<2>Jul 26 12:03:27 OAK-SYM-V01 SymantecServer: OAK-GP-SQLD2,Local Host IP: 224.0.0.252,Local Port: 5355,Local Host MAC: 01005E0000FC,Remote Host IP: 10.0.1.29,Remote Host Name: ,Remote Port: 52086,Remote Host MAC: 0050569460D4,UDP,Inbound,Begin: 2024-07-26 11:50:18,End Time: 2024-07-26 11:50:18,Occurrences: 1,Application: C:/Windows/System32/svchost.exe,Rule: Allow Ipv4 LLMNR from private IP addresses,Location: Default,User Name: NETWORK SERVICE,Domain Name: NT AUTHORITY,Action: Allowed,SHA-256: 7fd065bac18c5278777ae44908101cdfed72d26fa741367f0ad4d02020787ab6,MD-5: 8A0A29438052FAED8A2532DA50455756
{
    "facilityLabel": "kernel",
    "fieldExtractorName": "symantec_sep",
    "localHostname": "OAK-SYM-V01",
    "localStartTime": "Jul 26 12:03:27",
    "message": "<2>Jul 26 12:03:27 OAK-SYM-V01 SymantecServer: OAK-GP-SQLD2,Local Host IP: 224.0.0.252,Local Port: 5355,Local Host MAC: 01005E0000FC,Remote Host IP: 10.0.1.29,Remote Host Name: ,Remote Port: 52086,Remote Host MAC: 0050569460D4,UDP,Inbound,Begin: 2024-07-26 11:50:18,End Time: 2024-07-26 11:50:18,Occurrences: 1,Application: C:/Windows/System32/svchost.exe,Rule: Allow Ipv4 LLMNR from private IP addresses,Location: Default,User Name: NETWORK SERVICE,Domain Name: NT AUTHORITY,Action: Allowed,SHA-256: 7fd065bac18c5278777ae44908101cdfed72d26fa741367f0ad4d02020787ab6,MD-5: 8A0A29438052FAED8A2532DA50455756",
    "messageType": "management_message",
    "priority": 2,
    "program": "SymantecServer",
    "senderHost": "10.0.1.140",
    "sensitivity": "normal",
    "severityCode": 2,
    "severityLabel": "critical",
    "sourceInfo": "unknown",
    "streamName": "symantec_sep",
    "tags": [
        "rfc3164",
        "symantec_sep",
        "management_message"
    ]
}