Connection log

<13>%<:%b %_2d %T> %<applianceHostName> 
CEF:0|Forcepoint|Email 
Security|%<version>|Connection|Connection|5| 
dvc=%<applianceIP> dvchost=%<=applianceHostName> 
rt=%<timestamp> externalId=%<connectionID> src=%<sourceIP> 
dst=%<destinationIP> app=%<transportType> reason=%<reason> 
spfResult=%<spfResult> %<\\n>