<134>Original Address=192.168.2.253 1 1662207742.507948955 NORDC_MX400_1 l7_firewall src=192.162.250.253 dst=149.206.211.255 protocol=tcp sport=8080 dport=65328 decision=blocked
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
program: l7_firewall
senderhost: 192.168.2.250
serverport: 8080
tags: ['meraki_l7_firewall', 'anomalous_behavior']
productids: [0]
sourceinfo: unknown
action: block
sensitivity: normal
messagetype: anomalous_behavior
clientport: 65328
protocol: 6
streamName: meraki_l7_firewall
clientIP: 149.206.211.255
serverIP: 192.162.250.253