Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure administrator at a company that uses Azure Monitor Logs to collect and analyze logs from various Azure resources. You need to find all the error-level events generated in the last day by a virtual machine named AppServer1. Which query should you run in Log Analytics?
Event | where Computer == "AppServer1" and Level == "Error" and TimeGenerated >= ago(1d)
Heartbeat | where SourceSystem == "AppServer1" and TimeGenerated >= ago(1d)
Syslog | where Host == "AppServer1" and SeverityLevel == "Error" and TimeGenerated >= now() - 24h
AzureDiagnostics | where Resource == "AppServer1" and Level == "Warning" and TimeGenerated >= ago(1d)