Forum Discussion
Limit series in Log Analytics histogram
If this is the thing you wanted to achieve:
I would have pointed you earlier but I didn't understand exactly the request I guess. Reply yes if the logic in that blog post matches what you've wanted to achieve. That way I can mark this reply as answer for future people to see it.
Thanks Stanislav!
Your response actually showed what I was missing in my solution, which was a way to determine the top 5 machines before displaying a histogram. The solution I used, seen in the response above, basically does this first, and inner joins that with the time-series search.
If this is the thing you wanted to achieve:
I would have pointed you earlier but I didn't understand exactly the request I guess. Reply yes if the logic in that blog post matches what you've wanted to achieve. That way I can mark this reply as answer for future people to see it.
Yes, this is exactly it! Thanks, and apologies for not being clearer in my question.
No problem. Glad that you've solved the problem.
Thanks Stan. I would just make one refinement to the query, using Top 10 in the first statement.
Also in your blog, you can always point to a query in action in our demo environment. Here is the link to the query below.
let TopComputers = Perf| where ObjectName == 'Processor' and CounterName == '% Processor Time' and InstanceName == '_Total'| summarize AggregatedValue = avg(CounterValue) by Computer| top 10 by AggregatedValue desc| project Computer;Perf| where ObjectName == 'Processor' and CounterName == '% Processor Time' and InstanceName == '_Total' and Computer in (TopComputers)| summarize AggregatedValue = avg(CounterValue) by Computer, bin(TimeGenerated, 1h) | render timechart
