WAF/FrontDoor Logs AzureDiagnostics table

App GW WAF logs

AzureDiagnostics
| where ResourceProvider == "MICROSOFT.NETWORK" and Category == "ApplicationGatewayFirewallLog"
| project TimeGenerated, Resource, requestUri_s, Message, clientIp_s, ruleSetType_s,ruleSetVersion_s, ruleId_s, action_s, details_message_s, details_file_s, hostname_s

Front Door WAF Logs

AzureDiagnostics 
| where ResourceProvider == "MICROSOFT.CDN" and Category == "FrontDoorWebApplicationFirewallLog" 
| project TimeGenerated, Resource, requestUri_s,clientIP_s,host_s,ruleName_s,policy_s,action_s,Message,details_msg_s

WAF/FrontDoor Logs resource specific table

App GW WAF logs

AGWFirewallLogs