This is the Continuous Integration Build of FHIR (will be incorrect/inconsistent at times).
See the Directory of published versions

Example AuditEvent/example-error (XML)

Security Work GroupMaturity Level: N/AStandards Status: InformativeCompartments: Device, Patient, Practitioner

Raw XML (canonical form + also see XML Format Specification)

Jump past Narrative

Audit of a transaction that was failed resulting in OperationOutcome (id = "example-error")

<?xml version="1.0" encoding="UTF-8"?>

<AuditEvent xmlns="http://hl7.org/fhir">
  <id value="example-error"/> 
    <status value="generated"/> 
    <div xmlns="http://www.w3.org/1999/xhtml">Recording that an error has happened due to a client requesting that an Observation
       resource be Created on the Patient endpoint. Note that the OperationOutcome from
       failed transaction is recorded as an AuditEvent.entity.</div> 
      <!--   contained OperationOutcome from failed transaction   -->
      <id value="o1"/> 
        <severity value="error"/> 
        <code value="invalid"/> 
          <text value="Invalid pointer operation"/> 
      <system value="http://terminology.hl7.org/CodeSystem/audit-event-type"/> 
      <code value="rest"/> 
      <display value="Restful Operation"/> 
      <system value="http://hl7.org/fhir/restful-interaction"/> 
      <code value="create"/> 
      <display value="create"/> 
  <action value="C"/> 
  <recorded value="2017-09-07T23:42:24Z"/> 
      <system value="http://hl7.org/fhir/issue-severity"/> 
      <code value="error"/> 
      <display value="Error"/> 
      <text value="Invalid request to create an Operation resource on the Patient endpoint."/> 
        <system value="http://terminology.hl7.org/CodeSystem/extra-security-role-type"/> 
        <code value="humanuser"/> 
        <display value="human user"/> 
        <value value="95"/> 
      <display value="Grahame Grieve"/> 
    <requestor value="true"/> 
      <!--   Source active participant, the software making the . AlternativeUserId - Process
     ID   -->
    <extension url="http://hl7.org/fhir/StructureDefinition/auditevent-AlternativeUserID">
          <text value="process ID"/> 
        <value value="6580"/> 
        <system value="http://dicom.nema.org/resources/ontology/DCM"/> 
        <code value="110153"/> 
        <display value="Source Role ID"/> 
        <system value="urn:oid:2.16.840.1.113883.4.2"/> 
        <value value="2.16.840.1.113883.4.2"/> 
    <requestor value="false"/> 
    <networkString value="Workstation1.ehr.familyclinic.com"/> 

        <value value="hl7connect.healthintersections.com.au"/> 
      <display value="Cloud"/> 
        <system value="http://terminology.hl7.org/CodeSystem/security-source-type"/> 
        <code value="3"/> 
        <display value="Web Server"/> 

      <!--   record the OperationOutcome returned to the client   -->
      <reference value="#o1"/> 
      <display value="transaction failed"/> 


Usage note: every effort has been made to ensure that the examples are correct and useful, but they are not a normative part of the specification.