<134>Original Address=75.146.93.165 1 1658148303.108180626 M61_MX67C_Savannah flows src=68.11.160.60 dst=6.238.213.155 protocol=udp sport=5967 dport=28947 pattern: 1 all
This is a syslog message from a product called Meraki by Cisco. The following fields were extracted from the message:
senderhost: 192.168.2.250
serverport: 5967
tags: ['deny', 'meraki', 'flow']
productids: [26, 0]
sourceinfo: unknown
action: block
sensitivity: normal
messagetype: flow
clientport: 28947
protocol: 17
streamName: meraki
clientIP: 6.238.213.155
serverIP: 68.11.160.60