(eventType:policy.evaluate_sign_on "target.displayName":Okta\ Admin\ Console) ("debugContext.debugData.behaviors":POSITIVE* OR "debugContext.debugData.logOnlySecurityData":POSITIVE*)