Policy Log

<13>%<:%b %_2d %T> %<applianceHostName> 
LEEF:1.0|Forcepoint|Email 
Security|%<version>|Policy|%<reason>%<\\t>identSrc=%<applian 
ceIP>%<\\t>identHostName=%<=applianceHostName>%<\\t>devTime=
%<timestamp>%<\\t>messageId=%<messageId>%<\\t>sender=%<=send 
er>%<\\t>recipient=%<=recipient>%<\\t>from=%<=fromAddress>%<
\\t>replyTo=%<=replyToAddress><\\t>to=%<=to>%<\\t>cc=%<=cc>%
<\\t>srcBytes=%<messageSize>%<\\t>deviceDirection=%<directio 
n>%<\\t>deviceFacility=%<=policyName>%<\\t>deviceProcessName
=%<=ruleName>%<\\t>act=%<action>%<\\t>url=%<=urlDetail>%<\\t
>cat=%<=spamEngineName>%<\\t>virus=%<=virusName>%<\\t>fnameA 
ndfileHash=%<=fileResult>%<\\t>exceptionReason=%<=exceptionR 
eason>%<\\t>hybridSpamScore=%<=hybridSpamScore>%<\\t>localSp 
amScore=%<=localSpamScore><%\\t>subject=%<=subject>%<\\t>tru 
eSrc=%<tsip>% <\\t>x-mailer=%<=x_mailer>%<\\n>