Jan 29 2020
03:37 AM
- last edited on
Apr 08 2022
10:15 AM
by
TechCommunityAP
Jan 29 2020
03:37 AM
- last edited on
Apr 08 2022
10:15 AM
by
TechCommunityAP
Hi Team,
I trying to write a query that checks for crashes. I was told to use the Event table and look for below
Jan 29 2020 05:00 AM
Both Schema items have a Computer column - I don't know how far you have got, but try this:
ServiceFabricOperationalEvent
| where EventMessage contains "UnexpectedTermination=true"
| join (
Event
| where EventLog == "Application"
//| where Source == ".NET Runtime"
) on Computer
| project EventLog , Computer
This is a working example (I don't have the Fabric data), so used Perf as an example
Go to Log Analytics and run query
Computer | CounterName | EventLog | count_ |
---|---|---|---|
AmberIgniteDemo | % User Time | Application | 3 |