Audit Log

<13>%<:%b %_2d %T> %<applianceHostName> vendor=Forcepoint 
product="Email Security" version=%<version>event="Audit Log" 
rt=%<timestamp> dvc=%<applianceIP> src=%<clientIP> 
suser=%<=user> spriv=%<=role> page=%<page> 
element=%<element> act=%<action> msg=%<=details> %<\\n>