Queries for the AACAudit table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Most recent delete key-value operations

List the most recent deleting key-value operations in App Config data plane.

// This query helps retrieve the most recent 10 audit logs for deleting key-value operations in App Configuration data plane.
AACAudit
| where EventCategory == "ApplicationManagement" and OperationName == "delete-keyvalue"
| where TimeGenerated > ago(1h)
| sort by TimeGenerated desc
| limit 10

Most recent client error

Lists the most recent failures because of client error.

// This query helps list the most recent 10 audit logs for failures because of client error. 
AACAudit
| where ResultType == "ClientError" and TimeGenerated > ago(1h)
| sort by TimeGenerated desc
| limit 10