Incorrect query for Application Gateway Logs

[joteromontes]

Hello Team,

In this section: https://learn.microsoft.com/en-us/azure/application-gateway/log-analytics#explore-data-with-examples

This will only work as long as the Diagnostic Settings are configured to send the data to one log analytics workspace and the option selected for this is Azure Diagnostics.

If one user configures the Log Analytics workspace to be resource specific these tabled will be different ○ AGWAccessLogs ○ AGWfirewallLogs ○ AGWPerformanceLogs

then the query mentioned is not accurate on this scenario. We have seen many support requests with this situation.

Can we please include the disclaimer under what Diagnostic Settings the query will work, as this will make the article helpful when learning how to configure the logging on the application gateway.

Thanks in Advance

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: a0639c6f-f0b4-0ae0-feba-6dadf513cec1
• Version Independent ID: da4d27c7-54dc-339b-8937-455bb4d4ecf4
• Content: Examine WAF logs using Azure Log Analytics - Azure Application Gateway
• Content Source: articles/application-gateway/log-analytics.md
• Service: application-gateway
• GitHub Login: @greg-lindsay
• Microsoft Alias: greglin

[Naveenommi-MSFT]

@joteromontes Thanks for your feedback! We will investigate and update as appropriate.

[SaibabaBalapur-MSFT]

@joteromontes I'm going to assign this to the document author so they can take a look at it accordingly.

@greg-lindsay Can you please check and add your comments on this doc update request as applicable.

[greg-lindsay]

This is internal work item #240847 #please-close

[Israphel]

AGWfirewallLogs

How do you know the table names?

[joteromontes]

@israphel, because i tried both options in my subscription, you can list the available tables from the logs section in the blade.