Skip to content

Replica Crash Signals

Use this query to identify restart-heavy replicas and crash-loop patterns by revision.

Data Source

Table Schema Note
ContainerAppSystemLogs_CL Legacy schema. If empty, try ContainerAppSystemLogs (non-_CL).

Query Pipeline

flowchart LR
    A[Filter by app] --> B[Filter crash and restart terms] --> C[Summarize by replica and revision] --> D[Sort by event count]

Query

let AppName = "my-container-app";
ContainerAppSystemLogs_CL
| where ContainerAppName_s == AppName
| where Log_s has_any ("CrashLoopBackOff", "terminated", "exited", "restart", "OOM")
| summarize events=count(), firstSeen=min(TimeGenerated), lastSeen=max(TimeGenerated) by RevisionName_s, ReplicaName_s
| order by events desc

Example Output

RevisionName_s ReplicaName_s events firstSeen lastSeen
ca-myapp--0000002 ca-myapp--0000002-5f8b7fbbd8-7j4nm 9 2026-04-04T11:31:22.092Z 2026-04-04T11:48:05.223Z
ca-myapp--0000001 ca-myapp--0000001-6cc5f7cc66-vk4pp 2 2026-04-04T12:54:25.409Z 2026-04-04T12:54:25.409Z

Interpretation Notes

  • High events on few replicas indicates unstable runtime behavior.
  • OOM-related terms suggest memory pressure rather than logic-only defects.
  • Normal pattern: low restart count outside deployments.

Limitations

  • Event detail quality varies by platform event source.
  • Requires correlation with console logs for stack traces.

See Also