<4>Jul 26 08:35:42 OAK-SYM-V01 SymantecServer: WSFTEL-A1102,Local Host IP: ff02::c,Local Port: 3702,Local Host MAC: 33330000000C,Remote Host IP: fe80::4737:4256:9ea6:262b,Remote Host Name: ,Remote Port: 60506,Remote Host MAC: 002B6716CB36,UDP,Inbound,Begin: 2024-07-26 08:04:17,End Time: 2024-07-26 08:04:24,Occurrences: 7,Application: ,Rule: Block Web Services Discovery,Location: Default,User Name: wsfthn1102,Domain Name: ACME,Action: Blocked,SHA-256: ,MD-5: 
This is a syslog message from a product called Symantec Endpoint Protection by Symantec. The following fields were extracted from the message:
facilityLabel: kernel
fieldExtractorName: symantec_sep
localHostname: OAK-SYM-V01
localStartTime: Jul 26 08:35:42
messageType: management_message
priority: 4
program: SymantecServer
senderHost: 10.0.1.140
sensitivity: normal
severityCode: 4
severityLabel: warning
sourceInfo: unknown
streamName: symantec_sep
tags: ['rfc3164', 'symantec_sep', 'management_message']