Audit of a transaction that was failed resulting in OperationOutcome

{
  "resourceType" : "AuditEvent",
  "id" : "example-error",
  "text" : {
    "status" : "generated",
    "div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\">Recording that an error has happened due to a client requesting that an Observation resource be Created on the Patient endpoint. Note that the OperationOutcome from failed transaction is recorded as an AuditEvent.entity.</div>"
  },
  "contained" : [{
    "resourceType" : "OperationOutcome",
    "id" : "o1",
    "issue" : [{
      "severity" : "error",
      "code" : "invalid",
      "details" : {
        "text" : "Invalid pointer operation"
      }
    }]
  }],
  "type" : {
    "coding" : [{
      "system" : "http://terminology.hl7.org/CodeSystem/audit-event-type",
      "code" : "rest",
      "display" : "Restful Operation"
    }]
  },
  "subtype" : [{
    "coding" : [{
      "system" : "http://hl7.org/fhir/restful-interaction",
      "code" : "create",
      "display" : "create"
    }]
  }],
  "action" : "C",
  "recorded" : "2017-09-07T23:42:24Z",
  "outcome" : {
    "code" : {
      "system" : "http://hl7.org/fhir/issue-severity",
      "code" : "error",
      "display" : "Error"
    },
    "detail" : [{
      "text" : "Invalid request to create an Operation resource on the Patient endpoint."
    }]
  },
  "agent" : [{
    "type" : {
      "coding" : [{
        "system" : "http://terminology.hl7.org/CodeSystem/extra-security-role-type",
        "code" : "humanuser",
        "display" : "human user"
      }]
    },
    "who" : {
      "identifier" : {
        "value" : "95"
      },
      "display" : "Grahame Grieve"
    },
    "requestor" : true
  },
  {
    "extension" : [{
      "url" : "http://hl7.org/fhir/StructureDefinition/auditevent-AlternativeUserID",
      "valueIdentifier" : {
        "type" : {
          "text" : "process ID"
        },
        "value" : "6580"
      }
    }],
    "type" : {
      "coding" : [{
        "system" : "http://dicom.nema.org/resources/ontology/DCM",
        "code" : "110153",
        "display" : "Source Role ID"
      }]
    },
    "who" : {
      "identifier" : {
        "system" : "urn:oid:2.16.840.1.113883.4.2",
        "value" : "2.16.840.1.113883.4.2"
      }
    },
    "requestor" : false,
    "networkString" : "Workstation1.ehr.familyclinic.com"
  }],
  "source" : {
    "observer" : {
      "identifier" : {
        "value" : "hl7connect.healthintersections.com.au"
      },
      "display" : "Cloud"
    },
    "type" : [{
      "coding" : [{
        "system" : "http://terminology.hl7.org/CodeSystem/security-source-type",
        "code" : "3",
        "display" : "Web Server"
      }]
    }]
  },
  "entity" : [{
    "what" : {
      "reference" : "#o1",
      "display" : "transaction failed"
    }
  }]
}