LEEF:9.1.0|Varonis|DatAdvantage|<DatAdvantage Version>|<Rule Name>|	cat=<Alert Category>	devTime=<Alert time>	devTimeFormat=MMM dd yyyy HH:mm:ss	proto=Syslog	sev=<Severity>	src=<Device IP Address>	Device_Name=<Device Name>	Alert_Description=<Alert Description>	usrName=<Acting Object>	accountName=<Acting Object SAM Account Name>	domain=<Acting Object Domain Name>	Event_Type=<Event Type>	Event_Type_ID=<Event Op Code>	Event_Status=<Event Status>	Affected_Object=<Affected Object>	Event_File_Server_Domain=<File Server/Domain>	Affected_Object_Path=<Path>	Event_Additional_Data=<Additional data>	Threshold_Value=<Threshold>	Threshold_First_Timestamp=<First event time>	Event_by_MailboxOwner=<Client Access Type>	Email_Sender=<Mail Source>	Email_Date=<Mail Date>	Account_of_Changed_Permissions=<Trustee>	Permissions_Changes=<Changed Permissions>	Permissions_before_Change=<Permissions Before Change>	Permissions_after_Change=<Permissions After Change>	Alert_Page_URL=<Alert page URL>	Alert_ID=<Alert ID>