uuid": "820d3887-db13-11ee-9aac-bde5171569b7", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxuCrccqsMQZK1tEVS8mn7Rw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:06.894Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "58e3dc117fd32498c8d372394ad6dd4b", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "9ace597fa7f8486a9fe2be2bcdfc3c59", "authenticatorMethodChallengeTime": "2024-03-05T17:12:03.691Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/fts9E-mdKIp9Edo3xxhH82h6IRtSqiBqNA/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/fts9E-mdKIp9Edo3xxhH82h6IRtSqiBqNA/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "9ace597fa7f8486a9fe2be2bcdfc3c59", "detail": {}}, "uuid": "7e8aa1cc-db13-11ee-8ce5-493d3e5f17d6", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxuCrccqsMQZK1tEVS8mn7Rw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:12:03.560Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "58e3dc117fd32498c8d372394ad6dd4b", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "1e77b967e3ecb28af5ea40d78286b244", "authenticatorMethodChallengeTime": "2024-03-05T17:11:57.896Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "1e77b967e3ecb28af5ea40d78286b244", "detail": {}}, "uuid": "7c8de699-db13-11ee-9a94-b342bccb63da", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxuCrccqsMQZK1tEVS8mn7Rw"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:12:00.734Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "58e3dc117fd32498c8d372394ad6dd4b", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "1b950eec11877eef2b060793eed1701d", "authenticatorMethodChallengeTime": "2024-03-05T17:11:57.896Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "1b950eec11877eef2b060793eed1701d", "detail": {}}, "uuid": "7adeb033-db13-11ee-b24b-6d537ebcc61a", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "B7F62B65BN.com.okta.mobile/9.10.0 OktaDeviceSDK/0.0.1 iOS/16.3.1 Apple/iPhone15,2 91E89F7A-6598-4D4E-BAEC-2C1F902600BF", "os": "iOS", "browser": "UNKNOWN"}, "zone": "null", "device": "Mobile", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxrn8-L4l_SLiHyc_OYBwP8A"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-05T17:11:51.616Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "8709b7336e17b94927d6c64bf2a4204a", "pushOnlyResponseType": "OV_RESPONSE_DENY", "requestId": "68c0816ed392eaa36ef4d99ee252ce32", "authenticatorMethodChallengeTime": "2024-03-05T17:11:44.658Z", "requestUri": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftN2sR916dPeoeGrTXjNPE2LEISBvfPq-A/verify", "threatSuspected": "false", "factor": "OKTA_VERIFY_PUSH", "factorIntent": "AUTHENTICATION", "pushWithNumberChallengeResponseType": "OV_WITH_CHALLENGE_RESPONSE_NOT_APPLICABLE", "url": "/api/v1/authn/factors/opffj0a730LTMxOz85d7/transactions/ftN2sR916dPeoeGrTXjNPE2LEISBvfPq-A/verify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "68c0816ed392eaa36ef4d99ee252ce32", "detail": {}}, "uuid": "756f64f2-db13-11ee-af85-f3aa7b184f13", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "pfdfj0a72ycaAyqWC5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Okta Verify", "detailEntry": {"methodTypeUsed": "Get a push notification"}}]}
{"actor": {"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36", "os": "Mac OS 14.3.1 (Sonoma)", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxrn8-L4l_SLiHyc_OYBwP8A"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2024-03-05T17:11:44.502Z", "securityContext": {"asNumber": 12271, "asOrg": "twc internal spectrum", "isp": "charter communications inc", "domain": "rr.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "8709b7336e17b94927d6c64bf2a4204a", "deviceFingerprint": "8b9c877e46a3386eb0f68b6ddaab3e51", "requestId": "1224d2254ae438850f536c74179712e2", "authenticatorMethodChallengeTime": "2024-03-05T17:11:21.624Z", "dtHash": "46cdb4e9a86702a418888c7527035133bda72a6a661123a480afe34713b8309c", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_success", "transaction": {"type": "WEB", "id": "1224d2254ae438850f536c74179712e2", "detail": {}}, "uuid": "7131e208-db13-11ee-9083-0ba968dc1b96", "version": "0", "request": {"ipChain": [{"ip": "120.1.121.43", "geographicalContext": {"city": "Ohio", "state": "Ohio", "country": "United States", "postalCode": "10022", "geolocation": {"lat": 12.763, "lon": -73.9926}}, "version": "V4", "source": null}]}, "target": [{"id": "00uffks4r9kkYNxpj5d7", "type": "User", "alternateId": "user15@splunkresearch.com", "displayName": "user15 2 V", "detailEntry": null}, {"id": "lae1q8qrumZr3GjRh5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password", "methodUsedVerifiedProperties": "[USER_PRESENCE]"}}]}