I'm trying to figure out on how to get more detail from the Total Errors Chart in the Daily Overview Report.
I tried querying in Data Explorer (advanced) using:
['events.all']
| project FullName_Name, Timestamp, Entity_Id, EventData
| where Timestamp between(datetime(2021-04-28T00:00:00Z) .. datetime(2021-04-28T23:59:59Z))
| where EventData contains "error"
| summarize total=count()
But the numbers doesn't match with the report.
How do I query to get what's being rendered in Total Errors Chart