<4>Jul  1 23:52:28 hq-ie001 kernel: [193407.766374] [UFW BLOCK] IN=ens5 OUT= MAC=02:89:99:e9:b6:8c:02:1a:a4:b4:e1:82:08:00 SRC=158.112.23.115 DST=3.19.140.46 LEN=17950 TOS=0x00 PREC=0x00 TTL=64 ID=2906 DF PROTO=TCP SPT=9042 DPT=52552 WINDOW=455 RES=0x00 ACK PSH URGP=0 
{
    "action": "block",
    "clientbytes": 17950,
    "clientport": 52552,
    "facilitylabel": "kernel",
    "localhostname": "hq-ie001",
    "localstarttime": "Jul  1 23:52:28",
    "message": "<4>Jul  1 23:52:28 hq-ie001 kernel: [193407.766374] [UFW BLOCK] IN=ens5 OUT= MAC=02:89:99:e9:b6:8c:02:1a:a4:b4:e1:82:08:00 SRC=158.112.23.115 DST=3.19.140.46 LEN=17950 TOS=0x00 PREC=0x00 TTL=64 ID=2906 DF PROTO=TCP SPT=9042 DPT=52552 WINDOW=455 RES=0x00 ACK PSH URGP=0 ",
    "messagetype": "firewall_action",
    "priority": 4,
    "program": "kernel",
    "protocol": 6,
    "senderhost": "10.1.100.159",
    "sensitivity": "normal",
    "serverport": 9042,
    "severitycode": 4,
    "severitylabel": "warning",
    "sourceinfo": "unknown",
    "tags": [
        "rfc3164",
        "ufw",
        "firewall_action"
    ],
    "streamName": "ufw",
    "clientIP": "3.19.140.46",
    "serverIP": "158.112.23.115"
}