MicrosoftDataShareReceivedSnapshotLog 數據表的查詢

依持續時間列出收到的快照集

過去 7 天內依持續時間時間排序的快照集清單。

MicrosoftDataShareReceivedSnapshotLog
| where TimeGenerated > ago(7d)  
| where StartTime != "" and EndTime  != ""
| project StartTime , EndTime , DurationSeconds =(todatetime(EndTime)-todatetime(StartTime))/1s, ResourceName = split(_ResourceId,"/accounts/",1)// use split to get a part of the _ResourceId  
| sort by DurationSeconds desc nulls last

計數失敗的接收快照集

過去 7 天內失敗的快照集計數。

MicrosoftDataShareReceivedSnapshotLog
| where TimeGenerated > ago(7d)  
| where Status == "Failed" 
| summarize count() by _ResourceId 

接收的快照集經常發生錯誤

過去 7 天內最常見的 10 個錯誤。

MicrosoftDataShareReceivedSnapshotLog 
| where TimeGenerated > ago(7d)  
| where Status == "Failed" 
| summarize count() by _ResourceId, DataSetType // Counting failed logs per datasettype
| top 10 by count_ desc nulls last

每日接收快照集的圖表

過去一周每日快照集計數的時間圖表。

// Failed, In Progress and Succeeded Received Snapshots
MicrosoftDataShareReceivedSnapshotLog 
| where TimeGenerated > ago(7d)  
| summarize count() by bin(TimeGenerated, 1d), Status , _ResourceId // Aggregating by day //Click "Table" to see resource's name.
| render timechart