Source: https://www.microfocus.com/documentation/arcsight/arcsight-smartconnectors/pdfdoc/cisco-ironport-email-security-appliance-syslog/cisco-ironport-email-security-appliance-syslog.pdf