You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company. You have a computer named Computer1 than runs Windows 10. You need to view the…

The correct answer is A. Event. In Azure Monitor / Log Analytics, Windows event log entries are stored in the 'Event' table. To filter events from a specific computer you would run: Event | where Computer == 'Computer1'. The choices in this question contain a formatting error (A and D are both labeled…

Submitted by anna_se· Apr 18, 2026Manage and maintain devices

Question

You have a Microsoft Azure Log Analytics workplace that collects all the event logs from the computers at your company. You have a computer named Computer1 than runs Windows 10. You need to view the events collected from Computer1. Which query should you run in Log Analytics?

Exhibit

Options

AEvent
BETWEvent
CETWEvent
DEvent

How the community answered

(21 responses)

A
81% (17)
B
10% (2)
C
5% (1)
D
5% (1)

Explanation

In Azure Monitor / Log Analytics, Windows event log entries are stored in the 'Event' table. To filter events from a specific computer you would run: Event | where Computer == 'Computer1'. The choices in this question contain a formatting error (A and D are both labeled 'Event'; B and C are both labeled 'ETWEvent'). ETWEvent is used for Event Tracing for Windows (ETW) telemetry, not standard Windows event logs. The correct query uses the Event table (choice A).

Topics

#Azure Log Analytics#Event table query#Windows event logs#KQL

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice