Queries for the AegDeliveryFailureLogs table
For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.
Delivery failures by topic and error
Delivery failures logs by topic name and error message.
AegDeliveryFailureLogs
| parse Message with * ", httpStatusCode=" HttpStatusCode "," * "., errorMessage=" ErrorMessage "," *
| parse _ResourceId with * "/topics/" TopicName
| summarize by _ResourceId, TopicName, ErrorMessage
Delivery failures by topic and error
Delivery failures logs by topic name and error message.
// To create an alert for this query, click '+ New alert rule'
AegDeliveryFailureLogs
| parse Message with * ", httpStatusCode=" HttpStatusCode "," * "., errorMessage=" ErrorMessage "," *
| parse _ResourceId with * "/topics/" TopicName
| summarize by _ResourceId, TopicName, ErrorMessage
Delivery failures by domain and error
Delivery failures logs by domain name and error message.
// To create an alert for this query, click '+ New alert rule'
AegDeliveryFailureLogs
| parse Message with * ", httpStatusCode=" HttpStatusCode "," * "., errorMessage=" ErrorMessage "," *
| parse _ResourceId with * "/domains/" DomainName
| project TimeGenerated, _ResourceId, DomainName, TenantId, EventSubscriptionName, SubResourceName, OperationName, HttpStatusCode, ErrorMessage
| summarize by _ResourceId, DomainName, SubResourceName, EventSubscriptionName, ErrorMessage
Topics Average Delivery Latency
Average Delivery Latency summarized by Topics, Event Subscriptions.
AegDeliveryFailureLogs
| parse _ResourceId with * "/topics/" TopicName
| where TopicName!= "" // and TopicName == "YOUR_TOPIC_NAME"
| parse Message with * ", latencyInMs=" LatencyInMilliSecond "," *
| summarize AverageDeliveryLatencyInMs = avg(todouble(LatencyInMilliSecond)) by TopicName, EventSubscriptionName
// Uncomment to filter for a specific Topic Name
Domains Average Delivery Latency
Average Delivery Latency summarized by Domains, Event Subscriptions and SubResourceName.
AegDeliveryFailureLogs
| parse _ResourceId with * "/domains/" DomainName
| where DomainName != "" // and DomainName == "YOUR_DOMAIN_NAME"
| parse Message with * ", latencyInMs=" LatencyInMilliSecond "," *
| summarize AverageDeliveryLatencyInMs = avg(todouble(LatencyInMilliSecond)) by DomainName, EventSubscriptionName, SubResourceName
// Uncomment to filter by a specific Domain Name