<4>Jul 13 17:35:02 hq-ui002 kernel: [1207473.204430] [UFW BLOCK] IN=ens5 OUT= MAC=02:0a:06:9e:e1:d2:02:4b:94:bf:cd:44:08:00 SRC=41.209.41.104 DST=237.78.88.35 LEN=52 TOS=0x00 PREC=0x00 TTL=255 ID=17788 DF PROTO=TCP SPT=47150 DPT=80 WINDOW=1224 RES=0x00 ACK FIN URGP=0 
{
    "action": "block",
    "clientport": 47150,
    "facilitylabel": "kernel",
    "localhostname": "hq-ui002",
    "localstarttime": "Jul 13 17:35:02",
    "message": "<4>Jul 13 17:35:02 hq-ui002 kernel: [1207473.204430] [UFW BLOCK] IN=ens5 OUT= MAC=02:0a:06:9e:e1:d2:02:4b:94:bf:cd:44:08:00 SRC=41.209.41.104 DST=237.78.88.35 LEN=52 TOS=0x00 PREC=0x00 TTL=255 ID=17788 DF PROTO=TCP SPT=47150 DPT=80 WINDOW=1224 RES=0x00 ACK FIN URGP=0 ",
    "messagetype": "firewall_action",
    "priority": 4,
    "program": "kernel",
    "protocol": 6,
    "senderhost": "10.1.100.232",
    "sensitivity": "normal",
    "serverbytes": 52,
    "serverport": 80,
    "severitycode": 4,
    "severitylabel": "warning",
    "sourceinfo": "unknown",
    "tags": [
        "rfc3164",
        "ufw",
        "firewall_action"
    ],
    "streamName": "ufw",
    "clientIP": "41.209.41.104",
    "serverIP": "237.78.88.35"
}