Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu
Microsoft Discussions

Exam AZ-103 topic 1 question 4 discussion

Actual exam question from Microsoft's AZ-103
Question #: 4
Topic #: 1
[All AZ-103 Questions]

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?

  • A. Get-Event Event | where {$_.EventType ""eq "error"}
  • B. Get-Event Event | where {$_.EventType == "error"}
  • C. search in (Event) * | where EventType ""eq "error"
  • D. search in (Event) "error"
  • E. select *from Event where EventType == "error"
  • F. Event | where EventType is "error"
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
To search a term in a specific table, add in (table-name) just after the search operator
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal
by diggity801 at April 5, 2020, 7:04 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
amehim
Highly Voted 3 years, 1 month ago
D is correct. Please check https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries
upvoted 13 times
...
EricTheGreat
Highly Voted 3 years, 1 month ago
D makes sense
upvoted 5 times
...
Lkk51
Most Recent 1 year, 11 months ago
Only D can do the job https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/searchoperator?pivots=azuredataexplorer
upvoted 2 times
...
MountainW
2 years, 2 months ago
Checked the official document. None of the query is right. The right one is: Event | where EventLevelName == "error" https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events
upvoted 1 times
...
MountainW
2 years, 2 months ago
F is the only one matches the Kusto query syntax. There is no search syntax in query, Check https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/tutorial?pivots=azuremonitor
upvoted 1 times
...
ZUMY
2 years, 2 months ago
D is correct
upvoted 1 times
...
toniiv
2 years, 3 months ago
D is correct
upvoted 1 times
...
I
2 years, 3 months ago
I think this question is out of data. Moreover, AZ104 won't test coding.
upvoted 1 times
...
mikewallace8372
2 years, 4 months ago
D is correct answer.
upvoted 1 times
...
aryise
2 years, 6 months ago
Correct Answer: D
upvoted 5 times
...
JohnAvlakiotis
2 years, 6 months ago
I really believe F is correct https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/
upvoted 4 times
JohnAvlakiotis
2 years, 6 months ago
But now that I tested it, D could also do the trick. So, I would also go for D.
upvoted 2 times
...
...
simanastasiya
2 years, 6 months ago
in exam az-104 29nov 2020
upvoted 1 times
...
Ajayhub
2 years, 6 months ago
D is correct, look at here https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal#:~:text=To%20open%20a%20Log%20Analytics,Monitor%20left%20navigation%2C%20select%20Logs.
upvoted 1 times
...
Shades
2 years, 10 months ago
Came in exam 1st Aug 2020
upvoted 2 times
...
wazouskix
2 years, 11 months ago
This question was in my exam today! Good luck with your certification :)
upvoted 4 times
...
DTsg
2 years, 11 months ago
In Exam
upvoted 1 times
...
senseibrutal
2 years, 11 months ago
on exam
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel