# Azure Front Door KQL

```azurediagnostics
| where requestUri_s contains_cs  "api.formulationcloud.com:443/api/import"   
and httpStatusCode_d  >= 500  
| project when=TimeGenerated, url=requestUri_s, status = httpStatusCode_d, timeTaken_s 
```

A: To further refine your query and get more information about the client and path, you can use the clientIp\_s field to get the IP address of the client, and the url or requestUri\_s field to get the path.

```here's
AzureDiagnostics  
| where requestUri_s contains_cs "api.formulationcloud.com:443/api/import"   
and httpStatusCode_d >= 500  
| project when=TimeGenerated,  url=requestUri_s, status=httpStatusCode_d,timeTaken_s, clientIp=clientIp_s, path=parse_url(requestUri_s).Path  
```

In this query, the clientIp\_s field will give you the IP address of the client making the request, and the parse\_url(requestUri\_s).Path will give you the path of the request.

Also, please note that the fields available for you might depend on the specific schema of your AzureDiagnostics logs.

You can find more information about the schema of AzureDiagnostics logs and the fields available to you in the official Microsoft Azure documentation:

* <https://docs.microsoft.com/en-us/azure/azure-monitor/reference/tables/azurediagnostics>

You can also get more information about the parse\_url() function in the Kusto Query Language (KQL) from the Azure Data Explorer documentation:

* <https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/parseurlfunction>
