<4>Jul 26 12:03:27 OAK-SYM-V01 SymantecServer: OAK-GP-SQLD2,Local Host IP: 10.0.1.172,Local Port: 3,Local Host MAC: 005056B8980B,Remote Host IP: 10.10.1.10,Remote Host Name: ,Remote Port: 3,Remote Host MAC: 00000C07AC0B,ICMP,Outbound,Begin: 2024-07-26 11:49:59,End Time: 2024-07-26 11:49:59,Occurrences: 1,Application: ,Rule: Block_all,Location: Default,User Name: none,Domain Name: ,Action: Blocked,SHA-256: ,MD-5: 
This is a syslog message from a product called Symantec Endpoint Protection by Symantec. The following fields were extracted from the message:
facilityLabel: kernel
fieldExtractorName: symantec_sep
localHostname: OAK-SYM-V01
localStartTime: Jul 26 12:03:27
messageType: management_message
priority: 4
program: SymantecServer
senderHost: 10.0.1.140
sensitivity: normal
severityCode: 4
severityLabel: warning
sourceInfo: unknown
streamName: symantec_sep
tags: ['rfc3164', 'symantec_sep', 'management_message']