Example of the Source Object
"source": {
"user_principal_name": "...",
"down_level_logon_name": "...",
"sam_account_name": "...",
"distinguished_name": "...",
"user_email_address": "...",
"host_ips": ["...", "..."],
"host_name": "...",
"user_agent": "...",
"host_domain": "..."
}