Connection Log

<13>%<:%b %_2d %T> %<applianceHostName> vendor=Forcepoint 
product="Email Security" version=%<version> event=Connection
dvc=%<applianceIP> dvchost=%<=applianceHostName> 
rt=%<timestamp> externalId=%<connectionID> src=%<sourceIP> 
dst=%<destinationIP> app=%<transportType> reason=%<reason> 
spfResult=%<spfResult> %<\\n>