ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 421 - AZ-104 discussion

Report
Export

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.

You need to view the error event from a table named Event.

Which query should you run in Workspace1?

A.
Get-Event Event | where {$_.EventType == "error"}
Answers
A.
Get-Event Event | where {$_.EventType == "error"}
B.
Event | search "error"
Answers
B.
Event | search "error"
C.
select * from Event where EventType == "error"
Answers
C.
select * from Event where EventType == "error"
D.
Event | where EventType is "error"
Answers
D.
Event | where EventType is "error"
Suggested answer: B

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries

https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal

https://docs.microsoft.com/en-us/azure/dataexplorer/ kusto/query/searchoperator?pivots=azuredataexplorer

The search operator provides a multi-table/multi-column search experience.

The syntax is:

Table_name | search "search term"

Note:

There are several versions of this question in the exam. The question has three possible correct answers:

search in (Event) "error"

Event | search "error"

Event | where EventType == "error"

Other incorrect answer options you may see on the exam include the following:

Get-Event Event | where {$_.EventTye ñeq "error"} select * from Event where EventType is "error" search in (Event) * | where EventType ñeq "error"

asked 26/09/2024
OKAN AYDOÄžAN
47 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first