[
  {
    "id": "evt-001",
    "timestamp": "2026-10-01T09:00:00Z",
    "src_ip": "192.0.2.10",
    "user": "lab-admin",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-002",
    "timestamp": "2026-10-01T09:00:15Z",
    "src_ip": "192.0.2.10",
    "user": "lab-admin",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-003",
    "timestamp": "2026-10-01T09:00:30Z",
    "src_ip": "192.0.2.10",
    "user": "lab-admin",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-004",
    "timestamp": "2026-10-01T09:00:45Z",
    "src_ip": "192.0.2.10",
    "user": "lab-admin",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-005",
    "timestamp": "2026-10-01T09:01:00Z",
    "src_ip": "192.0.2.10",
    "user": "lab-admin",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-006",
    "timestamp": "2026-10-01T09:01:20Z",
    "src_ip": "192.0.2.10",
    "user": "lab-admin",
    "service": "ssh",
    "outcome": "success"
  },
  {
    "id": "evt-007",
    "timestamp": "2026-10-01T09:01:40Z",
    "src_ip": "198.51.100.20",
    "user": "lab-user-0",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-008",
    "timestamp": "2026-10-01T09:01:50Z",
    "src_ip": "198.51.100.20",
    "user": "lab-user-1",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-009",
    "timestamp": "2026-10-01T09:02:00Z",
    "src_ip": "198.51.100.20",
    "user": "lab-user-2",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-010",
    "timestamp": "2026-10-01T09:02:10Z",
    "src_ip": "198.51.100.20",
    "user": "lab-user-3",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-011",
    "timestamp": "2026-10-01T09:02:20Z",
    "src_ip": "198.51.100.20",
    "user": "lab-user-4",
    "service": "ssh",
    "outcome": "failure"
  },
  {
    "id": "evt-012",
    "timestamp": "2026-10-01T09:02:30Z",
    "src_ip": "203.0.113.5",
    "user": "analyst",
    "service": "ssh",
    "outcome": "success"
  }
]