Loading investigation data…
WorkspaceSecurity events
SIMULATED TELEMETRY
Canonical, immutable events from four simulated sources.
| Time (UTC) | Event | Source | Actor | Resource / endpoint | Outcome |
|---|---|---|---|---|---|
| 12:21:042026-09-15 | Account query accessed 67 recordsEVT-000230{
"event_id": "EVT-000230",
"timestamp": "2026-09-15T12:21:04Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-021",
"username": "atlas.engineer.21",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0056",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.31",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-021",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-021"
},
"attributes": {
"records_accessed": 67,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-000230"
}
} | Atlas | atlas.engineer.21192.0.2.31 | /v1/accounts/positions | Success |
| 12:21:022026-09-15 | Account query accessed 87 recordsEVT-000561{
"event_id": "EVT-000561",
"timestamp": "2026-09-15T12:21:02Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-006",
"username": "atlas.engineer.06",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0044",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.16",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-006",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-006"
},
"attributes": {
"records_accessed": 87,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-000561"
}
} | Atlas | atlas.engineer.06192.0.2.16 | /v1/accounts/positions | Success |
| 12:21:012026-09-15 | Account query accessed 23 recordsEVT-001612{
"event_id": "EVT-001612",
"timestamp": "2026-09-15T12:21:01Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-003",
"username": "atlas.engineer.03",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0038",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.13",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-003",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-003"
},
"attributes": {
"records_accessed": 23,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001612"
}
} | Atlas | atlas.engineer.03192.0.2.13 | /v1/accounts/positions | Success |
| 12:21:002026-09-15 | Account query accessed 61 recordsEVT-003954{
"event_id": "EVT-003954",
"timestamp": "2026-09-15T12:21:00Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-022",
"username": "atlas.engineer.22",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0044",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.32",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-022",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-022"
},
"attributes": {
"records_accessed": 61,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003954"
}
} | Atlas | atlas.engineer.22192.0.2.32 | /v1/accounts/positions | Success |
| 12:20:592026-09-15 | Sign-in from a recognized deviceEVT-000780{
"event_id": "EVT-000780",
"timestamp": "2026-09-15T12:20:59Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-004",
"username": "atlas.engineer.04",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.14",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-004",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-004"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-000780"
}
} | Identity | atlas.engineer.04192.0.2.14 | Identity Service | Success |
| 12:20:562026-09-15 | Account query accessed 85 recordsEVT-002851{
"event_id": "EVT-002851",
"timestamp": "2026-09-15T12:20:56Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0018",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"records_accessed": 85,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-002851"
}
} | Atlas | atlas.engineer.11192.0.2.21 | /v1/accounts/positions | Success |
| 12:20:402026-09-15 | Internal API requestEVT-000966{
"event_id": "EVT-000966",
"timestamp": "2026-09-15T12:20:40Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-012",
"username": "atlas.engineer.12",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/accounts"
},
"network": {
"source_ip": "192.0.2.22",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-012",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-012"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-000966"
}
} | Api gateway | atlas.engineer.12192.0.2.22 | /v1/accounts | Success |
| 12:20:392026-09-15 | Internal API requestEVT-002218{
"event_id": "EVT-002218",
"timestamp": "2026-09-15T12:20:39Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-023",
"username": "atlas.engineer.23",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/positions"
},
"network": {
"source_ip": "192.0.2.33",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-023",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-023"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-002218"
}
} | Api gateway | atlas.engineer.23192.0.2.33 | /v1/positions | Success |
| 12:20:352026-09-15 | Posture checkEVT-001221{
"event_id": "EVT-001221",
"timestamp": "2026-09-15T12:20:35Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-001221"
}
} | Endpoint | atlas.engineer.11192.0.2.21 | Endpoint telemetry | Success |
| 12:20:332026-09-15 | Internal API requestEVT-002256{
"event_id": "EVT-002256",
"timestamp": "2026-09-15T12:20:33Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-007",
"username": "atlas.engineer.07",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/quotes"
},
"network": {
"source_ip": "192.0.2.17",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-007",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-007"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-002256"
}
} | Api gateway | atlas.engineer.07192.0.2.17 | /v1/quotes | Success |
| 12:20:312026-09-15 | Internal API requestEVT-003155{
"event_id": "EVT-003155",
"timestamp": "2026-09-15T12:20:31Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-012",
"username": "atlas.engineer.12",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/accounts"
},
"network": {
"source_ip": "192.0.2.22",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-012",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-012"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003155"
}
} | Api gateway | atlas.engineer.12192.0.2.22 | /v1/accounts | Success |
| 12:20:272026-09-15 | Internal API requestEVT-003078{
"event_id": "EVT-003078",
"timestamp": "2026-09-15T12:20:27Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-018",
"username": "atlas.engineer.18",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/positions"
},
"network": {
"source_ip": "192.0.2.28",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-018",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-018"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-003078"
}
} | Api gateway | atlas.engineer.18192.0.2.28 | /v1/positions | Success |
| 12:20:222026-09-15 | Account query accessed 65 recordsEVT-000846{
"event_id": "EVT-000846",
"timestamp": "2026-09-15T12:20:22Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-012",
"username": "atlas.engineer.12",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0011",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.22",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-012",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-012"
},
"attributes": {
"records_accessed": 65,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-000846"
}
} | Atlas | atlas.engineer.12192.0.2.22 | /v1/accounts/positions | Success |
| 12:20:172026-09-15 | Posture checkEVT-000145{
"event_id": "EVT-000145",
"timestamp": "2026-09-15T12:20:17Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-001",
"username": "atlas.engineer.01",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.11",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-001",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-001"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-000145"
}
} | Endpoint | atlas.engineer.01192.0.2.11 | Endpoint telemetry | Success |
| 12:20:152026-09-15 | Account query accessed 34 recordsEVT-003260{
"event_id": "EVT-003260",
"timestamp": "2026-09-15T12:20:15Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-003",
"username": "atlas.engineer.03",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0063",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.13",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-003",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-003"
},
"attributes": {
"records_accessed": 34,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003260"
}
} | Atlas | atlas.engineer.03192.0.2.13 | /v1/accounts/positions | Success |
| 12:20:082026-09-15 | Posture checkEVT-003197{
"event_id": "EVT-003197",
"timestamp": "2026-09-15T12:20:08Z",
"source": "endpoint",
"event_type": "device_posture",
"action": "posture_check",
"outcome": "success",
"actor": {
"user_id": "USR-012",
"username": "atlas.engineer.12",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Endpoint telemetry",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.22",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-012",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-012"
},
"attributes": {
"security_agent": "healthy"
},
"raw": {
"synthetic": true,
"adapter": "endpoint",
"source_event_id": "EVT-003197"
}
} | Endpoint | atlas.engineer.12192.0.2.22 | Endpoint telemetry | Success |
| 12:19:592026-09-15 | Internal API requestEVT-001922{
"event_id": "EVT-001922",
"timestamp": "2026-09-15T12:19:59Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-016",
"username": "atlas.engineer.16",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/orders"
},
"network": {
"source_ip": "192.0.2.26",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-016",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-016"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-001922"
}
} | Api gateway | atlas.engineer.16192.0.2.26 | /v1/orders | Success |
| 12:19:522026-09-15 | Account query accessed 6 recordsEVT-001424{
"event_id": "EVT-001424",
"timestamp": "2026-09-15T12:19:52Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-011",
"username": "atlas.engineer.11",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0055",
"resource_type": "account",
"service": "Trading API",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.21",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-011",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-011"
},
"attributes": {
"records_accessed": 6,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001424"
}
} | Atlas | atlas.engineer.11192.0.2.21 | /v1/accounts/positions | Success |
| 12:19:392026-09-15 | Account query accessed 14 recordsEVT-001997{
"event_id": "EVT-001997",
"timestamp": "2026-09-15T12:19:39Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-015",
"username": "atlas.engineer.15",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0097",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.25",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-015",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-015"
},
"attributes": {
"records_accessed": 14,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-001997"
}
} | Atlas | atlas.engineer.15192.0.2.25 | /v1/accounts/positions | Success |
| 12:19:382026-09-15 | Sign-in from a recognized deviceEVT-000460{
"event_id": "EVT-000460",
"timestamp": "2026-09-15T12:19:38Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-020",
"username": "atlas.engineer.20",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.30",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-020",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-020"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-000460"
}
} | Identity | atlas.engineer.20192.0.2.30 | Identity Service | Success |
| 12:19:332026-09-15 | Sign-in from a recognized deviceEVT-003371{
"event_id": "EVT-003371",
"timestamp": "2026-09-15T12:19:33Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-004",
"username": "atlas.engineer.04",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.14",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-004",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-004"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-003371"
}
} | Identity | atlas.engineer.04192.0.2.14 | Identity Service | Success |
| 12:19:312026-09-15 | Account query accessed 27 recordsEVT-003319{
"event_id": "EVT-003319",
"timestamp": "2026-09-15T12:19:31Z",
"source": "atlas",
"event_type": "data_access",
"action": "query",
"outcome": "success",
"actor": {
"user_id": "USR-005",
"username": "atlas.engineer.05",
"role": "engineer"
},
"target": {
"resource_id": "ACC-SYN-0003",
"resource_type": "account",
"service": "Account Service",
"endpoint": "/v1/accounts/positions"
},
"network": {
"source_ip": "192.0.2.15",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-005",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-005"
},
"attributes": {
"records_accessed": 27,
"baseline_max_records": 90
},
"raw": {
"synthetic": true,
"adapter": "atlas",
"source_event_id": "EVT-003319"
}
} | Atlas | atlas.engineer.05192.0.2.15 | /v1/accounts/positions | Success |
| 12:19:282026-09-15 | Internal API requestEVT-000607{
"event_id": "EVT-000607",
"timestamp": "2026-09-15T12:19:28Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-014",
"username": "atlas.engineer.14",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/health"
},
"network": {
"source_ip": "192.0.2.24",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-014",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-014"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-000607"
}
} | Api gateway | atlas.engineer.14192.0.2.24 | /health | Success |
| 12:19:262026-09-15 | Sign-in from a recognized deviceEVT-000836{
"event_id": "EVT-000836",
"timestamp": "2026-09-15T12:19:26Z",
"source": "identity",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"actor": {
"user_id": "USR-018",
"username": "atlas.engineer.18",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "Identity Service",
"endpoint": null
},
"network": {
"source_ip": "192.0.2.28",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-018",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-018"
},
"attributes": {
"source_previously_seen": true,
"device_previously_seen": true,
"location_previously_seen": true
},
"raw": {
"synthetic": true,
"adapter": "identity",
"source_event_id": "EVT-000836"
}
} | Identity | atlas.engineer.18192.0.2.28 | Identity Service | Success |
| 12:19:192026-09-15 | Internal API requestEVT-001026{
"event_id": "EVT-001026",
"timestamp": "2026-09-15T12:19:19Z",
"source": "api_gateway",
"event_type": "api_request",
"action": "request",
"outcome": "success",
"actor": {
"user_id": "USR-013",
"username": "atlas.engineer.13",
"role": "engineer"
},
"target": {
"resource_id": null,
"resource_type": "service",
"service": "API Gateway",
"endpoint": "/v1/accounts"
},
"network": {
"source_ip": "192.0.2.23",
"destination_ip": "198.51.100.10",
"user_agent": "AtlasSynthetic/1.0",
"location": "synthetic_region_a"
},
"device": {
"device_id": "DEV-013",
"trusted": true,
"posture": "compliant"
},
"session": {
"session_id": "SES-DEV-013"
},
"attributes": {
"method": "GET",
"status_code": 200
},
"raw": {
"synthetic": true,
"adapter": "api_gateway",
"source_event_id": "EVT-001026"
}
} | Api gateway | atlas.engineer.13192.0.2.23 | /v1/accounts | Success |
Server-side search and pagination. Source payloads are displayed as inert text.