{
  "_comment": "Administrative example from https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-activity-log-schema",
  "authorization": {
    "action": "Microsoft.Network/networkSecurityGroups/write",
    "scope": "/subscriptions/dd042f02-6b3e-4f79-939a-6a381ffed3c0/resourcegroups/myResourceGroup/providers/Microsoft.Network/networkSecurityGroups/myNSG"
  },
  "caller": "rob@contoso.com",
  "channels": "Operation",
  "claims": {
    "aud": "https://management.core.windows.net/",
    "iss": "https://sts.windows.net/1114444b-7467-4144-a616-e3a5d63e147b/",
    "iat": "1234567890",
    "nbf": "1234567890",
    "exp": "1234567890",
    "_claim_names": "{\"groups\":\"src1\"}",
    "_claim_sources": "{\"src1\":{\"endpoint\":\"https://graph.windows.net/1114444b-7467-4144-a616-e3a5d63e147b/users/f409edeb-4d29-44b5-9763-ee9348ad91bb/getMemberObjects\"}}",
    "http://schemas.microsoft.com/claims/authnclassreference": "1",
    "aio": "A3GgTJdwK4vy7Fa7l6DgJC2mI0GX44tML385OpU1Q+z+jaPnFMwB",
    "http://schemas.microsoft.com/claims/authnmethodsreferences": "rsa,mfa",
    "appid": "355249ed-15d9-460d-8481-84026b065942",
    "appidacr": "2",
    "http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier": "10845a4d-ffa4-4b61-a3b4-e57b9b31cdb5",
    "e_exp": "262800",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Robertson",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Rob",
    "ipaddr": "111.111.1.111",
    "name": "Rob Robertson",
    "http://schemas.microsoft.com/identity/claims/objectidentifier": "f409edeb-4d29-44b5-9763-ee9348ad91bb",
    "onprem_sid": "S-1-5-21-4837261184-168309720-1886587427-18514304",
    "puid": "18247BBD84827C6D",
    "http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "b-24Jf94A3FH2sHWVIFqO3-RSJEiv24Jnif3gj7s",
    "http://schemas.microsoft.com/identity/claims/tenantid": "1114444b-7467-4144-a616-e3a5d63e147b",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "rob@contoso.com",
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "rob@contoso.com",
    "uti": "IdP3SUJGtkGlt7dDQVRPAA",
    "ver": "1.0"
  },
  "correlationId": "b5768deb-836b-41cc-803e-3f4de2f9e40b",
  "eventDataId": "d0d36f97-b29c-4cd9-9d3d-ea2b92af3e9d",
  "eventName": {
    "value": "EndRequest",
    "localizedValue": "End request"
  },
  "category": {
    "value": "Administrative",
    "localizedValue": "Administrative"
  },
  "eventTimestamp": "2018-01-29T20:42:31.3810679Z",
  "id": "/subscriptions/dd042f02-6b3e-4f79-939a-6a381ffed3c0/resourcegroups/myResourceGroup/providers/Microsoft.Network/networkSecurityGroups/myNSG/events/d0d36f97-b29c-4cd9-9d3d-ea2b92af3e9d/ticks/636528553513810679",
  "level": "Informational",
  "operationId": "04e575f8-48d0-4c43-a8b3-78c4eb01d287",
  "operationName": {
    "value": "Microsoft.Network/networkSecurityGroups/write",
    "localizedValue": "Microsoft.Network/networkSecurityGroups/write"
  },
  "resourceGroupName": "myResourceGroup",
  "resourceProviderName": {
    "value": "Microsoft.Network",
    "localizedValue": "Microsoft.Network"
  },
  "resourceType": {
    "value": "Microsoft.Network/networkSecurityGroups",
    "localizedValue": "Microsoft.Network/networkSecurityGroups"
  },
  "resourceId": "/subscriptions/dd042f02-6b3e-4f79-939a-6a381ffed3c0/resourcegroups/myResourceGroup/providers/Microsoft.Network/networkSecurityGroups/myNSG",
  "status": {
    "value": "Succeeded",
    "localizedValue": "Succeeded"
  },
  "subStatus": {
    "value": "",
    "localizedValue": ""
  },
  "submissionTimestamp": "2018-01-29T20:42:50.0724829Z",
  "subscriptionId": "dd042f02-6b3e-4f79-939a-6a381ffed3c0",
  "properties": {
    "statusCode": "Created",
    "serviceRequestId": "a4c11dbd-697e-47c5-9663-12362307157d",
    "responseBody": "",
    "requestbody": ""
  },
  "relatedEvents": []
}