You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?
4# Azure Subscription1 view error events from Event
- Get-Event Event | where {$_.EventType -eq "error"}
- Get-Event Event | where {$_.EventType == "error"}
- search in (Event) * | where EventType -eq "error"
- search in (Event) "error"
- select * from Event where EventType == "error"
- Event | where EventType is "error"
- Event | server "error"
Correct Answer:
search in (Event) 'error'
Explanation:
To search a term in a specific table, add in (table-name) just after the search operator