Message Log
<13>%<:%b %_2d %T> %<applianceHostName> vendor=Forcepoint
product="Email Security" version=%<version> event=Message
dvc=%<applianceIP> dvchost=%<=applianceHostName>
rt=%<timestamp> externalId=%<connectionID>
messageId=%<messageId> suser="%<=sender>"
duser="%<=recipient>" msg="%<=subject>" in=%<messageSize>
trueSrc=%<tsip> from="%<=from>" to="%<=to>" cc="%<=cc>" x-
mailer="%<=x_mailer>" %<\\n>