Log Formats and Versioning
Secure Access stores zipped CSV log files in Cisco's managed AWS S3 bucket or your own AWS S3 bucket. Each log file displays multiple columns of information that are extracted from your Secure Access logs. A log file may have additional fields that are not shown in the Secure Access reports.
The latest version of the Secure Access log format is v12.
Note: Logs are not always chronological and are not always in the specific time bucket based on the timestamp of the log event.