
Ultimate access to all questions.
In Azure Log Analytics workspace 'Workspace1', how do you query to retrieve error events from the 'Event' table?
A
Using a Kusto query to filter for 'error' events.
B
Applying a search filter for the term 'error'.
C
Filtering the 'EventType' column for 'error' values.
D
Executing a PowerShell cmdlet to retrieve 'error' events.
Explanation:
The correct query to retrieve the error events from the 'Event' table in an Azure Log Analytics workspace is 'Event | search "error"'. This uses the Kusto Query Language (KQL) which allows for comprehensive data querying and filtering directly within Azure Log Analytics. Option B is appropriate as it leverages the Kusto query syntax correctly to filter for events containing the term 'error'.