Behaviour different from old OMS to new Azure Portal

Question

I have a query that show&nbsp;high consumption disk. In old OMS Portal, it&nbsp;render timechart detailed by each "Instance Name". In new portal, it sums all "instance name" (see attached screenshots)&nbsp;How can I show summarise by multiple fields&nbsp;Perf| where ObjectName == "Logical Disk" and CounterName == "% Used Space" and InstanceName != "_Total"| summarize AggregatedValue = avg(CounterValue) by bin(TimeGenerated, 15m), Computer,InstanceName| where AggregatedValue &gt; 60| render timechart&nbsp;&nbsp;

stanislav_zhelyazkov · Accepted Answer

Hi,Unfortunately this functionality is not present in Azure Portal and I have given that feedback before. The easiest but not preatty way to do this is to concat different columns together. I have demonstrated that approach on a blog post about alerts but applies to visualization as well. https://cloudadministrator.net/2018/06/08/aggregate-on-more-than-one-column-for-azure-log-search-alerts/

Forum Discussion

Behaviour different from old OMS to new Azure Portal

1 Reply