I have a web application generating user-delegated SAS tokens authorized by the managed identity for the app. I want to be able to monitor who uses the tokens, so I added a Correlation Id in the scid field of the…
I have a Kusto query that will output for me processes from my VMs (whether they are stopped or not). Here is the query: ConfigurationData | project Computer, SvcName, SvcDisplayName, SvcState, TimeGenerated, _ResourceId | distinct Computer, SvcName, SvcDisplayName, SvcState, TimeGenerated…
I'm using the Azure SDK for Python to query a log Analytics workspace. I have 2 workspaces I'd like to query, but I was wondering if there is a way to union the data inside the query instead of querying…
Log-Analytics Workspace going to be expire in 2024, When i tried to create alert in Azure VirtualMachine, it shown as above 20 version Log analytics workspace is not supported. is there any alternative for creating Alerts in Azure Virtual machine…
I've created a KQL query for a LogAnalytics Workspace and one for the Azure Resource Graph and now try to get the results scheduled to Synapse Analytics or Azure DataLake Storage Gen2. But from Synapse side I can only create…
I need to save a output from a Kusto query on monitoring logs into a database table but I am unable to find a way to do it. I am presuming there will be a way to get the output…
i have a Question about a Query in KQL. I would like to use a Time at the KQL Query who only shows me the Results between 08:00 and 17:00 Time. How can i build these at the KQL Query?…
I have Azure Functions and try to see log of this function on Portal (select concrete function -> Monitor -> select a call of function). But often I see "No results": And I don't understand when I will see data…
I have an Azure Function and all calls I can see: but when I go to "Logs" and try the following query: traces | project timestamp, message, operation_Name, operation_Id, cloud_RoleName | where cloud_RoleName =~ 'FunctionDeviceManager' and operation_Name =~ 'FunctionAlertServiceCallback' |…
This is my current query that i have in azure logs: let numberOfBuckets = 24; let interval = toscalar(requests | where url matches regex "courses.*" | summarize interval = (max(timestamp)-min(timestamp)) / numberOfBuckets | project floor(interval, 1m)); requests | where url…