Queries for the DeviceHealth table
For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.
Software Alert
SurfaceHub software error.
DeviceHealth
| where EventName == "CriticalProcessStatus" and State == "Unhealthy"
| sort by TimeGenerated desc