<134>Original Address=198.24.89.6 1 1685848620.279265983 M66_MX67C_HHI l7_firewall src=249.255.74.56 dst=88.176.0.108 protocol=udp sport=60578 dport=55190 decision=blocked
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
action: block
clientport: 60578
messagetype: anomalous_behavior
program: l7_firewall
protocol: 17
senderhost: 192.168.2.250
sensitivity: normal
serverport: 55190
sourceinfo: unknown
tags: ['meraki_l7_firewall', 'anomalous_behavior']
streamName: meraki_l7_firewall
clientIP: 249.255.74.56
serverIP: 88.176.0.108