zpa_get_lss_log_format
Retrieve pre-configured LSS log format templates (CSV, JSON, TSV) for a specific source log type to verify which fields ZPA serializes into the SIEM stream.
Instructions
Get the pre-configured LSS log format templates (csv / json / tsv) for a given source log type. Useful for confirming exactly which fields ZPA serializes into the SIEM stream (read-only).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| log_type | Yes | Human-readable LSS log type (e.g. `user_activity`, `audit_logs`, `app_connector_metrics`). Use `zpa_list_lss_log_types` to discover the valid values. | |
| service | No | The service to use. | zpa |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |