query auditFeed ( $accountIDs:[ID!] $timeFrame:TimeFrame! $auditFieldFilterInput:[AuditFieldFilterInput!] $marker:String $fieldNames:[AuditFieldName!]) {
	auditFeed ( accountIDs:$accountIDs timeFrame:$timeFrame filters:$auditFieldFilterInput marker:$marker ) {
from {
	container {
		id
		name
		description
		size
		audit {
			createdAt
			createdBy
			lastModifiedBy
			lastModifiedAt
		}
	}
}
to {
	comment {
		id
		createdAt
		text
		actor {
			__typename
			... on AdminRef {
				id
				name
			}
			... on ApiKeyRef {
				id
				name
			}
		}
	}
}
		marker
		fetchedCount
		hasMore
		accounts {
id {
	id
	status
	description
	firstSignal
	lastSignal
	engineType
	vendor
	producer
	producerName
	connectionType
	indication
	queryName
	source
	criticality
	ticket
	research
	siteName
	storyDuration
	analystFeedback {
		verdict
		severity
		threatClassification
		additionalInfo
		threatType {
			name
			recommendedAction
			details
		}
	}
	site {
		id
		name
	}
	user {
		id
		name
	}
	similarStoriesData {
		storyId
		threatTypeName
		verdict
		threatClassification
		similarityPercentage
		indication
	}
	networkIncidentTimeline {
		description
		created
		validated
		eventType
		incidentId
		networkEventSource
		eventIds
		acknowledged
		linkId
		linkName
		linkConfigPrecedence
		linkStatus
		linkConfigBandwidth
		deviceConfigHaRole
		deviceHaRoleState
		socketSerialId
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		linkQualityIssue {
			issueType
			direction
			current
			threshold
		}
	}
	bgpConnection {
		connectionName
		peerIp
		peerAsn
		catoIp
		catoAsn
	}
	ilmmDetails {
		linkDetails {
			description
			linkId
			ispLinkId
			comments
			onboardingStatus
			activeLicense
		}
		ispDetails {
			name
			description
			ispAccountId
			supportEmail
			supportPhone
			countryCode
			loaFile {
				fileName
				fileHash
				uploadedAt
			}
		}
		contacts {
			name
			phone
			email
		}
	}
}
			records ( fieldNames:$fieldNames   ) {
				admin {
	id {
		id
		status
		description
		firstSignal
		lastSignal
		engineType
		vendor
		producer
		producerName
		connectionType
		indication
		queryName
		source
		criticality
		ticket
		research
		siteName
		storyDuration
		analystFeedback {
			verdict
			severity
			threatClassification
			additionalInfo
			threatType {
				name
				recommendedAction
				details
			}
		}
		site {
			id
			name
		}
		user {
			id
			name
		}
		similarStoriesData {
			storyId
			threatTypeName
			verdict
			threatClassification
			similarityPercentage
			indication
		}
		networkIncidentTimeline {
			description
			created
			validated
			eventType
			incidentId
			networkEventSource
			eventIds
			acknowledged
			linkId
			linkName
			linkConfigPrecedence
			linkStatus
			linkConfigBandwidth
			deviceConfigHaRole
			deviceHaRoleState
			socketSerialId
			bgpConnection {
				connectionName
				peerIp
				peerAsn
				catoIp
				catoAsn
			}
			linkQualityIssue {
				issueType
				direction
				current
				threshold
			}
		}
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		ilmmDetails {
			linkDetails {
				description
				linkId
				ispLinkId
				comments
				onboardingStatus
				activeLicense
			}
			ispDetails {
				name
				description
				ispAccountId
				supportEmail
				supportPhone
				countryCode
				loaFile {
					fileName
					fileHash
					uploadedAt
				}
			}
			contacts {
				name
				phone
				email
			}
		}
	}
					name
	type {
		name
		recommendedAction
		details
	}
				}
				apiKey {
	id {
		id
		status
		description
		firstSignal
		lastSignal
		engineType
		vendor
		producer
		producerName
		connectionType
		indication
		queryName
		source
		criticality
		ticket
		research
		siteName
		storyDuration
		analystFeedback {
			verdict
			severity
			threatClassification
			additionalInfo
			threatType {
				name
				recommendedAction
				details
			}
		}
		site {
			id
			name
		}
		user {
			id
			name
		}
		similarStoriesData {
			storyId
			threatTypeName
			verdict
			threatClassification
			similarityPercentage
			indication
		}
		networkIncidentTimeline {
			description
			created
			validated
			eventType
			incidentId
			networkEventSource
			eventIds
			acknowledged
			linkId
			linkName
			linkConfigPrecedence
			linkStatus
			linkConfigBandwidth
			deviceConfigHaRole
			deviceHaRoleState
			socketSerialId
			bgpConnection {
				connectionName
				peerIp
				peerAsn
				catoIp
				catoAsn
			}
			linkQualityIssue {
				issueType
				direction
				current
				threshold
			}
		}
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		ilmmDetails {
			linkDetails {
				description
				linkId
				ispLinkId
				comments
				onboardingStatus
				activeLicense
			}
			ispDetails {
				name
				description
				ispAccountId
				supportEmail
				supportPhone
				countryCode
				loaFile {
					fileName
					fileHash
					uploadedAt
				}
			}
			contacts {
				name
				phone
				email
			}
		}
	}
					name
	type {
		name
		recommendedAction
		details
	}
				}
				object {
	id {
		id
		status
		description
		firstSignal
		lastSignal
		engineType
		vendor
		producer
		producerName
		connectionType
		indication
		queryName
		source
		criticality
		ticket
		research
		siteName
		storyDuration
		analystFeedback {
			verdict
			severity
			threatClassification
			additionalInfo
			threatType {
				name
				recommendedAction
				details
			}
		}
		site {
			id
			name
		}
		user {
			id
			name
		}
		similarStoriesData {
			storyId
			threatTypeName
			verdict
			threatClassification
			similarityPercentage
			indication
		}
		networkIncidentTimeline {
			description
			created
			validated
			eventType
			incidentId
			networkEventSource
			eventIds
			acknowledged
			linkId
			linkName
			linkConfigPrecedence
			linkStatus
			linkConfigBandwidth
			deviceConfigHaRole
			deviceHaRoleState
			socketSerialId
			bgpConnection {
				connectionName
				peerIp
				peerAsn
				catoIp
				catoAsn
			}
			linkQualityIssue {
				issueType
				direction
				current
				threshold
			}
		}
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		ilmmDetails {
			linkDetails {
				description
				linkId
				ispLinkId
				comments
				onboardingStatus
				activeLicense
			}
			ispDetails {
				name
				description
				ispAccountId
				supportEmail
				supportPhone
				countryCode
				loaFile {
					fileName
					fileHash
					uploadedAt
				}
			}
			contacts {
				name
				phone
				email
			}
		}
	}
					name
	type {
		name
		recommendedAction
		details
	}
				}
				account {
					entity {
	id {
		id
		status
		description
		firstSignal
		lastSignal
		engineType
		vendor
		producer
		producerName
		connectionType
		indication
		queryName
		source
		criticality
		ticket
		research
		siteName
		storyDuration
		analystFeedback {
			verdict
			severity
			threatClassification
			additionalInfo
			threatType {
				name
				recommendedAction
				details
			}
		}
		site {
			id
			name
		}
		user {
			id
			name
		}
		similarStoriesData {
			storyId
			threatTypeName
			verdict
			threatClassification
			similarityPercentage
			indication
		}
		networkIncidentTimeline {
			description
			created
			validated
			eventType
			incidentId
			networkEventSource
			eventIds
			acknowledged
			linkId
			linkName
			linkConfigPrecedence
			linkStatus
			linkConfigBandwidth
			deviceConfigHaRole
			deviceHaRoleState
			socketSerialId
			bgpConnection {
				connectionName
				peerIp
				peerAsn
				catoIp
				catoAsn
			}
			linkQualityIssue {
				issueType
				direction
				current
				threshold
			}
		}
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		ilmmDetails {
			linkDetails {
				description
				linkId
				ispLinkId
				comments
				onboardingStatus
				activeLicense
			}
			ispDetails {
				name
				description
				ispAccountId
				supportEmail
				supportPhone
				countryCode
				loaFile {
					fileName
					fileHash
					uploadedAt
				}
			}
			contacts {
				name
				phone
				email
			}
		}
	}
						name
	type {
		name
		recommendedAction
		details
	}
					}
					description
					helperFields
				}
	time {
		createdAt
		description
		type
		context
		descriptions
		category
		additionalInfo
		analystInfo {
			name
			email
		}
	}
				fields {
					name
					value {
						__typename
						... on StringValue {
	string {
		string
	}
						}
						... on DateValue {
	date {
		secondaryAzureVSocket {
			id
			interfaceIp
			floatingIp
			site {
				id
				name
			}
		}
	}
						}
						... on Entity {
	id {
		id
		status
		description
		firstSignal
		lastSignal
		engineType
		vendor
		producer
		producerName
		connectionType
		indication
		queryName
		source
		criticality
		ticket
		research
		siteName
		storyDuration
		analystFeedback {
			verdict
			severity
			threatClassification
			additionalInfo
			threatType {
				name
				recommendedAction
				details
			}
		}
		site {
			id
			name
		}
		user {
			id
			name
		}
		similarStoriesData {
			storyId
			threatTypeName
			verdict
			threatClassification
			similarityPercentage
			indication
		}
		networkIncidentTimeline {
			description
			created
			validated
			eventType
			incidentId
			networkEventSource
			eventIds
			acknowledged
			linkId
			linkName
			linkConfigPrecedence
			linkStatus
			linkConfigBandwidth
			deviceConfigHaRole
			deviceHaRoleState
			socketSerialId
			bgpConnection {
				connectionName
				peerIp
				peerAsn
				catoIp
				catoAsn
			}
			linkQualityIssue {
				issueType
				direction
				current
				threshold
			}
		}
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		ilmmDetails {
			linkDetails {
				description
				linkId
				ispLinkId
				comments
				onboardingStatus
				activeLicense
			}
			ispDetails {
				name
				description
				ispAccountId
				supportEmail
				supportPhone
				countryCode
				loaFile {
					fileName
					fileHash
					uploadedAt
				}
			}
			contacts {
				name
				phone
				email
			}
		}
	}
							name
	type {
		name
		recommendedAction
		details
	}
						}
					}
 {
						__typename
						... on StringValue {
	string {
		string
	}
						}
						... on DateValue {
	date {
		secondaryAzureVSocket {
			id
			interfaceIp
			floatingIp
			site {
				id
				name
			}
		}
	}
						}
						... on Entity {
	id {
		id
		status
		description
		firstSignal
		lastSignal
		engineType
		vendor
		producer
		producerName
		connectionType
		indication
		queryName
		source
		criticality
		ticket
		research
		siteName
		storyDuration
		analystFeedback {
			verdict
			severity
			threatClassification
			additionalInfo
			threatType {
				name
				recommendedAction
				details
			}
		}
		site {
			id
			name
		}
		user {
			id
			name
		}
		similarStoriesData {
			storyId
			threatTypeName
			verdict
			threatClassification
			similarityPercentage
			indication
		}
		networkIncidentTimeline {
			description
			created
			validated
			eventType
			incidentId
			networkEventSource
			eventIds
			acknowledged
			linkId
			linkName
			linkConfigPrecedence
			linkStatus
			linkConfigBandwidth
			deviceConfigHaRole
			deviceHaRoleState
			socketSerialId
			bgpConnection {
				connectionName
				peerIp
				peerAsn
				catoIp
				catoAsn
			}
			linkQualityIssue {
				issueType
				direction
				current
				threshold
			}
		}
		bgpConnection {
			connectionName
			peerIp
			peerAsn
			catoIp
			catoAsn
		}
		ilmmDetails {
			linkDetails {
				description
				linkId
				ispLinkId
				comments
				onboardingStatus
				activeLicense
			}
			ispDetails {
				name
				description
				ispAccountId
				supportEmail
				supportPhone
				countryCode
				loaFile {
					fileName
					fileHash
					uploadedAt
				}
			}
			contacts {
				name
				phone
				email
			}
		}
	}
							name
	type {
		name
		recommendedAction
		details
	}
						}
					}
				}
				fieldsMap
				flatFields
			}
		}
	}	
}