level == "ERROR"
attributes.http.response.status_code >= 500
duration > 1000000000
attributes.exception.type != null
attributes.error.type != null
kind == "span" and duration > 5000000000
status_code == "ERROR" | summarize count(*) by bin_auto(timestamp), resource.service.name
| summarize count(*) by bin_auto(timestamp), level
| summarize percentiles(duration, 50, 90, 99) by bin_auto(timestamp)
isnotempty(null)
level == "INFO"
attributes.http.request.attributes.http.request.method == "POST" AND attributes.http.response.status_code == 500.0
attributes.http.route == "/api/products/L9ECAV7KIM"
attributes.http.route == "/api/cart"
attributes.http.route == "/hello"
attributes.http.route == "/api/users"
attributes.http.route == "/hello/flask"
attributes.http.route == "/don-net"
attributes.http.route == "/api/users/login"
status_code == 400.0
attributes.http.route == "/users"
attributes.http.route == "/user/:nameeeeeeeeeeeeeeeeeeeeeeeee"
attributes.http.route == "/user/:name"
level == "ERROR" | summarize count()by bin_auto(timestamp), status_code
attributes.http.route == "/api/checkout"
attributes.http.route == "/api/products/:productId"
attributes.http.route == "/api/currency"
attributes.http.route == "/sample/{subject}"
attributes.http.route == ""
attributes.http.route == "/apispec_1.json"
attributes.http.route == "/*"
attributes.http.route == "/api/"
attributes.http.route == "/api/bundles"
kind == "log" AND context___trace_id == ""
attributes.http.route == "/users/octocat"
attributes.net.host.name == "api.github.com"
attributes.http.route == "/apidocs/"
attributes.http.route == "api/user"
attributes.http.route == "/todos/{id}"
attributes.http.route == "/todos/:id"
attributes.http.route == "/todos/:todoId"
summarize count()by bin_auto(timestamp), status_code
attributes.http.route == "/api/recommendations"
attributes.http.route == "/greet/:name"
attributes.http.route == "/api/products"
attributes.net.host.name == "localhost"
attributes.net.host.name == "fingerprints.bablosoft.com"
attributes.net.host.name == "ip-api.com"
status_code > 200
attributes.net.host.name == "0.0.0.0:8000"
attributes.http.route == "/"
attributes.net.host.name == "api.ipify.org"
attributes.net.host.name == "ipv4.icanhazip.com"
attributes.net.host.name == "127.0.0.1"
attributes.net.host.name == "127.0.0.1:5000"
attributes.net.host.name == "127.0.0.1:8000"
attributes.net.host.name == "141.95.85.151"
attributes.net.host.name == "141.95.85.151:8080"
attributes.net.host.name == "51.89.42.209"
attributes.net.host.name == "_"
attributes.http.route == "/todo/:id"
Get notified when your query matches specific conditions
Alert recovers only when value crosses these thresholds
Continue notifications until monitor recovers