Required headers
entry_identifier, start_date, end_date, source_ip, dest_ip, tool, user_context, command, description, output, comments, operator_name, tags
entry_identifier may be empty or unique. An optional extra_fields column accepts a JSON object keyed by extra-field internal name.