Hybrid log

<13>%<:%b %_2d %T> %<applianceHostName> 
CEF:0|Forcepoint|Email Security|%<version>|Hybrid|Hybrid|5| 
dvc=%<applianceIP> dvchost=%<=applianceHostName> 
rt=%<timestamp> messageId=%<messageId> suser=%<=sender> 
duser=%<=recipient> msg=%<=subject> in=%<messageSize> 
src=%<sourceIP> act=%<=action> reason=%<=reason> 
spamScore=%<=spamScore> %<\\n>