Free sampleMonitor and Maintain Azure Resourcesmedium
A developer who knows Kusto Query Language wants to write read-only queries against collected log and trace data, then reuse those queries in alerts and workbooks. Which Azure Monitor tool do they use?
- AMetrics Explorer in chart mode, which plots numeric time-series values over time
- BLog Analytics in KQL mode, which runs read-only queries over workspace tables Correct
- CActivity Log search, which lists control-plane operations on subscription resources
- DAutoscale rules editor, which scales resources based on metric or schedule rules
Log Analytics runs KQL queries over workspace log data; those saved queries feed alerts, workbooks, and dashboards. Log Analytics is the Azure portal tool for running KQL log queries against workspace tables; KQL mode lets a familiar user author queries and reuse them in alerts and workbooks.
Why A is wrong: Metrics Explorer charts numeric metrics; it does not run KQL over log tables.
Why B is correct: Correct. Log Analytics is the Azure portal tool for running KQL log queries against workspace tables; KQL mode lets a familiar user author queries and reuse them in alerts and workbooks.
Why C is wrong: Activity log search browses control-plane events, not arbitrary KQL queries over log tables.
Why D is wrong: Autoscale adds and removes resources on rules; it is not a log query tool.