Forum Discussion

ATWVD's avatar
ATWVD
Copper Contributor
Oct 07, 2020
Solved

WVD Log Analytics (classic) How to find out if someone deleted a wvd server from host pool

Hi,

 

We've lost one server from the host pool randomly and I'm trying to look up log analytics data to find out _if_ an admin has misclicked delete in the management portal:

 

I've tried different queries:

 

WVDActivityV1_CL
| where Type_s == "Management" and ObjectsDeleted_s != 0
 
Also method_s == "delete" or "remove"
 
also route_s == "delete" or "remove"
 
 
What would be the log information generated with a server delete from pool (in the classic wvd management portal)?
 
I cannot find any documentation on the classic wvd log analytics syntax.
 
 
Best Regards
A T
  • Soo Kuan Teo's avatar
    Soo Kuan Teo
    Oct 12, 2020
    for Type should be "Management", method should be "Remove". Try to use 'contains' instead of '==' as it may be case sensitive.

1 Reply

Sort By
  • Soo Kuan Teo's avatar
    Soo Kuan Teo
    Icon for Microsoft rankMicrosoft
    Oct 12, 2020
    for Type should be "Management", method should be "Remove". Try to use 'contains' instead of '==' as it may be case sensitive.

Resources