<134>Original Address=75.146.93.165 1 1689955428.526253565 M61_MX67C_Savannah l7_firewall src=125.199.29.158 dst=211.165.114.52 protocol=tcp sport=59623 dport=443 decision=blocked
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
action: block
clientport: 59623
messagetype: anomalous_behavior
program: l7_firewall
protocol: 6
senderhost: 192.168.2.250
sensitivity: normal
serverport: 443
sourceinfo: unknown
tags: ['meraki_l7_firewall', 'anomalous_behavior']
streamName: meraki_l7_firewall
clientIP: 125.199.29.158
serverIP: 211.165.114.52