<134>Original Address=75.146.93.165 1 1686787028.654984031 M61_MX67C_Savannah l7_firewall src=239.75.130.113 dst=76.188.56.170 protocol=udp sport=42514 dport=53 decision=blocked
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
action: block
clientport: 42514
messagetype: anomalous_behavior
program: l7_firewall
protocol: 17
senderhost: 192.168.2.250
sensitivity: normal
serverport: 53
sourceinfo: unknown
tags: ['meraki_l7_firewall', 'anomalous_behavior']
streamName: meraki_l7_firewall
clientIP: 239.75.130.113
serverIP: 76.188.56.170