Queries for the AegDeliveryFailureLogs table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Delivery failures by topic and error

Delivery failures logs by topic name and error message.

AegDeliveryFailureLogs 
| parse Message with * ", httpStatusCode=" HttpStatusCode "," * "., errorMessage=" ErrorMessage "," *
| parse _ResourceId with * "/topics/" TopicName 
| summarize by _ResourceId, TopicName, ErrorMessage

Delivery failures by topic and error

Delivery failures logs by topic name and error message.

// To create an alert for this query, click '+ New alert rule'
AegDeliveryFailureLogs 
| parse Message with * ", httpStatusCode=" HttpStatusCode "," * "., errorMessage=" ErrorMessage "," *
| parse _ResourceId with * "/topics/" TopicName 
| summarize by _ResourceId, TopicName, ErrorMessage

Delivery failures by domain and error

Delivery failures logs by domain name and error message.

// To create an alert for this query, click '+ New alert rule'
AegDeliveryFailureLogs 
| parse Message with * ", httpStatusCode=" HttpStatusCode "," * "., errorMessage=" ErrorMessage "," *
| parse _ResourceId with * "/domains/" DomainName 
| project TimeGenerated, _ResourceId, DomainName, TenantId, EventSubscriptionName, SubResourceName, OperationName, HttpStatusCode, ErrorMessage
| summarize by _ResourceId, DomainName, SubResourceName, EventSubscriptionName, ErrorMessage

Topics Average Delivery Latency

Average Delivery Latency summarized by Topics, Event Subscriptions.

AegDeliveryFailureLogs
| parse _ResourceId with * "/topics/" TopicName
| where TopicName!= "" // and TopicName == "YOUR_TOPIC_NAME"
| parse Message with * ", latencyInMs=" LatencyInMilliSecond "," *
| summarize AverageDeliveryLatencyInMs = avg(todouble(LatencyInMilliSecond)) by TopicName, EventSubscriptionName
// Uncomment to filter for a specific Topic Name

Domains Average Delivery Latency

Average Delivery Latency summarized by Domains, Event Subscriptions and SubResourceName.

AegDeliveryFailureLogs
| parse _ResourceId with * "/domains/" DomainName
| where DomainName != "" // and DomainName == "YOUR_DOMAIN_NAME"
| parse Message with * ", latencyInMs=" LatencyInMilliSecond "," *
| summarize AverageDeliveryLatencyInMs = avg(todouble(LatencyInMilliSecond)) by DomainName, EventSubscriptionName, SubResourceName
// Uncomment to filter by a specific Domain Name