Log Analytics workspace - Microsoft.Search Result does not display

Question

Log Analytics workspace - Microsoft.Search Result does not display

ZTS 20

User's image

1 answer

Your answer

Answer 1

Pranay Reddy Madireddy 2,645 Microsoft External Staff

Hi Zero Trust Solutions

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

The query is set to check logs from the "Last 4 hours." Please confirm that logs have been generated within this period. You might want to expand the time range to cover a longer period to see if logs are available beyond the initial window.

check that the "MICROSOFT.SEARCH" resource provider is selected, as this is the one for the logs you're analyzing. Double-check that your resources are generating logs under this provider.

The query filters for logs where the "ResultType" is "Failed" and excludes "Success." Verify that this matches the logs you're interested in. You can temporarily adjust or remove this filter to check if it’s too restrictive.

The query is excluding logs where the "OperationName" is "Indexes.Update." Check if this is hiding any important logs. You can try removing or adjusting this filter to see if it’s causing the issue.

Confirm that logs are being ingested properly into the Log Analytics workspace. Check for any issues with log data sources or recent changes that could affect data ingestion.
Refer
https://learn.microsoft.com/en-us/azure/azure-monitor/logs/get-started-queries?tabs=kql
https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-query-overview
https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-tutorial
https://learn.microsoft.com/en-us/azure/azure-monitor/reference/logs-index

If you have any further queries, do let us know.

If the answer is helpful, please and "Upvote it".

Rahul Podila 2,000 Reputation points Microsoft External Staff

2025-02-17T05:44:43.53+00:00

Hi @Zero Trust Solutions

Just want to check if the above answer worked for you or else please let us know if any help, we are always here to help whenever you need us.

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.
ZTS 20 Reputation points

2025-02-17T10:10:29.8466667+00:00

Can you provide sample query that is not too restrictive?
Pranay Reddy Madireddy 2,645 Reputation points Microsoft External Staff

2025-02-17T11:55:51.42+00:00
Hi @ZTS

Thanks for the update.
This should resolve your issue. Please run the query below to get the expected output.

AzureDiagnostics | where ResourceProvider == "MICROSOFT.SEARCH" | project TimeGenerated, Resource, OperationName, ResultType, DurationMs, Message | order by TimeGenerated desc

Please find the below Artifact

let us know if any help, we will always help as you needed.!

Please do not forget to "Accept the answer” and upvote it wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.
Pranay Reddy Madireddy 2,645 Reputation points Microsoft External Staff

2025-02-18T10:21:22.01+00:00

Hi @ZTS
If you had a chance to see my comment to your question. If it was helpful, please click "Upvote" and ''accept answer'' on my post let us know Thank you...!
ZTS 20 Reputation points

2025-02-18T11:28:50.2866667+00:00

Will test this and et you know.
Vinod Pittala 985 Reputation points Microsoft External Staff

2025-02-18T23:55:30.3966667+00:00

Hello Zero Trust Solutions,

We haven't heard back from you checking to see if the above provided answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Thanks

Share via

Log Analytics workspace - Microsoft.Search Result does not display

1 answer

Your answer