SafeSquid Gateway Policy Configuration Changed

Detects configuration changes on the SafeSquid gateway. Adding a bypass or relaxing a category opens an egress route for the whole organisation, and because browsing continues to work normally nobody reports anything. Onboarding: SAFESQUID-SWG is ingested via Syslog (Bloo extractor 812). Integration guide: https://bloo.io/docs/hypercloud/syslog-connector BQL (Bloo Query Language): stream=configuration where sourcename='SAFESQUID-SWG' and action='CONFIGURATION_CHANGED' | groupby user