What attributes are always included in a log header?

What attributes are always included in a log header? (Choose three.)

A.
policyid

B.
level

C.
user

D.
time

E.
subtype

F.
duration