<134>Original Address=192.168.2.253 1 1658148034.468129517 NORDC_MX400_1 flows src=230.80.148.44 dst=49.245.97.170 protocol=tcp sport=20091 dport=10002 pattern: 1 dst 49.245.97.170
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
senderhost: 192.168.2.250
serverport: 10002
tags: ['deny', 'meraki', 'flow']
productids: [26, 0]
sourceinfo: unknown
action: block
sensitivity: normal
messagetype: flow
clientport: 20091
protocol: 6
streamName: meraki
clientIP: 230.80.148.44
serverIP: 49.245.97.170