Cloudmersive Storage Protection analytics when sent to Azure Log Analytics are by default stored in a table named ApplicationLog_CL.

To query all logs, you can run the following query in Azure Log Analytics:

ApplicationLog_CL

To query only logs for transactions where the scan result was Clean, you can run the following query:

ApplicationLog_CL
| where parse_json(tostring(parse_json(Message).ScanResult)).CleanResult == true

To query only logs for transactions where the scan result was Infected, you can run the following query:

ApplicationLog_CL
| where parse_json(tostring(parse_json(Message).ScanResult)).CleanResult == false

To query only logs for transactions where the scan failed due to technical reasons, you can run the following query:

ApplicationLog_CL
| where parse_json(tostring(parse_json(Message).ScanResult)).Successful == false

To query for logs for a specific file name, you can run the following query:

ApplicationLog_CL
| where parse_json(Message).FileName == "hello.docx"