In beats issue #37249, it was discovered that some fields are not being processed correctly for Azure sign-in logs.

For example callerIpAddress is automatically being renamed in caller_ip_address but it is not processed in the expected json.