audisp-json example msg

{
  "_source": {
    "category": "execve",
    "processid": "0",
    "receivedtimestamp": "2016-05-19T20:57:14.988457+00:00",
    "severity": "INFO",
    "utctimestamp": "2016-05-19T20:21:47+00:00",
    "tags": [
      "audisp-json",
      "2.0.0",
      "audit"
    ],
    "timestamp": "2016-05-19T20:21:47+00:00",
    "hostname": "example.net",
    "mozdefhostname": "mozdef.example.net",
    "summary": "Execve: /bin/sh -c netstat -t -a -n",
    "processname": "audisp-json",
    "details": {
      "fsuid": "99",
      "tty": "(none)",
      "uid": "99",
      "process": "/bin/bash",
      "auditkey": "exec",
      "pid": "5360",
      "processname": "sh",
      "session": "4294967295",
      "dev": "08:03",
      "sgid": "0",
      "auditserial": "5437260",
      "inode": "2886505",
      "ouid": "0",
      "ogid": "0",
      "suid": "99",
      "originaluid": "4294967295",
      "gid": "0",
      "cwd": "/",
      "parentprocess": "gmond",
      "ppid": "1282",
      "euid": "99",
      "path": "/bin/sh",
      "rdev": "00:00",
      "fsgid": "0",
      "egid": "0",
      "command": "/bin/sh -c netstat -t -a -n",
      "mode": "0100755",
      "user": "nobody"
    }
  },
}