| _BilledSize |  | Double | 
      
          | _IsBillable |  | String | 
      
          | _ResourceId | A unique identifier for the resource that the record is associated with | String | 
      
          | _SubscriptionId | A unique identifier for the subscription that the record is associated with | String | 
      
          | Channel | The channel to which the event was logged. | String | 
      
          | Computer | The name of the computer on which the event occurred. | String | 
      
          | Correlation | The activity identifiers that consumers can use to group related events together. | String | 
      
          | EventData | Contains the event data parsed to dynamic type. If the parsing fails then this field will contain null and the RawEventData field will be populated. | Object | 
      
          | EventID | The identifier that the provider used to identify the event. | Int32 | 
      
          | EventLevel | Contains the severity level of the event. | Int32 | 
      
          | EventLevelName | The rendered message string of the level specified in the event. | String | 
      
          | EventOriginId | VM ID obtained from the Azure Instance Metadata Service (IMDS). | String | 
      
          | EventRecordId | The record number assigned to the event when it was logged. | String | 
      
          | Keywords | A bitmask of the keywords defined in the event. | String | 
      
          | ManagementGroupName | Additional information based on the resource type. | String | 
      
          | Opcode | The opcode element is defined by the SystemPropertiesType complex type. | String | 
      
          | Provider | System Properties Type - Identifies the provider that logged the event. | String | 
      
          | RawEventData | The raw event XML when parsing fails. It’s null when parsing successful. | String | 
      
          | SystemProcessId | Identifies the process that generated the event. | Int32 | 
      
          | SystemThreadId | Identifies the thread that generated the event. | Int32 | 
      
          | SystemUserId | The ID of the user who is responsible for the event. | String | 
      
          | Task | The task defined in the event. | Int32 | 
      
          | TenantId |  | String | 
      
          | TimeGenerated | The time stamp when the event was generated on the computer. | DateTime | 
      
          | Type | The name of the table | String | 
      
          | Version | Contains the version number of the event’s definition. | Int32 |