Explanation:
The correct query to retrieve the error events from the 'Event' table in an Azure Log Analytics workspace is 'Event | search "error"'. This uses the Kusto Query Language (KQL) which allows for comprehensive data querying and filtering directly within Azure Log Analytics. Option B is appropriate as it leverages the Kusto query syntax correctly to filter for events containing the term 'error'.
Ultimate access to all questions.
In Azure Log Analytics workspace 'Workspace1', how do you query to retrieve error events from the 'Event' table?
A
Using a Kusto query to filter for 'error' events.
B
Applying a search filter for the term 'error'.
C
Filtering the 'EventType' column for 'error' values.
D
Executing a PowerShell cmdlet to retrieve 'error' events.
No comments yet.