{ "additionalProperties": false, "id": "AuditLog", "properties": { "appname": { "required": true, "title": "Application name field of the log", "type": "string" }, "facility": { "required": true, "title": "Facility field of the log", "type": "integer" }, "full_log": { "required": true, "title": "Full log with both header and message", "type": "string" }, "hostname": { "required": true, "title": "Hostname field of the log", "type": "string" }, "message": { "required": true, "title": "Message field of the log", "type": "string" }, "msgid": { "required": true, "title": "Message ID field of the log", "type": "string" }, "priority": { "required": true, "title": "Priority field of the log", "type": "integer" }, "procid": { "required": true, "title": "Process ID field of the log", "type": "integer" }, "struct_data": { "$ref": "StructuredData, "required": true, "title": "Structured data field of the log" }, "timestamp": { "required": true, "title": "Date and time in UTC of the log", "type": "string" } }, "title": "Audit log in RFC5424 format", "type": "object" }