SCTP Syslog Default Field Order

Example SCTP log in Syslog:
Oct 13 01:09:49 gke-standard-cluster-2-pool-1-6ea9f13a-g2z7 695 <142>1 2020-10-13T01:09:49.516Z stream-logfwd20-156653024-10121421-eq28-harness-16kn logforwarder - panwlogs - 1,​2020-10-13T01:09:43.000000Z,​007051000113358,​SCTP,​,​,​2020-10-13T01:09:35.000000Z,​xxx.xx.x.xx,​xxx.xx.x.xx,​xxx.xx.x.xx,​xxx.xx.x.xx,​allow-business-apps,​,​"xxxxx\xxxxx o"xxxxxxxxxx"'"xxxxxxxxxx"test",​mcafee-endpoint-encryption,​vsys1,​untrust,​ethernet4Zone-test1,​,​,​rs-logging,​,​424904,​1,​21740,​17506,​25019,​4608,​2048,​tcp,​drop-packet,​0,​0,​0,​0,​,​PA-VM,​201003871,​-9223372036854775808,​1705351682,​12,​Medium,​255,​authentication failure,​8,​1565171669,​192004283,​0,​-1,​-1,​0,​0,​,​0,​0,​,​,​913,​19,​894,​2628,​1327,​1301,​f8800078-8fac-4abf-98a0-77c96ef3ca36,​1873cc5c-0d31,​pns_default,​pan-dp-77754f4,​,​,​,​,​2020-10-13T01:09:36.365000Z
The following identifies the fields contained by default when you forward logs to a syslog receiver. The fields are identified in the default order that they appear in each log line.

Recommended For You