<6>Jul 27 00:24:09 OAK-SYM-V01 SymantecServer: SCID0045,Local Host IP: 10.3.162.41,Local Port: 3,Local Host MAC: 84A938A8579D,Remote Host IP: 10.10.1.10,Remote Host Name: bmi-dc-v02.acme.net,Remote Port: 3,Remote Host MAC: 04EB40162DE7,ICMP,Outbound,Begin: 2024-07-27 00:08:21,End Time: 2024-07-27 00:08:21,Occurrences: 1,Application: ,Rule: Block all other IP traffic and log,Location: Default,User Name: sumorale,Domain Name: ACME,Action: Blocked,SHA-256: ,MD-5: 
This is a syslog message from a product called Symantec Endpoint Protection by Symantec. The following fields were extracted from the message:
facilityLabel: kernel
fieldExtractorName: symantec_sep
localHostname: OAK-SYM-V01
localStartTime: Jul 27 00:24:09
messageType: management_message
priority: 6
program: SymantecServer
senderHost: 10.0.1.140
sensitivity: normal
severityCode: 6
severityLabel: informational
sourceInfo: unknown
streamName: symantec_sep
tags: ['rfc3164', 'symantec_sep', 'management_message']