Loading investigation data…
WorkspaceEvents
SIMULATED TELEMETRY
Canonical, immutable events from four simulated sources.
| Time (UTC) | Event | Source | Actor | Resource / endpoint | Outcome |
|---|---|---|---|---|---|
| 09:29:242026-09-15 | Account query accessed 66 recordsEVT-003833{
"event_id": "EVT-003833",
"timestamp": "2026-09-15T09:29:24Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-017",
"username": "atlas.engineer.17",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0009",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.27",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-017",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-017"
},
"attributes": {
"records_accessed": 66,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003833"
}
} | Atlas | atlas.engineer.17192.0.2.27 | /v1/accounts/positions | Success |
| 09:29:232026-09-15 | Account query accessed 43 recordsEVT-001453{
"event_id": "EVT-001453",
"timestamp": "2026-09-15T09:29:23Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-002",
"username": "atlas.engineer.02",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0086",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.12",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-002",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-002"
},
"attributes": {
"records_accessed": 43,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001453"
}
} | Atlas | atlas.engineer.02192.0.2.12 | /v1/accounts/positions | Success |
| 09:29:222026-09-15 | Sign-in from a recognized deviceEVT-001076{
"event_id": "EVT-001076",
"timestamp": "2026-09-15T09:29:22Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-013",
"username": "atlas.engineer.13",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.23",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-013",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-013"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-001076"
}
} | Identity | atlas.engineer.13192.0.2.23 | Identity Service | Success |
| 09:29:132026-09-15 | Internal API requestEVT-003771{
"event_id": "EVT-003771",
"timestamp": "2026-09-15T09:29:13Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-017",
"username": "atlas.engineer.17",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/health"
},
"network": {
"source_ip": "192.0.2.27",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-017",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-017"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003771"
}
} | Api gateway | atlas.engineer.17192.0.2.27 | /health | Success |
| 09:29:122026-09-15 | Account query accessed 41 recordsEVT-002708{
"event_id": "EVT-002708",
"timestamp": "2026-09-15T09:29:12Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-012",
"username": "atlas.engineer.12",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0016",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.22",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-012",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-012"
},
"attributes": {
"records_accessed": 41,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002708"
}
} | Atlas | atlas.engineer.12192.0.2.22 | /v1/accounts/positions | Success |
| 09:29:102026-09-15 | Internal API requestEVT-003315{
"event_id": "EVT-003315",
"timestamp": "2026-09-15T09:29:10Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-012",
"username": "atlas.engineer.12",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/quotes"
},
"network": {
"source_ip": "192.0.2.22",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-012",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-012"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003315"
}
} | Api gateway | atlas.engineer.12192.0.2.22 | /v1/quotes | Success |
| 09:29:062026-09-15 | Account query accessed 54 recordsEVT-001263{
"event_id": "EVT-001263",
"timestamp": "2026-09-15T09:29:06Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-021",
"username": "atlas.engineer.21",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0082",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.31",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-021",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-021"
},
"attributes": {
"records_accessed": 54,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001263"
}
} | Atlas | atlas.engineer.21192.0.2.31 | /v1/accounts/positions | Success |
| 09:29:012026-09-15 | Account query accessed 64 recordsEVT-002360{
"event_id": "EVT-002360",
"timestamp": "2026-09-15T09:29:01Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0038",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"records_accessed": 64,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002360"
}
} | Atlas | atlas.engineer.11192.0.2.21 | /v1/accounts/positions | Success |
| 09:28:582026-09-15 | Internal API requestEVT-001442{
"event_id": "EVT-001442",
"timestamp": "2026-09-15T09:28:58Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-006",
"username": "atlas.engineer.06",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/positions"
},
"network": {
"source_ip": "192.0.2.16",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-006",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-006"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-001442"
}
} | Api gateway | atlas.engineer.06192.0.2.16 | /v1/positions | Success |
| 09:28:522026-09-15 | Account query accessed 25 recordsEVT-002163{
"event_id": "EVT-002163",
"timestamp": "2026-09-15T09:28:52Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-004",
"username": "atlas.engineer.04",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0017",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.14",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-004",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-004"
},
"attributes": {
"records_accessed": 25,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002163"
}
} | Atlas | atlas.engineer.04192.0.2.14 | /v1/accounts/positions | Success |
| 09:28:472026-09-15 | Sign-in from a recognized deviceEVT-001864{
"event_id": "EVT-001864",
"timestamp": "2026-09-15T09:28:47Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-007",
"username": "atlas.engineer.07",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.17",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-007",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-007"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-001864"
}
} | Identity | atlas.engineer.07192.0.2.17 | Identity Service | Success |
| 09:28:462026-09-15 | Account query accessed 1 recordsEVT-003495{
"event_id": "EVT-003495",
"timestamp": "2026-09-15T09:28:46Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-014",
"username": "atlas.engineer.14",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0088",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.24",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-014",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-014"
},
"attributes": {
"records_accessed": 1,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003495"
}
} | Atlas | atlas.engineer.14192.0.2.24 | /v1/accounts/positions | Success |
| 09:28:402026-09-15 | Internal API requestEVT-003697{
"event_id": "EVT-003697",
"timestamp": "2026-09-15T09:28:40Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-007",
"username": "atlas.engineer.07",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/positions"
},
"network": {
"source_ip": "192.0.2.17",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-007",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-007"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003697"
}
} | Api gateway | atlas.engineer.07192.0.2.17 | /v1/positions | Success |
| 09:28:382026-09-15 | Account query accessed 18 recordsEVT-001543{
"event_id": "EVT-001543",
"timestamp": "2026-09-15T09:28:38Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-001",
"username": "atlas.engineer.01",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0063",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.11",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-001",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-001"
},
"attributes": {
"records_accessed": 18,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001543"
}
} | Atlas | atlas.engineer.01192.0.2.11 | /v1/accounts/positions | Success |
| 09:28:312026-09-15 | Posture checkEVT-002679{
"event_id": "EVT-002679",
"timestamp": "2026-09-15T09:28:31Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-003",
"username": "atlas.engineer.03",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.13",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-003",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-003"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-002679"
}
} | Endpoint | atlas.engineer.03192.0.2.13 | Endpoint telemetry | Success |
| 09:28:312026-09-15 | Account query accessed 72 recordsEVT-003055{
"event_id": "EVT-003055",
"timestamp": "2026-09-15T09:28:31Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0011",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"records_accessed": 72,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003055"
}
} | Atlas | atlas.engineer.11192.0.2.21 | /v1/accounts/positions | Success |
| 09:28:172026-09-15 | Internal API requestEVT-001792{
"event_id": "EVT-001792",
"timestamp": "2026-09-15T09:28:17Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-004",
"username": "atlas.engineer.04",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/health"
},
"network": {
"source_ip": "192.0.2.14",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-004",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-004"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-001792"
}
} | Api gateway | atlas.engineer.04192.0.2.14 | /health | Success |
| 09:28:172026-09-15 | Internal API requestEVT-003569{
"event_id": "EVT-003569",
"timestamp": "2026-09-15T09:28:17Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-006",
"username": "atlas.engineer.06",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/quotes"
},
"network": {
"source_ip": "192.0.2.16",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-006",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-006"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003569"
}
} | Api gateway | atlas.engineer.06192.0.2.16 | /v1/quotes | Success |
| 09:28:012026-09-15 | Sign-in from a recognized deviceEVT-000793{
"event_id": "EVT-000793",
"timestamp": "2026-09-15T09:28:01Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-022",
"username": "atlas.engineer.22",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.32",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-022",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-022"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-000793"
}
} | Identity | atlas.engineer.22192.0.2.32 | Identity Service | Success |
| 09:27:582026-09-15 | Account query accessed 5 recordsEVT-000487{
"event_id": "EVT-000487",
"timestamp": "2026-09-15T09:27:58Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-001",
"username": "atlas.engineer.01",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0087",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.11",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-001",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-001"
},
"attributes": {
"records_accessed": 5,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-000487"
}
} | Atlas | atlas.engineer.01192.0.2.11 | /v1/accounts/positions | Success |
| 09:27:562026-09-15 | Account query accessed 80 recordsEVT-001176{
"event_id": "EVT-001176",
"timestamp": "2026-09-15T09:27:56Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-020",
"username": "atlas.engineer.20",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0099",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.30",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-020",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-020"
},
"attributes": {
"records_accessed": 80,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001176"
}
} | Atlas | atlas.engineer.20192.0.2.30 | /v1/accounts/positions | Success |
| 09:27:532026-09-15 | Account query accessed 2 recordsEVT-002530{
"event_id": "EVT-002530",
"timestamp": "2026-09-15T09:27:53Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-009",
"username": "atlas.engineer.09",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0077",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.19",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-009",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-009"
},
"attributes": {
"records_accessed": 2,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002530"
}
} | Atlas | atlas.engineer.09192.0.2.19 | /v1/accounts/positions | Success |
| 09:27:462026-09-15 | Posture checkEVT-003429{
"event_id": "EVT-003429",
"timestamp": "2026-09-15T09:27:46Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-015",
"username": "atlas.engineer.15",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.25",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-015",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-015"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-003429"
}
} | Endpoint | atlas.engineer.15192.0.2.25 | Endpoint telemetry | Success |
| 09:27:402026-09-15 | Sign-in from a recognized deviceEVT-000267{
"event_id": "EVT-000267",
"timestamp": "2026-09-15T09:27:40Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-009",
"username": "atlas.engineer.09",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.19",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-009",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-009"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-000267"
}
} | Identity | atlas.engineer.09192.0.2.19 | Identity Service | Success |
| 09:27:312026-09-15 | Sign-in from a recognized deviceEVT-002912{
"event_id": "EVT-002912",
"timestamp": "2026-09-15T09:27:31Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-024",
"username": "atlas.engineer.24",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.34",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-024",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-024"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-002912"
}
} | Identity | atlas.engineer.24192.0.2.34 | Identity Service | Success |
Server-side search and pagination. Source payloads are displayed as inert text.