When exporting logs from SD Cloud—specifically logs related to Web Filter (WEBFILTER)—the exported output does not include several key fields such as category, source interface, and profile name. These fields remain visible within the SD Cloud dashboard but do not appear in the downloaded/exported log files. The behavior is consistent across all exported log sets.

Exported logs are missing, Category, Source Interface, Profile Name; however, the same fields are visible within the SD Cloud dashboard UI. Missing fields only affect the exported log data. 

This is an expected behavior. SD Cloud currently supports exporting only a predefined set of fields, and category, source interface, and profile name have never been included in the exported fields.

SD Cloud currently supports exporting only the following fields:

“Log generated Time”, “Device Name”, “Policy Name”, “Event Type”, “Event Category”, “Source Address”, “Destination Address”, “Source Port”, “Destination Port”, “Attack Name”, “Threat Severity”, “Device Id”, “Domain Id”, “Facility”, “File Name”, “Host”, “Name”, “Priority”, “Receiving Host”, “Roles”, “Source Zone Name”, “Url”, “User Name”, “Application”, “Application Category”, “Application SubCategory”, “Destination NAT RuleName”, “Destination NAT Rule Type”, “Nested Application”, “Destination Zone Name”, “Source NAT RuleName”, “Source NAT RuleType”, “Reason”, “Session ID”, “NAT Source Address”, “NAT Destination Address”, “NAT Destination Port”, “NAT Source Port”, “Argument”, “Action”

The fields category, source interface, and profile name are not supported in exported logs at this time. They may be included in a future release based on roadmap improvements.