<134>Original Address=91.219.112.107 1 1656389891.168308075 M66_MX67C_HiltonHead flows src=127.219.29.37 dst=91.219.112.107 protocol=tcp sport=49889 dport=3389 pattern: 1 all
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
senderhost: 192.168.2.250
serverport: 3389
tags: ['deny', 'meraki', 'flow']
productids: [26, 0]
sourceinfo: unknown
action: block
sensitivity: normal
messagetype: flow
clientport: 49889
protocol: 6
streamName: meraki
clientIP: 127.219.29.37
serverIP: 91.219.112.107