In [beats issue #37249](https://github.com/elastic/beats/issues/37249), it was discovered that some fields are not being processed correctly for Azure sign-in logs. For example `callerIpAddress` is automatically being renamed in `caller_ip_address` but it is not processed in the expected json.
In beats issue #37249, it was discovered that some fields are not being processed correctly for Azure sign-in logs.
For example
callerIpAddressis automatically being renamed incaller_ip_addressbut it is not processed in the expected json.