how to filter log messages in Azure for CLI command az monitor activity-log list

Question

I can use this command (Azure CLI)

"az monitor activity-log list ......"

to get all relevant events but I get million of them but I just need start, deallocate, stop - such events and there is a filter option but there are no manual pages or examples how to use it. Anyone who has used it, can throw more light on this, please? (I tried various several methods like creating alerts and pipes to put selected events into log analytics, event hubs, and storage but none worked :-( )

Answer 1

Just to help someone, posting my answer.

I used following commands for one of my tasks to filter logs:

az monitor activity-log list --subscription "subscription1" --start-time "2021-04-25
" --max-events "1000000" --query "[].{Caller_name:caller, EventTimestamp:eventTimestamp,resourceProviderName:resourceProviderName.value, ResourceGroup_Name:resourceGroupName, resourceId:resourceId, SubscriptionId:subscriptionId}"

Ref: az monitor activity-log list