Hi Dave!

Thank you for your response! You are right - "The fact that an ERROR occurred is all you'll get" for this particular solution.

To get an answer instantly, I keep just the same queries saved in Logs Insights (but without aggregation i.e. "stats count()").

So after you've got alerted, it's easy to check what happened in particular. But this part is not automated by this solution, though...