<14>Jul 31 05:11:42 DC1-PA3220-1 1,2023/07/31 05:11:42,016201032964,TRAFFIC,drop,2561,2023/07/31 05:11:42,161.48.197.64,24.140.57.65,0.0.0.0,0.0.0.0,Geo Block Inbound,,,not-applicable,vsys1,Untrust,Untrust,ethernet1/2,,Witfoo Log Forward Only,2023/07/31 05:11:42,0,1,56578,8152,0,0,0x0,tcp,deny,66,66,0,1,2023/07/31 05:11:41,0,any,,7250965734469180435,0x0,Germany,United States,,1,0,policy-deny,265,0,0,0,,DC1-PA3220-1,from-policy,,,0,,0,,N/A,0,0,0,0,e7553640-425c-4dda-8f02-57d4a3791c1c,0,0,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,2023-07-31T05:11:42.991-07:00,,,unknown,unknown,unknown,1,,,not-applicable,no,no,0
This is a syslog message from a product called PAN NGFW by Palo Alto. The following fields were extracted from the message:
action: block
application: not-applicable
clientbytes: 66
clientpackets: 1
clientport: 56578
facilitycode: 1
facilitylabel: user-level
localhostname: DC1-PA3220-1
localstarttime: Jul 31 05:11:42
messagetype: traffic_drop
priority: 14
protocol: 6
rulename: Geo Block Inbound
senderhost: 10.99.10.30
sensitivity: normal
serverport: 8152
severitycode: 6
severitylabel: informational
sourceinfo: unknown
tags: ['rfc3164', 'pan_firewall', 'traffic_drop']
totalbytes: 66
streamName: pan_firewall
clientIP: 161.48.197.64
serverIP: 24.140.57.65