Queries for the MNFSystemStateMessageUpdates table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Find all errors from Syslog

Syslog from device will be reported with message severity codes. This query filters all error messages from the Syslog.

MNFSystemStateMessageUpdates
| where Properties has "error"
| project EventName, EventCategory, DeviceId, TimeGenerated, Properties
| sort by TimeGenerated desc
| limit 100