Hi, I am trying to ingest logs from Cisco Meraki MX to my SIEM and I'm getting more event types that the ones listed here: https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_and_Log_Samples
Would you mind sharing some knowledge on what are the event types ip_flow_start, ip_flow_end, l7_firewall and when are these events being logged by the appliances? Also, are the 2 event types ip_flow_start, ip_flow_end a subset of the event type 'flows'?
