{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.auditEvent",
  "title": "microsoft.graph.auditEvent",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "auditEvent",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "activity": {
          "type": "string",
          "description": "Friendly name of the activity.",
          "nullable": true
        },
        "activityDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The date time in UTC when the activity was performed.",
          "format": "date-time"
        },
        "activityOperationType": {
          "type": "string",
          "description": "The HTTP operation type of the activity.",
          "nullable": true
        },
        "activityResult": {
          "type": "string",
          "description": "The result of the activity.",
          "nullable": true
        },
        "activityType": {
          "type": "string",
          "description": "The type of activity that was being performed.",
          "nullable": true
        },
        "actor": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.auditActor"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "AAD user and application that are associated with the audit event."
        },
        "category": {
          "type": "string",
          "description": "Audit category.",
          "nullable": true
        },
        "componentName": {
          "type": "string",
          "description": "Component name.",
          "nullable": true
        },
        "correlationId": {
          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
          "type": "string",
          "description": "The client request Id that is used to correlate activity within the system.",
          "format": "uuid"
        },
        "displayName": {
          "type": "string",
          "description": "Event display name.",
          "nullable": true
        },
        "resources": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.auditResource"
          },
          "description": "Resources being modified."
        },
        "@odata.type": {
          "type": "string"
        }
      },
      "description": "A class containing the properties for Audit Event."
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.auditEvent"
}