sample filebeat log

{"exchange.tenant_id":null,"exchange.internal_message_id":"138838176","exchange.connector_id":"HCAS01-SRV\\Inbound from Office 365","exchange.server_hostname":"HCAS01-srv","source":"C:\\Program Files\\Microsoft\\Exchange Server\\V14\\TransportRoles\\Logs\\MessageTracking\\MSGTRK20171130-35.LOG","type":"mail-tracking","exchange.related_recipient_address":null,"exchange.reference":null,"beattype":"doc","exchange.total_bytes":7852,"@version":"1","beat":{"name":"HCAS01-srv","hostname":"HCAS01-srv","version":"6.0.1"},"host":"HCAS01-srv","exchange.message_subject":"Test theo yeu cau ChauNN","exchange.original_client_ip":"42.112.212.161","exchange.sender_address":"fisqa@noreply.company.com","exchange.original_server_ip":"10.1.11.11","exchange.message_info":"00A: NTS: ","exchange.client_hostname":"APC01-PU1-obe.outbound.protection.outlook.com","exchange.recipient_status":null,"exchange.custom_data":["S:FirstForestHop=HCAS01-SRV.COMPANY.COM","S:Oorg=fptcloud.onmicrosoft.com"],"exchange.message_id":"<6f1c1df4-8a58-4d6a-942d-7dbede8eaaea@SG2APC01FT043.eop-APC01.prod.protection.outlook.com>","offset":10221565,"exchange.source":"SMTP","beatname":"fb-fim-mail","exchange.client_ip":"65.55.88.19","exchange.source_context":["08D509854059E1CD","2017-11-30T09:13:25.745Z","0"],"prospector":{"type":"log"},"exchange.server_ip":"10.1.11.11","exchange.directionality":"Incoming","message":"2017-11-30T09:13:27.429Z,65.55.88.19,APC01-PU1-obe.outbound.protection.outlook.com,10.1.11.11,HCAS01-srv,08D509854059E1CD;2017-11-30T09:13:25.745Z;0,HCAS01-SRV\\Inbound from Office 365,SMTP,RECEIVE,138838176,<6f1c1df4-8a58-4d6a-942d-7dbede8eaaea@SG2APC01FT043.eop-APC01.prod.protection.outlook.com>,chaunn@company.com,,7852,1,,,Test theo yeu cau ChauNN,fisqa@noreply.company.com,fisqa@noreply.company.com,00A: NTS: ,Incoming,,42.112.212.161,10.1.11.11,S:FirstForestHop=HCAS01-SRV.COMPANY.COM;S:Oorg=fptcloud.onmicrosoft.com","exchange.recipient_count":1,"tags":["exchange_message_tracking"],"@timestamp":"2017-11-30T09:13:27.429Z","exchange.return_path":"fisqa@noreply.company.com","exchange.recipient_address":["chaunn@company.com"],"exchange.event_id":"RECEIVE"}