Would like to have an additional column in the query log that simply lists out what caused a domain to get blocked, either a category, a threat vector, or an appaware application block. This will help admins narrow down root cause of domain blocks pretty quickly.