Question

Difficulty: MediumAzure Backup Reports and Monitoring

An administrator is creating a custom Log Analytics query to report on failed backup jobs and identify the specific Azure virtual machines associated with those failures. The diagnostic settings on the Recovery Services Vaults are configured to use the resource-specific destination tables. Which two tables must the administrator query and join to retrieve this information? Select two.

  1. AddonBackupJobsAnswer
  2. CoreBackupAnswer
  3. C
    AzureDiagnostics
  4. D
    AddonBackupStorage

Answer

The correct tables are AddonBackupJobs and CoreBackup.
In resource-specific diagnostic mode, Azure Backup routes diagnostic logs to specialized tables. AddonBackupJobs stores status information and failure details for backup operations, while CoreBackup stores item-level metadata including resource names (such as virtual machines). Joining these tables on the unique identifier allows administrators to correlate failed jobs with their target resources.

Step-by-Step Solution

1
Identify the diagnostic logging mode configured on the Recovery Services Vault.
The resource-specific mode is configured, which routes data to distinct, dedicated tables instead of a single generic table.
This determines which tables are available for querying within Log Analytics.
2
Locate the table containing job execution metadata and status.
AddonBackupJobs contains columns such as JobStatus, JobFailureCode, and BackupItemUniqueId.
To filter for failed backup jobs, the query must target the status records stored in this table.
3
Locate the table containing backup item configuration details and virtual machine metadata.
CoreBackup contains details such as BackupItemName, BackupItemType, and BackupItemUniqueId.
To retrieve the actual name of the virtual machine associated with the failed job, this table must be joined on the unique backup item identifier.

Key Concept

Azure Backup resource-specific diagnostics schema
Rate this question