Queries for the CIEventsOperational table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Gets a list of operational events with eventType as APIEvent.

CIEventsOperational
| where EventType has "ApiEvent"
| sort by TimeGenerated desc
| limit 100 // You can adjust the limit value to the number of logs you would like to retrieve.

Gets a list of operational events with eventType as WorkflowEvent.

CIEventsOperational
| where EventType has "WorkflowEvent"
| sort by TimeGenerated desc
| limit 100 // You can adjust the limit value to the number of logs you would like to retrieve.

Gets a list of all events request for a specific correlation id

union CIEventsAudit , CIEventsOperational
| where CorrelationId == "" // Add your CorrelationId in the quotation marks
| sort by TimeGenerated desc
| limit 100

Gets a list of API events requests for a specific instance ID.

CIEventsOperational
| where InstanceId == "" // Add your InstanceId in the quotation marks
| sort by TimeGenerated desc
| limit 100