need a query to find specific error messages for device calender issue for Surface Hub

Copper Contributor

For example, if I need to find email.o365 error.

1 Reply



Hello, can you provide some more info to enable us to help you please?  If you have started looking at this, do you have part of a query that you can share, do you know what dataset (table) you are looking in?  Also do you have the specific error you mention? 

Is this for an Alert or do you need to just display when the error is found?  


Is it shown in

| limit 50

I no longer have the Solution in my workspace, but the schema shows: 

Annotation 2019-04-30 192356.jpg


Maybe this will show the errors?


| summarize count() by EventId, EventName

Thanks Clive