You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events from a table named Event. Which query should you run in Workspace1?
A.
Get-Event Event | where {$_.EventType ""eq "error"}
B.
Get-Event Event | where {$_.EventType == "error"}
C.
search in (Event) * | where EventType ""eq "error"
Suggested Answer:D🗳️
To search a term in a specific table, add in (table-name) just after the search operator Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal
I copy what MountainW says, because I agree with him. F is the only one matches the Kusto query syntax. There is no search syntax in query, Check https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/tutorial?pivots=azuremonitor
Checked the official document. None of the query is right. The right one is: Event | where EventLevelName == "error"
https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events
F is the only one matches the Kusto query syntax. There is no search syntax in query, Check https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/tutorial?pivots=azuremonitor
D is correct, look at here https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#:~:text=To%20open%20a%20Log%20Analytics,Monitor%20left%20navigation%2C%20select%20Logs.
This section is not available anymore. Please use the main Exam Page.AZ-103 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
amehim
Highly Voted 5 years agoEricTheGreat
Highly Voted 5 years agoJPA210
Most Recent 3 months, 2 weeks agoLkk51
3 years, 10 months agoMountainW
4 years agophoton99
1 year, 6 months agoMountainW
4 years agoZUMY
4 years, 1 month agotoniiv
4 years, 2 months agoI
4 years, 2 months agoLovelyGroovey
1 year, 1 month agomikewallace8372
4 years, 3 months agoaryise
4 years, 4 months agoJohnAvlakiotis
4 years, 4 months agoJohnAvlakiotis
4 years, 4 months agosimanastasiya
4 years, 5 months agoAjayhub
4 years, 5 months agoShades
4 years, 9 months agowazouskix
4 years, 9 months agoDTsg
4 years, 10 months ago