Yes, every firewall varies the reporting of syslog. You may want to invest to a central syslog so that the reporting is centralize.

Events pertaining to firewall security, such as policy violations or intrusion attempts, are the main emphasis of security logs. Sample system logs may provide information about events or modifications to the system; monitoring logs could indicate network traffic; and security logs could show situations such as threats discovered or connections denied. The official Sangfor NGFW literature for the particular log types you are interested in should be consulted in order to develop regex patterns for log analysis, as the log format might vary depending on the firmware version and configuration settings.

The format are not the same as other because it varies from the versions, model, storage and the customization etc..

For the official Sangfor NGFW documentation about the log types and log formats, you may refer to the below document.