{"ts":"2026-09-18T09:14:07.412Z","app":"portal-audit","event":"login.failed","reason":"bad_password","user":"j.okafor","role":"admin","src_ip":"203.0.113.44","src_port":51544,"method":"POST","path":"/session","status":401,"session":"c6f0f0b1"}
{"ts":"2026-09-18T09:14:31.880Z","app":"portal-audit","event":"login.success","user":"j.okafor","role":"admin","src_ip":"203.0.113.44","src_port":51602,"method":"POST","path":"/session","status":200,"session":"c6f0f0b1"}
{"ts":"2026-09-18T09:52:10.006Z","app":"portal-audit","event":"logout","user":"j.okafor","role":"admin","src_ip":"203.0.113.44","src_port":51602,"method":"DELETE","path":"/session","status":204,"session":"c6f0f0b1"}
{"ts":"2026-09-18T11:02:44.117Z","app":"portal-audit","event":"login.failed","reason":"mfa_timeout","user":"s.duarte","role":"finance","src_ip":"10.20.4.51","src_port":39210,"method":"POST","path":"/session","status":401,"session":"18ab77c2"}
2026-09-18T09:20:55.004Z portal-audit login.failed user=r.navarro role=admin src=198.51.100.23:44120 method=POST path=/session status=401 reason=bad_password
2026-09-18T09:21:12.640Z portal-audit login.success user=r.navarro role=admin src=198.51.100.23:44133 method=POST path=/session status=200