,$time_received,$serial,$type,$subtype,,$time_generated,$src,$dst,$natsrc,$natdst,$rule,$srcuser,$dstuser,$app,$vsys,$from,$to,$inbound_if,$outbound_if,$logset,,$sessionid,$repeatcnt,$sport,$dport,$natsport,$natdport,$flags,$proto,$action,$severity,$seqno,$actionflags,$srcloc,$dstloc,$dg_hier_level_1,$dg_hier_level_2,$dg_hier_level_3,$dg_hier_level_4,$vsys_name,$device_name,$tunnelid,$monitortag,$parent_session_id,$parent_start_time,$tunnel,$bytes,$bytes_sent,$bytes_received,$packets,$pkts_sent,$pkts_received,$max_encap,$unknown_proto,$strict_check,$tunnel_fragment,$sessions_created,$sessions_closed,$session_end_reason,$action_source,$start,$elapsed,$tunnel_insp_rule,$remote_user_ip,$remote_user_id,$rule_uuid,$pcap_id,$dynusergroup_name,$src_edl,$dst_edl,$high_res_timestamp,$nssai_sd,$nssai_sst,$pdu_session_id,$subcategory_of_app,$category_of_app,$technology_of_app,$risk_of_app,$characteristic_of_app,$container_of_app,$is_saas_of_app,$sanctioned_state_of_app,$cluster_name