Exam AZ-104 topic 2 question 63 discussion

Correct answer is B other correct answer option can come in the following form: Search in (Event) "Error" Event | where eventType = "Error"

https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/search-operator https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/kql-quick-reference Use the | (pipe) operator to separate multiple commands. Use the let keyword to create variables. Use the where keyword to filter results. Use the project keyword to select specific columns. Use the summarize keyword to group and aggregate data. The syntax is: Table_name | search "search term" Note: There are several versions of this question in the exam. The question has three possible correct answers: 1. search in (Event) "error" 2. Event | search "error" 3. Event | where EventType == "error"

B is corerct

Correct answer is B

Will be doing exam next week. If this question isn't in my exam i sue Examtopics :P

Correct answer is B There are several versions of this question in the exam. The question has three possible correct answers: 1. search in (Event) "error" 2. Event | search "error" 3. Event | where EventType == "error"

Its A https://www.google.com/search?q=select+*+from+Event+where+EventType+%3D%3D+%22error%22&rlz=1C1CHBF_en-GBGB1039GB1039&oq=select+*+from+Event+where+EventType+%3D%3D+%22error%22&aqs=chrome..69i57j33i10i160l4.766j0j7&sourceid=chrome&ie=UTF-8

To view the error events from the "Event" table in Azure Log Analytics workspace "Workspace1," you should run the following query: A. select * from Event where EventType == "error" This query selects all records from the "Event" table where the EventType is equal to "error," allowing you to filter and view only the error events. Note: Option B is not a valid Log Analytics query syntax, and options C and D use incorrect syntax for Log Analytics queries.

Event | search "error"

Both B & C are OK, other possibilities are: 1) Event | search "Error" 2) Event | where eventType = "Error" 3) Search in (Event) "Error"

B. Event | search "error"