<?xml version="1.0" encoding="UTF-8"?><AuditEvent xmlns="http://hl7.org/fhir">
  <id value="example-logout"/>
  <meta>
    <security>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
      <code value="HTEST"/>
      <display value="test health data"/>
    </security>
  </meta>
  <type>
    <coding>
      <system value="http://dicom.nema.org/resources/ontology/DCM"/>
      <code value="110114"/>
      <display value="User Authentication"/>
    </coding>
  </type>
  <subtype>
    <coding>
      <system value="http://dicom.nema.org/resources/ontology/DCM"/>
      <code value="110123"/>
      <display value="Logout"/>
    </coding>
  </subtype>
  <action value="E"/>
  <recorded value="2013-06-20T23:46:41Z"/>
  <outcome>
    <code>
      <system value="http://terminology.hl7.org/CodeSystem/audit-event-outcome"/>
      <code value="0"/>
      <display value="Success"/>
    </code>
  </outcome>
  <agent>
    <type>
      <coding>
        <system value="http://terminology.hl7.org/CodeSystem/extra-security-role-type"/>
        <code value="humanuser"/>
        <display value="human user"/>
      </coding>
    </type>
    <who>
      <identifier>
        <value value="95"/>
      </identifier>
      <display value="Grahame Grieve"/>
    </who>
    <requestor value="true"/>
    <networkString value="127.0.0.1"/>
  </agent>
  <agent>
    <!-- Source active participant, the software making the . AlternativeUserId - Process ID -->
    <extension url="http://hl7.org/fhir/StructureDefinition/auditevent-AlternativeUserID">
      <valueIdentifier>
        <type>
          <text value="process ID"/>
        </type>
        <value value="6580"/>
      </valueIdentifier>
    </extension>
    <type>
      <coding>
        <system value="http://dicom.nema.org/resources/ontology/DCM"/>
        <code value="110153"/>
        <display value="Source Role ID"/>
      </coding>
    </type>
    <who>
      <identifier>
        <system value="urn:oid:2.16.840.1.113883.4.2"/>
        <value value="2.16.840.1.113883.4.2"/>
      </identifier>
    </who>
    <requestor value="false"/>
    <networkString value="Workstation1.ehr.familyclinic.com"/>
  </agent>
  <source>
    <observer>
      <identifier>
        <value value="hl7connect.healthintersections.com.au"/>
      </identifier>
      <display value="Cloud"/>
    </observer>
    <type>
      <coding>
        <system value="http://terminology.hl7.org/CodeSystem/security-source-type"/>
        <code value="3"/>
        <display value="Web Server"/>
      </coding>
    </type>
  </source>
</AuditEvent>