CIEventsOperational 數據表的查詢

CIEventsOperational - 事件類型 ApiEvent

取得 eventType 做為 APIEvent 的操作事件清單。

CIEventsOperational
| where EventType has "ApiEvent"
| sort by TimeGenerated desc
| limit 100 // You can adjust the limit value to the number of logs you would like to retrieve.

CIEventsOperational- 事件類型 WorkflowEvent

取得 eventType 做為 WorkflowEvent 的操作事件清單。

CIEventsOperational
| where EventType has "WorkflowEvent"
| sort by TimeGenerated desc
| limit 100 // You can adjust the limit value to the number of logs you would like to retrieve.

CIEvents - 特定相互關聯標識符的所有事件

取得特定相互關聯標識碼的所有事件要求清單

union CIEventsAudit , CIEventsOperational
| where CorrelationId == "" // Add your CorrelationId in the quotation marks
| sort by TimeGenerated desc
| limit 100

CIEventsOperational - 特定實例標識符的所有事件

取得特定實例識別碼的 API 事件要求清單。

CIEventsOperational
| where InstanceId == "" // Add your InstanceId in the quotation marks
| sort by TimeGenerated desc
| limit 100