SOLVED

Finding a specific application name in Azure with Kusto

%3CLINGO-SUB%20id%3D%22lingo-sub-2541531%22%20slang%3D%22en-US%22%3EFinding%20a%20specific%20application%20name%20in%20Azure%20with%20Kusto%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2541531%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20World!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20find%20any%20related%20information%20on%20how%20to%20perform%20search%20in%20Monitor%20logs%20in%20Azure.%20I%20need%20to%20find%20a%20specific%20application%20and%2C%20also%2C%20a%20specific%20transaction%20using%20Kusto%20QL.%20I%20have%20tried%20to%20Google%20all%20over%20the%20place%2C%20but%20only%20stuff%20I%20find%20is%20related%20to%20virtual%20machines%20etc.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20has%20any%20kind%20of%20information%20that%20I%20could%20use%20specifically%20for%20querying%20applications%20etc.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWould%20really%20appreciate%20any%20provided%20information.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2541531%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApplication%20Insights%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELog%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2541695%22%20slang%3D%22en-US%22%3ERe%3A%20Finding%20a%20specific%20application%20name%20in%20Azure%20with%20Kusto%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2541695%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1081041%22%20target%3D%22_blank%22%3E%40therealkristaps%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20not%20sure%20if%20you%20have%20setup%20App%20Insights%20-%20look%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fapp%2Fapp-insights-overview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fapp%2Fapp-insights-overview%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EUsing%20the%20Demo%20data%2C%20you%20can%20see%20many%20Examples%20in%20the%20Queries%20blade%20%3CA%20href%3D%22https%3A%2F%2Fms.portal.azure.com%2F%23blade%2FMicrosoft_Azure_Monitoring_Logs%2FDemoLogsBlade%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fms.portal.azure.com%2F%23blade%2FMicrosoft_Azure_Monitoring_Logs%2FDemoLogsBlade%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202021-07-13%20091817.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F295415i401D99D8D3DAAF4E%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Screenshot%202021-07-13%20091817.png%22%20alt%3D%22Screenshot%202021-07-13%20091817.png%22%20%2F%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3CBR%20%2F%3Ealso%20see%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2Fmicrosoft%2FAzureMonitorCommunity%2Ftree%2Fmaster%2FAzure%2520Services%2FApplication%2520Insights%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzureMonitorCommunity%2FAzure%20Services%2FApplication%20Insights%20at%20master%20%C2%B7%20microsoft%2FAzureMonitorCommunity%20(github.com)%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20know%20the%20app%20name%2C%20you%20could%20search%20all%20the%20Tables%20for%20it.%26nbsp%3B%20%26nbsp%3BThis%20is%20a%20poor%20query%2C%20but%20will%20list%20any%20tables%20we%20find%20the%20app%20called%20%22Home%20Page%22%20in.%26nbsp%3B%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3Esearch%20%22Home%20Page%22%3CBR%20%2F%3E%7C%20summarize%20count()%20by%20Type%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20can%20then%20swap%20to%20that%20Table%2C%20and%20improve%20the%20query%20i.e%2C%20assuming%20the%20app%20was%20found%20in%20the%20above%20query%20in%20the%20AppPageView%20table%2C%20use%3A%3CBR%20%2F%3E%3CBR%20%2F%3EAppPageViews%3CBR%20%2F%3E%7C%20where%20Name%20%3D%3D%20%22Home%20Page%22%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello, World!

 

I am trying to find any related information on how to perform search in Monitor logs in Azure. I need to find a specific application and, also, a specific transaction using Kusto QL. I have tried to Google all over the place, but only stuff I find is related to virtual machines etc.

 

Anyone has any kind of information that I could use specifically for querying applications etc.

 

Would really appreciate any provided information.

 

Thanks.

2 Replies
best response confirmed by therealkristaps (New Contributor)
Solution

@therealkristaps 

I'm not sure if you have setup App Insights - look here: https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview

Using the Demo data, you can see many Examples in the Queries blade https://ms.portal.azure.com/#blade/Microsoft_Azure_Monitoring_Logs/DemoLogsBlade

 

Screenshot 2021-07-13 091817.png

also see: AzureMonitorCommunity/Azure Services/Application Insights at master · microsoft/AzureMonitorCommunit...

If you know the app name, you could search all the Tables for it.   This is a poor query, but will list any tables we find the app called "Home Page" in.  

search "Home Page"
| summarize count() by Type

You can then swap to that Table, and improve the query i.e, assuming the app was found in the above query in the AppPageView table, use:

AppPageViews
| where Name == "Home Page"


 

 

Thanks Clive. This is enough. :) Thanks a lot for helping out.