Forum Discussion

NAMM81's avatar
NAMM81
Copper Contributor
Jan 18, 2018

Join two or more tables

Hello guys

 

I need your help. How can create a query to join a table "ConfigurationChange" and table "Perf" to know the % of CPU with a condition to have the same Publisher.

 

Thank you for your help

 

5 Replies

  • Hi I am not quite sure what exactly you want to achieve. Can make a simple mockup how the first and the second table should look and how they should look after they are joined.
    • NAMM81's avatar
      NAMM81
      Copper Contributor

      Hello.

       

      Thank you for your reply

       

      I want to filter one query that find publisher = "SAP" and see the Percentage of CPU and order by asc. I only can do with join the the table perf that information give the the % of CPU and the table ConfigurationChange that give the publisher "SAP". 

      One example:

      1 - search| where Publisher contains "SAP" (this information is insert on the table Perf)
      Join

      2 - search * | where ObjectName == "Memory" and CounterName == "% Committed Bytes In Use" | summarize UsedMemory = avg(CounterValue) by Computer | sort by UsedMemory desc (this information in insert on the table ConfigurationData)

      • Meir_Mendelovich's avatar
        Meir_Mendelovich
        Icon for Microsoft rankMicrosoft
        Nuno, Queries that are not type specific are inefficient and harder to author as the type is not known to the query editor. Please refine from using queries that start with "search *" and use the table name instead.

        We are not blocking it from the language as there are cases were it is needed but "search *" query could be 10 time longer than the same query with type specific.

Resources