Hi friend!
I did not find that the USG firewall can send logs in CEF format.
When the FW outputs logs, it supports encapsulating log information into different formats for output. Different types of logs have different encapsulation formats supported. The specific sending formats are as follows:
System log: Syslog
Operation log: Syslog
Business logs: Syslog, Dataflow
Session logs: Syslog, Binary, Netflow