Edit

Share via

Queries for the TSIIngress table

  • Article

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Show event source connection errors

Retrieves the most recent 100 logs pertaining to event source connection failures and summarizes them to display the time when the log was generated (TimeGenerated), a high level description (ResultDescription), a message continaing details on what went wrong and how to fix it (Message), and your event source's current configuration (EventSourceProperties).

//Retrieves the most recent 100 logs pertaining to event source connection failures and summarizes them to display the time when the log was generated (TimeGenerated), a high level description (ResultDescription), a message continaing details on what went wrong and how to fix it (Message), and your event source's current configuration (EventSourceProperties). 
TSIIngress
| where OperationName == 'Microsoft.TimeSeriesInsights/environments/eventsources/ingress/connect'
| project TimeGenerated, ResultDescription, Message, tostring(EventSourceProperties)
| top 100 by TimeGenerated desc

10 latest Ingress logs

Shows the most recent ten error logs in the Ingress category. This is helpful when getting familiar with the TSIIngress schema.

//Retrieves the most recent ten error logs in the Ingress category. This is helpful when getting familiar with the TSIIngress schema.
TSIIngress
| top 10 by TimeGenerated

Show deserialization errors

Retrieves the most recent 100 error logs from failures to deserialize telemetry message(s) and summarizes them to display the time when the log was generated (TimeGenerated), a high level description (ResultDescription), and a message with the deserialization error (Message).

//Retrieves the most recent 100 error logs from failures to deserialize telemetry message(s) and summarizes them to display the time when the log was generated (TimeGenerated), a high level description (ResultDescription), and a message with the deserialization error (Message).
TSIIngress
| where OperationName == 'Microsoft.TimeSeriesInsights/environments/eventsources/ingress/deserialize'
| project TimeGenerated, ResultDescription, Message, tostring(EventSourceProperties)
| top 100 by TimeGenerated desc