<4>Jul 26 08:35:42 OAK-SYM-V01 SymantecServer: WSFTEL-A1102,Local Host IP: ff02::c,Local Port: 1900,Local Host MAC: 33330000000C,Remote Host IP: fe80::8e34:8816:f8f4:5160,Remote Host Name: ,Remote Port: 60811,Remote Host MAC: 002B675D61A5,UDP,Inbound,Begin: 2024-07-26 08:22:45,End Time: 2024-07-26 08:23:21,Occurrences: 6,Application: C:/Windows/System32/svchost.exe,Rule: Block UPnP Discovery,Location: Default,User Name: LOCAL SERVICE,Domain Name: NT AUTHORITY,Action: Blocked,SHA-256: 6fc3bf1fdfd76860be782554f8d25bd32f108db934d70f4253f1e5f23522e503,MD-5: 7469CC568AD6821FD9D925542730A7D8
{
    "facilityLabel": "kernel",
    "fieldExtractorName": "symantec_sep",
    "localHostname": "OAK-SYM-V01",
    "localStartTime": "Jul 26 08:35:42",
    "message": "<4>Jul 26 08:35:42 OAK-SYM-V01 SymantecServer: WSFTEL-A1102,Local Host IP: ff02::c,Local Port: 1900,Local Host MAC: 33330000000C,Remote Host IP: fe80::8e34:8816:f8f4:5160,Remote Host Name: ,Remote Port: 60811,Remote Host MAC: 002B675D61A5,UDP,Inbound,Begin: 2024-07-26 08:22:45,End Time: 2024-07-26 08:23:21,Occurrences: 6,Application: C:/Windows/System32/svchost.exe,Rule: Block UPnP Discovery,Location: Default,User Name: LOCAL SERVICE,Domain Name: NT AUTHORITY,Action: Blocked,SHA-256: 6fc3bf1fdfd76860be782554f8d25bd32f108db934d70f4253f1e5f23522e503,MD-5: 7469CC568AD6821FD9D925542730A7D8",
    "messageType": "management_message",
    "priority": 4,
    "program": "SymantecServer",
    "senderHost": "10.0.1.140",
    "sensitivity": "normal",
    "severityCode": 4,
    "severityLabel": "warning",
    "sourceInfo": "unknown",
    "streamName": "symantec_sep",
    "tags": [
        "rfc3164",
        "symantec_sep",
        "management_message"
    ]
}