gistfile1.js

{
  "msg":['syscheck',2,5,1], // Message type and version
  "agent":{                 // Agent details
     "id":"00001",
     "host":[{"ipv4":"192.168.1.1","name":"tester.example.com"}], // array of host details
  }
  "payload":[
     {
         "filepath":"/etc/passwd",
         "size":89404,
         "time":{"a":1282308171,"m":1282308171},
         "acl":[
             {"type":"posix-group","id":{"number":0,"name":"root"},"posix":7},
             {"type":"posix-user","id":{"uid":0,"name":"root"},"posix":7},
             {"type":"posix-world", "posix":7},
             {"type":"posix-acl-user", "id":{"uid":1000,"name":jrossi"}, "posix":000},
         ],
     },
  ]
}