Virtual_Machine__Deallocate_Action_Microsoft Azure_General

–

Event

Virtual Machine Deallocate Action (Microsoft.Compute/virtualMachines/deallocate/action)

SK4 unified event:
Connector/Service

Microsoft Azure/General

SK4 Version:

2.3.85

Created Date:

Sun Dec 23 2018 07:39:04 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:13:28 GMT+0000 (Coordinated Universal Time)

Category

Application Data

Description

The virtual machine deallocation action is a process that involves a number of events. Monitor deviceInboundInterface (SK4 schema field) to trace all incidents of this action.

Search query

cef_vendor="skyformation" cef_name="resource-property-updated" destinationServiceName="Azure" sourceServiceName="azure" fileType="compute-machine"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources