CEF:1|vendor|product|version|class|name|severity|someExtension=someValue