stream_distinct_values: action, audit_log_event_observed

This data as json