The documentation seems to be out of sync with the actual implementation.
For example this one: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-monitor-resource-health#connections
The real event message is:
{
"records": [
{
"time": "UTC timestamp",
"resourceId": "Resource Id",
"operationName": "deviceConnect",
"category": "Connections",
"level": "Information",
"properties": "{\"deviceId\":\"<deviceId>\",\"protocol\":\"<protocol>\",\"authType\":\"{\\\"scope\\\":\\\"device\\\",\\\"type\\\":\\\"sas\\\",\\\"issuer\\\":\\\"iothub\\\",\\\"acceptingIpFilterRule\\\":null}\",\"maskedIpAddress\":\"<maskedIpAddress>\"}",
"location": "Resource location"
},
{
"time": "UTC timestamp",
"resourceId": "Resource Id",
"operationName": "deviceConnect",
"category": "Connections",
"level": "Information",
"properties": "{\"deviceId\":\"<deviceId>\",\"protocol\":\"<protocol>\",\"authType\":\"{\\\"scope\\\":\\\"device\\\",\\\"type\\\":\\\"sas\\\",\\\"issuer\\\":\\\"iothub\\\",\\\"acceptingIpFilterRule\\\":null}\",\"maskedIpAddress\":\"<maskedIpAddress>\"}",
"location": "Resource location"
}
],
"EventProcessedUtcTime": "2018-08-31T12:45:07.2968273Z",
"PartitionId": 1,
"EventEnqueuedUtcTime": "2018-08-31T12:36:46.0780000Z"
}
⚠Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
@vladislav-mitev Thank you very much for bringing this to our attention. We are investigating and will have an update for you shortly.
Thanks for the feedback! I have assigned the issue to the content author to evaluate and update as appropriate.
Verified that what is in the documentation is not what has been provided by the customer.
@vladislav-mitev The JSON provided in the article does match the "record" value in your sample. But you're saying that's not sufficient, that you want the whole message output? I'm not sure that it adds significant clarity to include the extra JSON formatting around each event type. If anything, maybe we could include a sample log in the "Read logs from Azure Event Hubs" section, after the sample code to retrieve logs.
What do you think?
Not sure what you mean, because e.g. the three system properties (EventProcessedUtcTime, PartitionId, EventEnqueuedUtcTime) are not documented at all. Furthermore, from the current documentation there is no hint that a single message contains multiple events. That eventually breaks your parser.
Hi again @vladislav-mitev. Sorry for the delay. I updated the document to show to larger JSON format. However, all the outputs that I looked at (including for category: Connections) didn't have the three system properties at the end that you included in your sample. Can you confirm whether you still receive those properties in event messages?
Hello, thank you for considering my ticket.
It is interesting because it appears there are two "versions" of the messages received:
This leads to the question Why there is a difference?
@Mike-Ubezzi-MSFT can you confirm if you were able to see the system properties on your tests? @kgremban let us know if you were able to repro this scenario and if the documentation should be enhanced to reference it?
Thanks both!
@vladislav-mitev when you say services (Functions, Stream Analytics) attached, how are you attaching them? Those system properties look like the specific properties that occur when Event Hub interacts with Stream Analytics.
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-define-inputs

Hello,
"attached" meaning:
The documentation you gave seems to explain what is really happening. I have missed that point. Thank you a lot for quoting it.
I think we are done here, except for the still missing fix on this JSON message: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-monitor-resource-health#connections . All others have been fixed.
Thanks a lot!
Thanks @jlian for helping clear this up. And thanks @vladislav-mitev for pointing out the JSON sample that I missed. I'll make the update to the Connections sample, then close this issue as resolved.
Most helpful comment
Thanks @jlian for helping clear this up. And thanks @vladislav-mitev for pointing out the JSON sample that I missed. I'll make the update to the Connections sample, then close this issue as resolved.