你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn

AFSAuditLogs 表的查询

有关在Azure 门户中使用这些查询的信息,请参阅 Log Analytics 教程。 有关 REST API,请参阅 查询

聚合操作查询

列出给定时间段内的所有 UnsuspendAmlFilesystem 请求。

AFSAuditLogs
// The OperationName below can be replaced by obtain other operations such as "RebootAmlFilesystemNode" or "AmlFSRefreshHSMToken".
| where OperationName has "UnsuspendAmlFilesystem"
| project TimeGenerated, _ResourceId, ActivityId, ResultSignature, ResultDescription, Location
| sort by TimeGenerated asc
| limit 100

未经授权的请求查询

由于非队列访问,AMLFilesystems 请求失败的计数。

AFSAuditLogs
// 401 below could be replaced by other result signatures to obtain different operation results.
// For example, 'ResultSignature == 202' to obtain accepted requests.
| where ResultSignature == 401
| summarize count() by _ResourceId, OperationName