,$time_received,$serial,$type,$subtype,$config_ver,$time_generated,$src,$dst,$natsrc,$natdst,$rule,$srcuser,$dstuser,$app,$vsys,$from,$to,$inbound_if,$outbound_if,$logset,$time_received,$sessionid,$repeatcnt,$sport,$dport,$natsport,$natdport,$flags,$proto,$action,$tunnel,,,$src_uuid,$dst_uuid,$rule_uuid,$hs_stage_c2f,$hs_stage_f2s,$tls_version,$tls_keyxchg,$tls_enc,$tls_auth,$policy_name,$ec_curve,$err_index,$root_status,$chain_status,$proxy_type,$cert_serial,$fingerprint,$notbefore,$notafter,$cert_ver,$cert_ver,$cn_len,$issuer_len,$rootcn_len,$sni_len,$cert_flags,$cn,$issuer_cn,$root_cn,$sni,$error,$container_id,$pod_namespace,$pod_name,$src_edl,$dst_edl,$src_dag,$dst_dag,$high_res_timestamp,$src_category,$src_profile,$src_model,$src_vendor,$src_osfamily,$src_osversion,$src_host,$src_mac,$dst_category,$dst_profile,$dst_model,$dst_vendor,$dst_osfamily,$dst_osversion,$dst_host,$dst_mac,$seqno,$actionflags,$dg_hier_level_1,$dg_hier_level_2,$dg_hier_level_3,$dg_hier_level_4,$vsys_name,$device_name,$vsys_id,$subcategory_of_app,$category_of_app,$technology_of_app,$risk_of_app,$characteristic_of_app,$container_of_app,$is_saas_of_app,$sanctioned_state_of_app,$cluster_name