Message log

<13>%<:%b %_2d %T> %<applianceHostName> 
CEF:0|Forcepoint|Email 
Security|%<version>|Message|Message|5| dvc=%<applianceIP> 
dvchost=%<=applianceHostName> rt=%<timestamp> 
externalId=%<connectionID> messageId=%<messageId> 
suser=%<=sender> duser=%<=recipient> msg=%<=subject> 
in=%<messageSize> trueSrc=%<tsip> from=%<=from> to=%<=to> 
cc=%<=cc> x-mailer=%<=x_mailer> %<\\n>