Activity Log Alert Format

AlertFormat.json

{
  "schemaId": "Microsoft.Insights/activityLogs",
  "data": {
    "status": "Activated",
    "context": {
      "activityLog": {
        "authorization": {
          "action": "Microsoft.Storage/storageAccounts/write",
          "scope": "/subscriptions/<subcription-id-hidden>/resourceGroups/SubscriptionMonitoring/providers/Microsoft.Storage/storageAccounts/submonstore"
        },
        "channels": "Operation",
        "claims": "<removing-details-for-brevity>",
        "caller": "<email-id-hidden>",
        "correlationId": "ca9bcd00-ecd2-42f3-9bfe-8aafe7ef9b21",
        "description": "",
        "eventSource": "Administrative",
        "eventTimestamp": "2018-12-25T03:27:00.3969244+00:00",
        "httpRequest": "{\"clientRequestId\":\"6a543b9d-601d-48d2-b4a5-295c95f67003\",\"clientIpAddress\":\"103.86.183.248\",\"method\":\"PUT\"}",
        "eventDataId": "72b33715-169f-483a-af00-0f06d47ddc12",
        "level": "Informational",
        "operationName": "Microsoft.Storage/storageAccounts/write",
        "operationId": "ca9bcd00-ecd2-42f3-9bfe-8aafe7ef9b21",
        "properties": {
          "statusCode": "OK",
          "serviceRequestId": "f833dc6e-4a65-4c74-a923-4bf896b1e53f",
          "responseBody":"<removing-details-for-brevity>",
        },
        "resourceId": "/subscriptions/<subcription-id-hidden>/resourceGroups/SubscriptionMonitoring/providers/Microsoft.Storage/storageAccounts/submonstore",
        "resourceGroupName": "SubscriptionMonitoring",
        "resourceProviderName": "Microsoft.Storage",
        "status": "Succeeded",
        "subStatus": "OK",
        "subscriptionId": "<subcription-id-hidden>",
        "submissionTimestamp": "2018-12-25T03:27:22.0940445+00:00",
        "resourceType": "Microsoft.Storage/storageAccounts"
      }
    },
    "properties": {}
  }
}