File format definition for SIEM logging

The log files downloaded from the cloud service are comma-separated value (CSV) files. Each file contains multiple lines, with one request per line.

Each line includes the reporting record attributes selected using the cloud portal. Attribute and Metric selection options are determined by the data type selected (Web Security or Email Security) and the number of columns is limited to 35 for Web Security and 25 for Email security log data.

Filters defined in the cloud portal are applied to the reporting data before it is exported.