OTelLogs 表的查询

有关在 Azure 门户中使用这些查询的信息，请参阅 Log Analytics 教程。 有关 REST API，请参阅 查询。

日志严重性分析

按过去一小时内的严重级别和服务分析日志分布。

OTelLogs
| where TimeGenerated > ago(1h)
| summarize 
    LogCount = count(),
    UniqueTraces = dcount(TraceId),
    UniqueSpans = dcount(SpanId),
    SampleBodies = take_any(Body, 3)
    by ServiceName, SeverityText, SeverityNumber
| extend SeverityLevel = case(
    SeverityNumber <= 4, "Debug",
    SeverityNumber <= 8, "Info", 
    SeverityNumber <= 12, "Warn",
    SeverityNumber <= 16, "Error",
    "Fatal"
)
| order by SeverityNumber desc, LogCount desc
| project ServiceName, SeverityText, SeverityLevel, SeverityNumber, LogCount, UniqueTraces, UniqueSpans, SampleBodies
| limit 100