Hello @Mohammed Altamash Khan
Here are some Kusto Queries to help you analyzing Azure Diagnostic logs:
- Find what type of resources (and how many) are sending Diagnostic Logs to your Log Analytics Workspace: AzureDiagnostics
| summarize Resources = dcount(ResourceId) by ResourceType
| order by Resources desc - Find the ResourceID of all Resources sending Azure Diagnostics for a specified Resource Type: AzureDiagnostics
| where ResourceType == "a type resulted from the previous query"
| distinct ResourceId - Return all Azure Diagnostics records sent by a specified Resource (using a Resource Id from the previous query): AzureDiagnostics
| where ResourceId == "a resource id returned from the previous query"
Note: I recommend you use the ResourceId property to filter for a specific resource (rather than the Resource (Name), as you might have multiple resources with the same name, but the ResourceId is unique)
I hope that the above helps and that this is what you were looking for.
BR,
George