<6>Jul 26 08:35:42 OAK-SYM-V01 SymantecServer: LAVD0022,Local Host IP: 10.2.250.97,Local Port: 3,Local Host MAC: 44AF28E9CA2D,Remote Host IP: 10.0.1.211,Remote Host Name: OAK-DC-V02.acme.net,Remote Port: 3,Remote Host MAC: 843DC612AA56,ICMP,Outbound,Begin: 2024-07-26 08:03:21,End Time: 2024-07-26 08:03:22,Occurrences: 2,Application: ,Rule: Block all other IP traffic and log,Location: Default,User Name: esgarcia,Domain Name: ACME,Action: Blocked,SHA-256: ,MD-5: 
This is a syslog message from a product called Symantec Endpoint Protection by Symantec. The following fields were extracted from the message:
facilityLabel: kernel
fieldExtractorName: symantec_sep
localHostname: OAK-SYM-V01
localStartTime: Jul 26 08:35:42
messageType: management_message
priority: 6
program: SymantecServer
senderHost: 10.0.1.140
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: symantec_sep
tags: ['rfc3164', 'symantec_sep', 'management_message']