EventData Class

Definition

The Azure event log entries are of type EventData.

public class EventData
type EventData = class
Public Class EventData
Inheritance
System.Object
EventData

Properties

Authorization

The sender authorization information.

Caller

the email address of the user who has performed the operation, the UPN claim or SPN claim based on availability.

Category

the event category.

Claims

key value pairs to identify ARM permissions.

CorrelationId

the correlation Id, usually a GUID in the string format. The correlation Id is shared among the events that belong to the same uber operation.

Description

the description of the event.

EventDataId

the event data Id. This is a unique identifier for an event.

EventName

the event name. This value should not be confused with OperationName. For practical purposes, OperationName might be more appealing to end users.

EventTimestamp

the timestamp of when the event was generated by the Azure service processing the request corresponding the event. It in ISO 8601 format.

HttpRequest

the HTTP request info. Usually includes the 'clientRequestId', 'clientIpAddress' (IP address of the user who initiated the event) and 'method' (HTTP method e.g. PUT).

Id

the Id of this event as required by ARM for RBAC. It contains the EventDataID and a timestamp information.

Level

the event level.

OperationId

It is usually a GUID shared among the events corresponding to single operation. This value should not be confused with EventName.

OperationName

the operation name.

Properties

the set of <Key, Value> pairs (usually a Dictionary<String, String>) that includes details about the event.

ResourceGroupName

the resource group name of the impacted resource.

ResourceId

the resource uri that uniquely identifies the resource that caused this event.

ResourceProviderName

the resource provider name of the impacted resource.

ResourceType

the resource type.

Status

a string describing the status of the operation. Some typical values are: Started, In progress, Succeeded, Failed, Resolved.

SubmissionTimestamp

the timestamp of when the event became available for querying via this API. It is in ISO 8601 format. This value should not be confused eventTimestamp. As there might be a delay between the occurrence time of the event, and the time that the event is submitted to the Azure logging infrastructure.

SubscriptionId

the Azure subscription Id usually a GUID.

SubStatus

the event sub status. Most of the time, when included, this captures the HTTP status code of the REST call. Common values are: OK (HTTP Status Code: 200), Created (HTTP Status Code: 201), Accepted (HTTP Status Code: 202), No Content (HTTP Status Code: 204), Bad Request(HTTP Status Code: 400), Not Found (HTTP Status Code: 404), Conflict (HTTP Status Code: 409), Internal Server Error (HTTP Status Code: 500), Service Unavailable (HTTP Status Code:503), Gateway Timeout (HTTP Status Code: 504).

TenantId

the Azure tenant Id.

Applies to