Notifications
Clear all
Topic starter
19/08/2022 10:35 am
You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?
- A . Event | where EventType is "error"
- B . Event | search "error"
- C . select * from Event where EventType == "error"
- D . Get-Event Event | where {$_.EventType -eq "error"}
Suggested Answer: B
Explanation:
To search a term in a specific table, add in (table-name) just after the search operator
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries
Explanation:
To search a term in a specific table, add in (table-name) just after the search operator
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries