You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?

A. Get-Event Event | where ($_.EventType ""eq "error")

B. Get-Event Event | where ($_.EventType == "error")

C. search in (Event) * | where EventType ""eq "error"

D. search in (Event) "error"

E. select *from Event where EventType == "error"






 

Suggested Answer: D

To search a term in a specific table, add in (table-name) just after the search operator
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries
 https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal

This question is in AZ-103 Microsoft Azure Administrator Exam
For getting Microsoft Certified: Azure Administrator Associate Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.