"properties.message":Remove\ service\ principal