@v-bacao-msft
Thanks for your reply. Below is the output of the Parse Json Action:
{
"?xml": {
"@version": "1.0",
"@encoding": "utf-8"
},
"feed": {
"@xml:base": "https://outlook.office365.com/Psws/Service.svc/",
"@xmlns": "http://www.w3.org/2005/Atom",
"@xmlns:d": "http://schemas.microsoft.com/ado/2007/08/dataservices",
"@xmlns:m": "http://schemas.microsoft.com/ado/2007/08/dataservices/metadata",
"id": "https://outlook.office365.com/psws/service.svc/UnifiedAuditLog",
"title": {
"@type": "text",
"#text": "UnifiedAuditLog"
},
"updated": "2019-06-05T14:38:23Z",
"link": {
"@rel": "self",
"@title": "UnifiedAuditLog",
"@href": "UnifiedAuditLog"
},
"entry": [
{
"id": "https://outlook.office365.com/Psws/Service.svc/UnifiedAuditLog('f17b552b-fe5b-47d4-4793-08d6d947dc75')",
"category": {
"@term": "Exchange.UnifiedAuditLog",
"@scheme": "http://schemas.microsoft.com/ado/2007/08/dataservices/scheme"
},
"link": {
"@rel": "edit",
"@title": "UnifiedAuditLog",
"@href": "UnifiedAuditLog('f17b552b-fe5b-47d4-4793-08d6d947dc75')"
},
"title": null,
"updated": "2019-06-05T14:38:23Z",
"author": {
"name": null
},
"content": {
"@type": "application/xml",
"m:properties": {
"d:Identity": "f17b552b-fe5b-47d4-4793-08d6d947dc75",
"d:AuditData": "{\"CreationTime\":\"2019-05-15T15:13:18\",\"Id\":\"f17b552b-fe5b-47d4-4793-08d6d947dc75\",\"Operation\":\"SearchQueryPerformed\",\"OrganizationId\":\"078acfbb-b49d-4b91-88a0-07e87e9d70b8\",\"RecordType\":4,\"UserKey\":\"i:0h.f|membership|xxx@live.com\",\"UserType\":0,\"Version\":1,\"Workload\":\"SharePoint\",\"ClientIP\":\"xxx\",\"ObjectId\":\"aee3dc9e-f030-0000-98cf-806886572c03\",\"UserId\":\"xxx@binalog.onmicrosoft.com\",\"CorrelationId\":\"aee3dc9e-f030-0000-98cf-806886572c03\",\"EventSource\":\"SharePoint\",\"ItemType\":\"Web\",\"UserAgent\":\"Mozilla\\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\\/537.36 (KHTML, like Gecko) Chrome\\/74.0.3729.131 Safari\\/537.36\",\"EventData\":\"<ClientType>OneDriveWeb<\\/ClientType>\"}",
"d:CreationDate": {
"@m:type": "Edm.DateTime",
"#text": "2019-05-15T15:13:18Z"
},
"d:IsValid": {
"@m:type": "Edm.Boolean",
"#text": "true"
},
"d:ObjectState": "Unchanged",
"d:Operations": "SearchQueryPerformed",
"d:RecordType": "SharePoint",
"d:ResultCount": {
"@m:type": "Edm.Int32",
"#text": "72"
},
"d:ResultIndex": {
"@m:type": "Edm.Int32",
"#text": "1"
},
"d:UserIds": "xxx@binalog.onmicrosoft.com",
"d:ObjectIds": {
"@m:null": "true"
},
"d:IPAddresses": {
"@m:null": "true"
},
"d:SiteIds": {
"@m:null": "true"
}
}
}
},
{
"id": "https://outlook.office365.com/Psws/Service.svc/UnifiedAuditLog('e832ee13-1122-4461-f299-08d6d947da59')",
"category": {
"@term": "Exchange.UnifiedAuditLog",
"@scheme": "http://schemas.microsoft.com/ado/2007/08/dataservices/scheme"
},
"link": {
"@rel": "edit",
"@title": "UnifiedAuditLog",
"@href": "UnifiedAuditLog('e832ee13-1122-4461-f299-08d6d947da59')"
},
"title": null,
"updated": "2019-06-05T14:38:23Z",
"author": {
"name": null
},
"content": {
"@type": "application/xml",
"m:properties": {
"d:Identity": "e832ee13-1122-4461-f299-08d6d947da59",
"d:AuditData": "{\"CreationTime\":\"2019-05-15T15:13:14\",\"Id\":\"e832ee13-1122-4461-f299-08d6d947da59\",\"Operation\":\"SearchQueryPerformed\",\"OrganizationId\":\"078acfbb-b49d-4b91-88a0-07e87e9d70b8\",\"RecordType\":4,\"UserKey\":\"i:0h.f|membership|xxx@live.com\",\"UserType\":0,\"Version\":1,\"Workload\":\"SharePoint\",\"ClientIP\":\"41xxx\",\"ObjectId\":\"ade3dc9e-b061-0000-66aa-7f4496cf37a6\",\"UserId\":\"xxx@binalog.onmicrosoft.com\",\"CorrelationId\":\"ade3dc9e-b061-0000-66aa-7f4496cf37a6\",\"EventSource\":\"SharePoint\",\"ItemType\":\"Web\",\"UserAgent\":\"Mozilla\\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\\/537.36 (KHTML, like Gecko) Chrome\\/74.0.3729.131 Safari\\/537.36\",\"EventData\":\"<ClientType>OneDriveWeb<\\/ClientType>\"}",
"d:CreationDate": {
"@m:type": "Edm.DateTime",
"#text": "2019-05-15T15:13:14Z"
},
"d:IsValid": {
"@m:type": "Edm.Boolean",
"#text": "true"
},
"d:ObjectState": "Unchanged",
"d:Operations": "SearchQueryPerformed",
"d:RecordType": "SharePoint",
"d:ResultCount": {
"@m:type": "Edm.Int32",
"#text": "72"
},
"d:ResultIndex": {
"@m:type": "Edm.Int32",
"#text": "2"
},
"d:UserIds": "xxx@binalog.onmicrosoft.com",
"d:ObjectIds": {
"@m:null": "true"
},
"d:IPAddresses": {
"@m:null": "true"
},
"d:SiteIds": {
"@m:null": "true"
}
}
}
}
]
}
}
The conten type is still in xml after i have tried converting to json using:
json(body('GetLog')) in the parse json content field, i thought this would have done the conversion. Further assistance will be appreciated