In the tmp_0.csv file which contains details about the alert that fired, is there any consistency or default order of the columns? I would imagine it would write in the same columnar output as designed in the search but it seems to vary. The reason I am curious is because we are working on a script which takes the $searchPath, $ARGV passed via the alert to find the values of the search and pass them through an snmp trap. If the columns wont be consistent then this might now work properly. Any help is appreciated. Thanks!