Optional V13 Log Header Format
The CSV fields in the header row of the Optional Log header.
"Timestamp","Identity Email","Identity Labels","Identity Type Labels","Host Name","Verdict","Client OS","Client Browser","Client Geolocation","Client IP","Ruleset ID","Rule ID","Private App Group ID","Private App ID","Private Resource ID","Private Resource Group ID","Step Up Auth Type","Step Up Auth Result","Step Up Auth Token Life","Posture ID","Requested ID FQDN","Resolved IP","App Connector Group ID","Headend Type","Duo Device ID","Duo Device ID String","System Password","Client Firewall","Disk Encryption","Anti Malware Agents","Transaction ID","Block Reason","Application Port","Application Protocol","Tunnel Type","Secure Client Version","Possible Match Ruleset ID","Possible Match Rule ID","Possible Match Posture","Source Process ID","Source Process Name","Source Process Hash","Source Process User Name","Organization ID","Ad Joined ID","Enforced By", "FTD enforcement ID", "FTD Enforcement Name", "MDM Source", "MDM Device ID", "MDM Is Managed", "MDM Is Compliant", "MDM Last Updated", "Applied Trusted Network", "Detected Trusted Network", "ZTA Profile ID", "Egress IP"