yes, i do json. i can't do all the fancy stuff since data must be massaged for siem before that.