<3>Jul 26 18:06:00 OAK-SYM-V01 SymantecServer: SCID0045,Local Host IP: 224.0.0.1,Local Port: 2,Local Host MAC: 01005E000001,Remote Host IP: 0.0.0.0,Remote Host Name: ,Remote Port: 0,Remote Host MAC: A4B239B6D4E2,IP,Inbound,Begin: 2024-07-26 17:46:58,End Time: 2024-07-26 17:46:58,Occurrences: 1,Application: ,Rule: Allow IGMP traffic,Location: Default,User Name: sumorale,Domain Name: UMBRELLA,Action: Allowed,SHA-256: ,MD-5: 
{
    "facilityLabel": "kernel",
    "fieldExtractorName": "symantec_sep",
    "localHostname": "OAK-SYM-V01",
    "localStartTime": "Jul 26 18:06:00",
    "message": "<3>Jul 26 18:06:00 OAK-SYM-V01 SymantecServer: SCID0045,Local Host IP: 224.0.0.1,Local Port: 2,Local Host MAC: 01005E000001,Remote Host IP: 0.0.0.0,Remote Host Name: ,Remote Port: 0,Remote Host MAC: A4B239B6D4E2,IP,Inbound,Begin: 2024-07-26 17:46:58,End Time: 2024-07-26 17:46:58,Occurrences: 1,Application: ,Rule: Allow IGMP traffic,Location: Default,User Name: sumorale,Domain Name: UMBRELLA,Action: Allowed,SHA-256: ,MD-5: ",
    "messageType": "management_message",
    "priority": 3,
    "program": "SymantecServer",
    "senderHost": "10.0.1.140",
    "sensitivity": "normal",
    "severityCode": 3,
    "severityLabel": "error",
    "sourceInfo": "unknown",
    "streamName": "symantec_sep",
    "tags": [
        "rfc3164",
        "symantec_sep",
        "management_message"
    ]
}