Separate the create and update vm API calls in the Azure activity log
Right now, the API call to create a VM is mixed in with the update call. It makes trying to alert on the creation of a VM a pain. The general guidance is to key off of a deployment and the fact that the deployment name has the server type you're looking for it in. Seems like one could miss things. If we could key off one API call (create VM) and if it succeeded without having to have the other (update VM), that would be the best.