Refer to the official documentation below to configure log forwarding from Cisco Secure Email Gateway.
The Scope application supports ingestion of Cisco Secure Email Gateway logs in the Syslog format.
<166>Mar 17 18:24:37 amp: Info: File reputation query initiating. File Name = 'mod-6.exe', MID = 5, File Size = 1673216 bytes, File Type = application/x-dosexec