<14>Oct 21 16:08:39 DC1-PA3220-1 1,2023/10/21 16:08:39,016201032964,TRAFFIC,drop,2562,2023/10/21 16:08:39,143.152.215.227,201.103.8.182,0.0.0.0,0.0.0.0,Geo Block Inbound,,,ping,vsys1,Untrust,Untrust,ethernet1/2,,Witfoo Log Forward Only,2023/10/21 16:08:39,0,1,0,0,2048,0,0x100000,icmp,deny,60,60,0,1,2023/10/21 16:08:34,0,any,,7263933890472239510,0x0,China,United States,,1,0,policy-deny,265,0,0,0,,DC1-PA3220-1,from-policy,,,0,,0,,N/A,0,0,0,0,e7553640-425c-4dda-8f02-57d4a3791c1c,0,0,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,2023-10-21T16:08:39.976-07:00,,,internet-utility,general-internet,network-protocol,2,"has-known-vulnerability,tunnel-other-application,pervasive-use",,untunneled,no,no,0
This is a syslog message from a product called PAN NGFW by Palo Alto. The following fields were extracted from the message:
action: block
application: ping
clientbytes: 60
clientpackets: 1
facilitycode: 1
facilitylabel: user-level
localhostname: DC1-PA3220-1
localstarttime: Oct 21 16:08:39
messagetype: traffic_drop
priority: 14
protocol: 1
rulename: Geo Block Inbound
senderhost: 10.99.10.30
sensitivity: normal
severitycode: 6
severitylabel: informational
sourceinfo: unknown
tags: ['rfc3164', 'pan_firewall', 'traffic_drop']
totalbytes: 60
streamName: pan_firewall
clientIP: 143.152.215.227
serverIP: 201.103.8.182