can any one help on this?'where' operator: Failed to resolve column or scalar expression named 'Status_s' If the issue persists, please open a support ticket. Request id: 9e729838-5083-424a-ac4a-69a9b1123931

Manda Tejasree 20 Reputation points
2023-04-26T16:49:01.6866667+00:00

User's image

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,037 questions
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,461 questions
0 comments No comments
{count} votes

Accepted answer
  1. Ryan Hill 27,111 Reputation points Microsoft Employee
    2023-04-28T14:55:57.5366667+00:00

    Hi @Manda Tejasree

    For your original ask, the Status_c column doesn't exists in the AzureDiagnotics table. The error message is a general message that you're attempting to query for a column that doesn't exists in the source table. I'm assuming you used this query from the predefined S2S tunnel query.

    S2S tunnel connet/disconnect events

    This TunnelDiagnosticLog troubleshooting page does have a different sample query that you can try:

    AzureDiagnostics
    | where Category == "TunnelDiagnosticLog"
    | project TimeGenerated, OperationName, instance_s, Resource, ResourceGroup
    | sort by TimeGenerated asc
    

    For myself, I ran into the same issue with instance_s and to resolve, just remove the offending column.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Clive Watson 5,951 Reputation points MVP
    2023-04-26T16:58:46.9733333+00:00

    It look like the Status_s column is missing, maybe make a fake entry using extend to test this? Also see https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/columnifexists

    AzureDiagnostics
    | extend Status_s=="Connected"