v3.8.3/v3.8.4 - CEF suser field issue

[15U12U]

Hi,

There is an issue with the CEF adapter where the 'suser' field is assigned with numbers when forwarding logs via syslog. The 'suser' field didn't had this issue prior to the mentioned versions.

Please refer the following syslog message,

Msg: Apr 26 12:50:56 Device CEF:0|Cisco|Firepower|6.0|RNA:1003:1|CONNECTION STATISTICS|3|act=Allow app=DNS bytesIn=59 bytesOut=43 cs1=abc cs1Label=fwPolicy cs2=abc cs2Label=fwRule cs3=abc cs3Label=ingressZone cs4=abc cs4Label=egressZone cs5Label=secIntelCategory destinationDnsDomain=example.com deviceExternalId=28 deviceInboundInterface=if1 deviceOutboundInterface=if2 dpt=53 dst=X.X.X.X dvchost=abc dvcpid=4 end=1619406041000 externalId=37471 proto=17 reason=N/A requestClientApplication=DNS client rt=1619406041000 spt=52612 src=Y.Y.Y.Y start=1619406041000 suser=9999999\0x0a

suser=9999999