-
Notifications
You must be signed in to change notification settings - Fork 8
/
testfile1.json
108 lines (108 loc) · 6.57 KB
/
testfile1.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
{
"records": [
{
"time": "2017-12-14T19:14:33.7299944Z",
"resourceId": "/SUBSCRIPTIONS/743F6ED6-83A8-46F0-822D-EA93B953952D/RESOURCEGROUPS/BLOGSTASHRG/PROVIDERS/MICROSOFT.COMPUTE/VIRTUALMACHINES/LSVM",
"operationName": "MICROSOFT.COMPUTE/VIRTUALMACHINES/DELETE",
"category": "Delete",
"resultType": "Success",
"resultSignature": "Succeeded.",
"durationMs": 0,
"callerIpAddress": "213.86.212.84",
"correlationId": "4e24d009-38f0-4fbe-b8ad-6042a276bcc3",
"identity": {
"authorization": {
"scope": "/subscriptions/743f6ed6-83a8-46f0-822d-ea93b953952d/resourceGroups/bLogstashRG",
"action": "Microsoft.Resources/subscriptions/resourceGroups/delete",
"evidence": {
"role": "Subscription Admin"
}
},
"claims": {
"aud": "https://management.core.windows.net/",
"iss": "https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/",
"iat": "1513278448",
"nbf": "1513278448",
"exp": "1513282348",
"_claim_names": "{\"groups\":\"src1\"}",
"_claim_sources": "{\"src1\":{\"endpoint\":\"https://graph.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/users/88a79efd-2430-41ba-879c-7ffd36bb1553/getMemberObjects\"}}",
"http://schemas.microsoft.com/claims/authnclassreference": "1",
"aio": "ASQA2/8GAAAAxqf6su8yQsE41kZGzgLXzzVeUanFAW8YlekEHCueS4k=",
"http://schemas.microsoft.com/claims/authnmethodsreferences": "rsa,mfa",
"appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
"appidacr": "2",
"http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier": "ed19b573-3ac7-4902-8754-d47ff544c509",
"e_exp": "262800",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Oliver",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Greg",
"ipaddr": "213.86.212.84",
"name": "Greg Oliver",
"http://schemas.microsoft.com/identity/claims/objectidentifier": "88a79efd-2430-41ba-879c-7ffd36bb1553",
"onprem_sid": "S-1-5-21-2127521184-1604012920-1887927527-4569185",
"puid": "1003BFFD801C3922",
"http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "TSn71bUpQXFqid8IktShDdx1n595ZuMw8ZYS1r-X29k",
"http://schemas.microsoft.com/identity/claims/tenantid": "72f988bf-86f1-41af-91ab-2d7cd011db47",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "[email protected]",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "[email protected]",
"uti": "ZfzTndUFFUKN48GnGxwTAA",
"ver": "1.0"
}
},
"level": "Information",
"location": "global"
},
{
"time": "2017-12-14T19:14:33.7299944Z",
"resourceId": "/SUBSCRIPTIONS/743F6ED6-83A8-46F0-822D-EA93B953952D/RESOURCEGROUPS/BLOGSTASHRG/PROVIDERS/MICROSOFT.COMPUTE/VIRTUALMACHINES/LSVM",
"operationName": "MICROSOFT.COMPUTE/VIRTUALMACHINES/DELETE",
"category": "Delete",
"resultType": "Success",
"resultSignature": "Succeeded.",
"durationMs": 0,
"callerIpAddress": "213.86.212.84",
"correlationId": "4e24d009-38f0-4fbe-b8ad-6042a276bcc3",
"identity": {
"authorization": {
"scope": "/subscriptions/743f6ed6-83a8-46f0-822d-ea93b953952d/resourceGroups/bLogstashRG",
"action": "Microsoft.Resources/subscriptions/resourceGroups/delete",
"evidence": {
"role": "Subscription Admin"
}
},
"claims": {
"aud": "https://management.core.windows.net/",
"iss": "https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/",
"iat": "1513278448",
"nbf": "1513278448",
"exp": "1513282348",
"_claim_names": "{\"groups\":\"src1\"}",
"_claim_sources": "{\"src1\":{\"endpoint\":\"https://graph.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/users/88a79efd-2430-41ba-879c-7ffd36bb1553/getMemberObjects\"}}",
"http://schemas.microsoft.com/claims/authnclassreference": "1",
"aio": "ASQA2/8GAAAAxqf6su8yQsE41kZGzgLXzzVeUanFAW8YlekEHCueS4k=",
"http://schemas.microsoft.com/claims/authnmethodsreferences": "rsa,mfa",
"appid": "c44b4083-3bb0-49c1-b47d-974e53cbdf3c",
"appidacr": "2",
"http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier": "ed19b573-3ac7-4902-8754-d47ff544c509",
"e_exp": "262800",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname": "Oliver",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname": "Greg",
"ipaddr": "213.86.212.84",
"name": "Greg Oliver",
"http://schemas.microsoft.com/identity/claims/objectidentifier": "88a79efd-2430-41ba-879c-7ffd36bb1553",
"onprem_sid": "S-1-5-21-2127521184-1604012920-1887927527-4569185",
"puid": "1003BFFD801C3922",
"http://schemas.microsoft.com/identity/claims/scope": "user_impersonation",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier": "TSn71bUpQXFqid8IktShDdx1n595ZuMw8ZYS1r-X29k",
"http://schemas.microsoft.com/identity/claims/tenantid": "72f988bf-86f1-41af-91ab-2d7cd011db47",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name": "[email protected]",
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn": "[email protected]",
"uti": "ZfzTndUFFUKN48GnGxwTAA",
"ver": "1.0"
}
},
"level": "Information",
"location": "global"
}
]
}