{
  "resourceType": "AuditEvent",
  "text": {
    "status": "generated",
    "div": "<div xmlns='http://www.w3.org/1999/xhtml'>Audit Event</div>"
  },
  "type": {
    "code": "rest",
    "display": "Restful Operation"
  },
  "subtype": [
    {
      "code": "search-type",
      "system": "http://hl7.org/fhir/restful-interaction",
      "display": "search-type"
    }
  ],
  "action": "R",
  "period": {
    "end": "2020-03-19T12:16:37.320Z"
  },
  "recorded": "2020-11-13T18:20:57.507Z",
  "outcome": "0",
  "agent": [
    {
      "type": {
        "coding": [
          {
            "code": "humanuser",
            "system": "http://terminology.hl7.org/CodeSystem/extra-security-role-type",
            "display": "human user"
          }
        ]
      },
      "role": [
        {
          "coding": [
            {
              "code": "humanuser",
              "system": "http://terminology.hl7.org/CodeSystem/extra-security-role-type",
              "display": "human user"
            }
          ]
        }
      ],
      "who": {
        "identifier": {
          "value": "username1"
        }
      },
      "altId": "Last, First M",
      "requestor": true,
      "network": {
        "address": "127.0.0.1",
        "type": "2"
      }
    },
    {
      "type": {
        "coding": [
          {
            "code": "110150",
            "system": "http://dicom.nema.org/resources/ontology/DCM",
            "display": "Application"
          }
        ]
      },
      "role": [
        {
          "coding": [
            {
              "code": "110150",
              "system": "http://dicom.nema.org/resources/ontology/DCM",
              "display": "Application"
            }
          ]
        }
      ],
      "who": {
        "identifier": {
          "value": "serviceaccount1"
        }
      },
      "requestor": false,
      "network": {
        "address": "express-logging-example.webapp",
        "type": "1"
      }
    }
  ],
  "source": {
    "site": "Cloud",
    "observer": {
      "identifier": {
        "value": "exampleapp.com"
      }
    },
    "type": [
      {
        "code": "3",
        "system": "http://terminology.hl7.org/CodeSystem/security-source-type",
        "display": "Web Server"
      }
    ]
  },
  "entity": [
    {
      "what": {
        "identifier": {
          "value": "v1/Patient"
        }
      },
      "type": {
        "code": "2"
      },
      "role": {
        "code": "24"
      },
      "lifecycle": {
        "code": "6"
      },
      "query": "P2xhc3RfbmFtZT1kb2U=",
      "detail": [
        {
          "type": "last_name",
          "valueString": "doe"
        }
      ]
    }
  ]
}