Queries for the AppServiceHTTPLogs table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

App Service Health

Time series of App Service Health (over 5 minute intervals).

AppServiceHTTPLogs 
| summarize (count() - countif(ScStatus >= 500)) * 100.0 / count() by bin(TimeGenerated, 5m), _ResourceId
| render timechart 

Failure Categorization

Categorize all requests which resulted in 5xx.

AppServiceHTTPLogs 
//| where ResourceId = "MyResourceId" // Uncomment to get results for a specific resource Id when querying over a group of Apps
| where ScStatus >= 500
| reduce by strcat(CsMethod, ':\\', CsUriStem)

Response times of requests

Avg & 90, 95 and 99 percentile response times (in milliseconds) per App Service.

AppServiceHTTPLogs 
| summarize avg(TimeTaken), percentiles(TimeTaken, 90, 95, 99) by _ResourceId

Top 5 Clients

Top 5 clients which are generating traffic.

AppServiceHTTPLogs
| top-nested of _ResourceId by dummy=max(0), // Display results for each resource (App)
  top-nested 5 of UserAgent by count()
| project-away dummy // Remove dummy line from the result set

Top 5 Machines

Top 5 machines which are generating traffic.

AppServiceHTTPLogs
| top-nested of _ResourceId by dummy=max(0), // Display results for each resource (App)
  top-nested 5 of CIp by count()
| project-away dummy // Remove dummy line from the result set