Adds or removes metadata fields to or from the reported firewall logs.
Must be one of: exclude-all, include-all