KQL Queries¶
Use this section as a query catalog. Each page includes scenario context, data-source notes, query pipeline, interpretation guidance, and limitations.
flowchart TD
subgraph Sources["Data Sources"]
SYS["ContainerAppSystemLogs_CL"]
CON["ContainerAppConsoleLogs_CL"]
end
subgraph Categories["Query Categories"]
HTTP["HTTP"]
RST["Restarts"]
SYSREV["System and Revisions"]
CONRT["Console and Runtime"]
ING["Ingress and Networking"]
SCL["Scaling and Replicas"]
IDSEC["Identity and Secrets"]
DAPR["Dapr and Jobs"]
COR["Correlation"]
end
SYS --> RST
SYS --> SYSREV
SYS --> SCL
SYS --> DAPR
CON --> HTTP
CON --> CONRT
CON --> ING
CON --> IDSEC
SYS --> COR
CON --> COR Schema Note¶
| Workspace table | Common columns |
|---|---|
ContainerAppConsoleLogs_CL | ContainerAppName_s, ContainerJobName_s, RevisionName_s, ContainerName_s, Log_s, Stream_s, ContainerImage_s, EnvironmentName_s, ContainerGroupName_s |
ContainerAppSystemLogs_CL | ContainerAppName_s, RevisionName_s, Reason_s, Type_s, Log_s, Level, EventSource_s, ReplicaName_s, JobName_s, ExecutionName_s, EnvironmentName_s |
ContainerAppConsoleLogs | Newer schema in some workspaces |
ContainerAppSystemLogs | Newer schema in some workspaces |
If _CL tables are empty, check non-_CL tables in your workspace.
Sample Result¶
Real lifecycle summary from a deployed Container Apps environment (ca-cakqltest-54kxmtjeuidri, captured 2026-04-12):
| Reason_s | Type_s | count_ |
|---|---|---|
| RevisionUpdate | Normal | 10 |
| ContainerAppUpdate | Normal | 7 |
| ContainerAppReady | Normal | 4 |
| RevisionReady | Normal | 3 |
| KEDAScalersStarted | Normal | 3 |
| RevisionDeactivating | Normal | 3 |
| RollingRevisionCompleted | Normal | 1 |
| AssigningReplica | Normal | 1 |
| ContainerStarted | Normal | 1 |
| PullingImage | Normal | 1 |
| PulledImage | Normal | 1 |
| ProbeFailed | Warning | 1 |
| ContainerCreated | Normal | 1 |
Query Categories¶
HTTP¶
Restarts¶
System and Revisions¶
- Revision Failures and Startup
- Image Pull and Auth Errors
- Replica Crash Signals
- Health Probe Timeline
- Deployment Progression
Console and Runtime¶
- Latest Errors and Exceptions
- Request Latency from Logs
- Top Noisy Messages
- Memory Usage Patterns
- Startup Duration Analysis
Ingress and Networking¶
- Ingress Error Analysis
- DNS and Connectivity Failures
- Request Routing Analysis
- TLS Handshake Errors
- Timeout and Retry Patterns
Scaling and Replicas¶
- Scaling Events
- Replica Count Over Time
- KEDA Scaler Metrics
- Scale-In Delay Analysis
- Replica Distribution by Revision
Identity and Secrets¶
- Managed Identity Token Errors
- Secret Reference Failures
- Authentication Failure Timeline
- Key Vault Access Errors
- Authentication Failure Timeline
- Key Vault Access Errors