通过

你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

AZMSOperationalLogs 表的查询

有关在 Azure 门户中使用这些查询的信息，请参阅 Log Analytics 教程。 对于 REST API，请参阅查询。

主题的发布成功数据

OperationLogs 主题的发布成功数据。

AZMSOperationalLogs
| extend TopicName = tostring(split(_ResourceId, "/")[10])
| where Provider =~ "EventHub"
| where isnotnull(TopicName) and Status == "Succeeded"
| project TopicName, _ResourceId, EventName, Status, Caller, _SubscriptionId
| summarize by TopicName, EventName

订阅发布失败

订阅的发布管理操作失败。

AZMSOperationalLogs
| extend SubInfo = _SubscriptionId
| where Provider =~ "EventHub"
| where isnotnull(SubInfo) and Status != "Succeeded"
| project SubInfo, _ResourceId, EventName, Status, Caller
| summarize by SubInfo, EventName

命名空间发布失败

命名空间的发布管理操作失败。

AZMSOperationalLogs
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "EventHub"
| where isnotnull(NamespaceName) and Status != "Succeeded"
| project NamespaceName, _ResourceId, EventName, Status, Caller, _SubscriptionId
| summarize by NamespaceName, EventName

主题的发布成功数据

服务器总线中 CRUD 操作主题的发布成功数据。

AZMSOperationalLogs
| extend TopicName = tostring(split(_ResourceId, "/")[10])
| where Provider =~ "ServiceBus"
| where isnotnull(TopicName) and Status == "Succeeded"
| project TopicName, _ResourceId, EventName, Status, Caller, _SubscriptionId
| summarize by TopicName, EventName

主题发布失败

主题的发布管理操作失败。

AZMSOperationalLogs
| extend TopicName = tostring(split(_ResourceId, "/")[10])
| where Provider =~ "ServiceBus"
| where isnotnull(TopicName) and Status != "Succeeded"
| project TopicName, _ResourceId, EventName, Status, Caller, SubscriptionId
| summarize by TopicName, EventName

订阅发布失败

订阅的发布管理操作失败。

AZMSOperationalLogs
| extend SubInfo = _SubscriptionId
| where Provider =~ "ServiceBus"
| where isnotnull(SubInfo) and Status != "Succeeded"
| project SubInfo, _ResourceId, EventName, Status, Caller
| summarize by SubInfo, EventName

命名空间发布失败

命名空间的发布管理操作失败。

AZMSOperationalLogs
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "ServiceBus"
| where isnotnull(NamespaceName) and Status != "Succeeded"
| project NamespaceName, _ResourceId, EventName, Status, Caller, _SubscriptionId
| summarize by NamespaceName, EventName