Azure Cloud

AzureDiagnostics 
| where requestUri_s contains "/notes"
| where userAgent_s == "Mozilla"
| project TimeGenerated, requestUri_s, ruleName_s, httpMethod_s, host_s, requestQuery_s, httpStatus_d, sentBytes_d, originalRequestUriWithArgs_s, serverRouted_s, serverStatus_s

AzureDiagnostics
 | where httpStatus_d == 403
 | where originalRequestUriWithArgs_s startswith "/legacy"
 | where url endswith "notes"

AppServiceHTTPLogs 
| where CsUriStem !endswith "Ping"

AzureDiagnostics
 | where httpStatus_d == 403
 | where originalRequestUriWithArgs_s startswith "/legacy"

AzureDiagnostics 
| where requestUri_s contains "/notes"
//| where httpMethod_s == "POST"
| where TimeGenerated between (datetime(2023-09-22 15:15:24.000) .. datetime(2023-09-22 15:19:36.000))

AzureDiagnostics 
| where requestUri_s contains "/notes"
| where httpMethod_s == "POST"
| where TimeGenerated between (datetime(2023-09-21 6:54:55.000) .. datetime(2023-09-21 12:44:00.000))