Sample payload from Azure Monitor

Snapshot of the entity when an event occurs in Azure Monitor.

Sample payload sent from Azure Monitor

To view the sample payload for Azure Monitor, open the integration and click the Sample payload tab.

{
 "schemaId": "azureMonitorCommonAlertSchema",
 "data": {
 "essentials": {
 "alertId": "/subscriptions/xxxx/providers/Microsoft.AlertsManagement/alerts/d975f47d-64b4-45fa-9fde-7a0831ddb5e9",
 "alertRule": "VM Restart SecureWebhook",
 "severity": "Sev4",
 "signalType": "Activity Log",
 "monitorCondition": "Fired",
 "monitoringService": "Activity Log - Administrative",
 "alertTargetIDs": [
 "/subscriptions/xxxx/resourcegroups/xxxx/providers/microsoft.compute/virtualmachines/xxxx"
 ],
 "originAlertId": "e5a59a89-3712-4d91-b771-02622f93edae",
 "firedDateTime": "2021-01-12T10:43:32.6064551Z",
 "description": "",
 "essentialsVersion": "1.0",
 "alertContextVersion": "1.0"
 },
 "alertContext": {
 "authorization": {
 "action": "Microsoft.Compute/virtualMachines/restart/action",
 "scope": "/subscriptions/xxxx/resourceGroups/xxxx/providers/Microsoft.Compute/virtualMachines/xxxx"
 },
 "channels": "Operation",
 "correlationId": "d6abbfbf-d23d-4a61-be42-3fda0fa79403",
 "eventSource": "Administrative",
 "eventTimestamp": "2021-01-12T10:42:55.7738165+00:00",
 "httpRequest": "{\"clientRequestId\":\"95e5a16f-58a7-49d8-9826-0ca1d47e2014\",\"clientIpAddress\":\"149.96.221.229\",\"method\":\"POST\"}",
 "eventDataId": "e5a59a89-3712-4d91-b771-02622f93edae",
 "level": "Informational",
 "operationName": "Microsoft.Compute/virtualMachines/restart/action",
 "operationId": "d6abbfbf-d23d-4a61-be42-3fda0fa79403",
 "properties": {
 "eventCategory": "Administrative",
 "entity": "/subscriptions/xxxx/resourceGroups/xxxx/providers/Microsoft.Compute/virtualMachines/xxxx",
 "message": "Microsoft.Compute/virtualMachines/restart/action",
 "hierarchy": "8bcff170-9979-491e-8683-d8ced0850bad/29c1ad9f-091e-48a2-9184-01a489833f34"
 },
 "status": "Started",
 "subStatus": "",
 "submissionTimestamp": "2021-01-12T10:43:22.2320317+00:00",
 "Activity Log Event Description": ""
 }
 }
}