Audit Log
<13>%<:%b %_2d %T> %<applianceHostName>
CEF:0|Forcepoint|Email Security|%<version>|Audit Log|Audit Log|5|
rt=%<timestamp> dvc=%<applianceIP> src=%<clientIP>
suser=%<=user> spriv=%<=role> page=%<page>
element=%<element> act=%<action> msg=%<=details> %<\\n>