<14>Aug  9 11:08:23 CPB-BH-PA220 1,2022/08/09 11:08:23,012801150189,THREAT,url,2560,2022/08/09 11:08:23,130.180.21.8,127.66.179.125,76.80.79.198,127.66.179.125,IT Users Outbound,,,ssl,vsys1,L3 Trust,L3 Untrust,ethernet1/1,sdwan.901,ForwardToPanorama,2022/08/09 11:08:23,25492,1,62760,443,16073,443,0x403400,tcp,block-url,"ad.turn.com/",(9999),web-advertisements,informational,client-to-server,64078204,0xa000000000000000,10.0.0.0-10.255.255.255,United States,0,,0,,,0,,,,,,,,0,27,53,0,0,,CPB-BH-PA220,,,,,0,,0,,N/A,unknown,AppThreat-0-0,0x0,0,4294967295,,"web-advertisements,low-risk",065bc8bd-1c6f-4c23-9eb0-21f59a597833,0,,0.0.0.0,,,,,,,,,,,,,,,,,,,,,,,,,,,0,2022-08-09T11:08:23.893-07:00,,,
This is a syslog message from a product called PAN NGFW by Palo Alto. The following fields were extracted from the message:
rulename: IT Users Outbound
senderhost: 10.87.7.11
serverport: 443
severitylabel: informational
tags: ['rfc3164', 'pan_firewall', 'firewall_log', 'CPB-BH-PA220', '(9999)', 'ssl']
productids: [20, 0]
rulecategory: unknown
severitycode: 6
sourceinfo: unknown
action: block
localstarttime: 2022/08/09 11:08:23
sensitivity: normal
localhostname: CPB-BH-PA220
priority: 14
facilitylabel: user-level
messagetype: firewall_log
clientport: 62760
protocol: 6
facilitycode: 1
streamName: pan_firewall
clientIP: 130.180.21.8
serverIP: 127.66.179.125