Queries for the AegPublishFailureLogs table

Publish failures by topic and error

Publish failures logs by topic name and error message.

AegPublishFailureLogs 
| parse Message with * "), httpStatusCode=" HttpStatusCode "," * ", errorMessage=" ErrorMessage 
| parse _ResourceId with * "/topics/" TopicName 
| project TimeGenerated, _ResourceId, TopicName, TenantId, OperationName, HttpStatusCode, ErrorMessage
| summarize by _ResourceId, TopicName, HttpStatusCode, ErrorMessage

Publish failures by topic and error

Publish failures logs by topic name and error message.

// To create an alert for this query, click '+ New alert rule'
AegPublishFailureLogs 
| parse Message with * "), httpStatusCode=" HttpStatusCode "," * ", errorMessage=" ErrorMessage 
| parse _ResourceId with * "/topics/" TopicName 
| project TimeGenerated, _ResourceId, TopicName, TenantId, OperationName, HttpStatusCode, ErrorMessage
| summarize by _ResourceId, TopicName, HttpStatusCode, ErrorMessage

Publish failures by domain and error

Publish failures logs by domain name and error message.

// To create an alert for this query, click '+ New alert rule'
AegPublishFailureLogs 
| parse Message with * "), httpStatusCode=" HttpStatusCode "," * ", errorMessage=" ErrorMessage 
| parse _ResourceId with * "/domains/" DomainName
| project TimeGenerated, _ResourceId, DomainName, TenantId, OperationName, HttpStatusCode, ErrorMessage
| summarize by _ResourceId, DomainName, HttpStatusCode, ErrorMessage