Find activity logs sent to a log analytics workspace via a diagnostic setting

Question

I am trying to export the activity logs of an HDInsight cluster, to a log anaytics workspace via a diagnostic setting. But I am unable to find the exported logs. I tried using the following query:
search *
| where TimeGenerated == "z"

How to find these activity logs?

Answer 1

@Khushika Shringi - Welcome to Microsoft Q&A and thanks for reaching out to us.

The query you used, search * | where TimeGenerated == "z", will not return any results because it is filtering for events that occurred at a specific time, which is not likely to match any events in your logs.

To search for the exported activity logs of your HDInsight cluster, you can use the following query:

AzureActivity | where ResourceProvider == "MICROSOFT.HDINSIGHT"

This query searches for all activity logs related to HDInsight clusters.

Please try the above and see if it helps.

Hope this helps. and please feel free to reach out if you have any further questions.

---

Please don't forget to "Accept as Answer" and click "Yes" if the above response is helpful, so it can be beneficial to the community.