Skip to content

Instantly share code, notes, and snippets.

@pacodelacruz

pacodelacruz/ErrorCountByEventId.kql

Created September 4, 2018 09:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save pacodelacruz/6cdedb1eab2eaf21e6f32d9a96ddd45f to your computer and use it in GitHub Desktop.
Save pacodelacruz/6cdedb1eab2eaf21e6f32d9a96ddd45f to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ErrorCountByEventId.kql
traces
| sort by timestamp desc
| where customDimensions.EventId > 1
| where customDimensions.LogLevel == 'Error'
| project EventId = tostring(customDimensions.EventId)
| summarize Count = count(EventId) by EventId
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment