You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?

Question

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.

You need to view the error events from a table named Event.

Which query should you run in Workspace1?

Nicoleta Moglan · Accepted Answer

Event | search "error"

Nicoleta Moglan · Answer

Event | where EventType is "error"

Nicoleta Moglan · Answer

select * from Event where EventType == "error"

Nicoleta Moglan · Answer

Get-Event Event | where {$_.EventType -eq "error"}

List of questions