How should you complete the query?

DRAG DROP
You are troubleshooting device connections to and disconnections from an Azure IoT hub.
You configure diagnostic logging for the IoT hub to send to Log Analytics.
You need to generate a report that displays the device connection and disconnection events.
How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Correct Answer:

Explanation/Reference:
Explanation:
Box 1: ResourceProvider ==
Query to monitor your IoT hub connectivity Errors: Identify device connection errors.
AzureDiagnostics
| where ResourceProvider == “MICROSOFT.DEVICES” and ResourceType == “IOTHUBS”
| where Category == “Connections” and Level == “Error” Box 2: ResourceType == Box 3: Category == Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/monitor-iot-hub