Need more information from Log Analytics for App Gateway.
We see 400 errors in Log Analytics. We don't see these connections on the web servers. We think the App gateway is dropping traffic. Support doesnt seem to know why this happens. We don't have enough good information to track these issues. requestQuery_s is blank, MS support cannot tell me what this is, let alone what it means if it is blank.
We need more information.
requestQuery_s contains the queryString. It might be that these requests did not have querystring in http request. Could you look at requestUri_s field to confirm?
Your post is very old but I'll react anyway, maybe it will help somebody:
- To obtain ApplicationGatewayFirewallLog from your Azure WAF (where are logged all important information about connections and their treatment based on OWASP rules) :
--> Go to the Log Analytics in Azure Portal (can be found in All services) --> choose Logs and there type this query:
AzureDiagnostics | where ResourceType == "APPLICATIONGATEWAYS" and Category == "ApplicationGatewayFirewallLog"
I posted more info here and requested Microsoft to create appropriate documentation for this: