{
  "alert": {
    "id": 1,
    "ts": 1789158486.6315343,
    "host": "web01",
    "rule": "generic_error",
    "severity": "low",
    "message": "Mensaje de error o falla",
    "mitre_tactic": null,
    "mitre_technique": null,
    "mitre_technique_name": null
  },
  "raw_evidence": [
    {
      "ts": 1789158486.6315343,
      "raw_text": "<38>Sep 11 10:00:01 web01 sshd[1234]: Failed password for invalid user admin from 203.0.113.5 port 51244 ssh2"
    }
  ]
}