我正在尝试使用此查询创建自定义日志警报:
traces
| where message contains "Setup"
| extend Proposal = tostring(split(split(tostring(message), " ]")[1], ": ")[1])
| summarize AggregatedValue=count() by Time=bin(ago(24h), 1h), Proposal
但我得到了错误
搜索查询应包含度量警报类型的“AggregatedValue”和“bin(timestamp, [roundTo])”
既然我有错误的两个要求,为什么我会得到它?