Replica Crash Signals
Use this query to identify restart-heavy replicas and crash-loop patterns by revision.
Data Source
| Table | Schema Note |
ContainerAppSystemLogs_CL | Legacy schema. If empty, try ContainerAppSystemLogs (non-_CL). |
Query Pipeline
flowchart LR
A[Filter by app] --> B[Filter crash and restart terms] --> C[Summarize by replica and revision] --> D[Sort by event count]
Query
let AppName = "my-container-app";
ContainerAppSystemLogs_CL
| where ContainerAppName_s == AppName
| where Log_s has_any ("CrashLoopBackOff", "terminated", "exited", "restart", "OOM")
| summarize events=count(), firstSeen=min(TimeGenerated), lastSeen=max(TimeGenerated) by RevisionName_s, ReplicaName_s
| order by events desc
Example Output
| RevisionName_s | ReplicaName_s | events | firstSeen | lastSeen |
| ca-myapp--0000002 | ca-myapp--0000002-5f8b7fbbd8-7j4nm | 9 | 2026-04-04T11:31:22.092Z | 2026-04-04T11:48:05.223Z |
| ca-myapp--0000001 | ca-myapp--0000001-6cc5f7cc66-vk4pp | 2 | 2026-04-04T12:54:25.409Z | 2026-04-04T12:54:25.409Z |
Interpretation Notes
- High
events on few replicas indicates unstable runtime behavior. - OOM-related terms suggest memory pressure rather than logic-only defects.
- Normal pattern: low restart count outside deployments.
Limitations
- Event detail quality varies by platform event source.
- Requires correlation with console logs for stack traces.
See Also