Summary
In the TDA syslog, the white spaces are URL-encoded, as shown by the following example:
&Description=Monitored%20client%20has%20potential%20outbound%20security%20risk%2E
Details
This cannot be changed on TDA 2.6. However, you can upgrade to Deep Discovery Inspector (DDI) 3.5 or a later version, which supports more log formats.