Computer group in OMS query

I have two type of group Saved and active directory. I could run query on saved group as below Perf | where Computer in (['ProdServers']) How can i run the similar query for AD group. I coul...

azure monitor

Query Language

Stanislav_Zhelyazkov

Sep 15, 2019

HiMayank Bansal

You can do the following:

let MyGroup = ComputerGroup | where GroupSource == "ActiveDirectory"  and Group == "SV_Prod  |distinct  Computer;
Perf | where Computer in (MyGroup)

Additionally you can save the results from:

ComputerGroup | where GroupSource == "ActiveDirectory"  and Group == "SV_Prod  |distinct  Computer

to a computer group let's say with name MySavedGroup and reference it in

Perf | where Computer in (MySavedGroup)

like any other computer group.

Stanislav_Zhelyazkov

MVP

Sep 15, 2019

HiMayank Bansal

You can do the following:

let MyGroup = ComputerGroup | where GroupSource == "ActiveDirectory"  and Group == "SV_Prod  |distinct  Computer;
Perf | where Computer in (MyGroup)

Additionally you can save the results from:

ComputerGroup | where GroupSource == "ActiveDirectory"  and Group == "SV_Prod  |distinct  Computer

to a computer group let's say with name MySavedGroup and reference it in

Perf | where Computer in (MySavedGroup)

like any other computer group.

Mayank Bansal

Microsoft

Sep 16, 2019

Thanks this solved my problem.

Forum Discussion

Computer group in OMS query