Forum Discussion

Alex Kobin's avatar
Alex Kobin
Copper Contributor
Dec 12, 2018

Log Analytic Dashboard Diagram(Lines) disk space

Hi all

I got this query that shows me Used disk space in % for every disk in the vm.

Now i want to collect all the information in a Dashboard design that will show me a Diagram(Lines) for a whole day what changes been made and when in a past day.

 

This is the query i got for now working, but i got only a list in my dashboard.

*******************************************************************************************************

Perf
| where TimeGenerated > ago(1h)
| where ObjectName == "Logical Disk" and CounterName == "% Used Space"
| summarize (TimeGenerated, Used_Space_Percent)=arg_max(TimeGenerated, CounterValue) by Computer, InstanceName

*******************************************************************************************************

  • Below query should help you:

     

    Perf
    | where TimeGenerated > ago(1h)
    | where ObjectName == "Logical Disk" and CounterName == "% Used Space"
    | extend ComputerDrive = strcat(Computer, ' - ', InstanceName)
    | summarize Used_Space_Percent = max(CounterValue) by ComputerDrive, bin(TimeGenerated, 1h)
    | render timechart 

    A few things to note:

    - value of computer and drive is concatenated. the render cannot visualize more than one column at a time this we create a single column out of those two

    - I am using bin to put the values in buckets in time range of 1 hour. You can change the interval to your liking

    - I am using max() function to get the maximum value available for each hour. You can use other functions like min(), avg(), percentile(), etc. Depends on your scenario.

  • Below query should help you:

     

    Perf
    | where TimeGenerated > ago(1h)
    | where ObjectName == "Logical Disk" and CounterName == "% Used Space"
    | extend ComputerDrive = strcat(Computer, ' - ', InstanceName)
    | summarize Used_Space_Percent = max(CounterValue) by ComputerDrive, bin(TimeGenerated, 1h)
    | render timechart 

    A few things to note:

    - value of computer and drive is concatenated. the render cannot visualize more than one column at a time this we create a single column out of those two

    - I am using bin to put the values in buckets in time range of 1 hour. You can change the interval to your liking

    - I am using max() function to get the maximum value available for each hour. You can use other functions like min(), avg(), percentile(), etc. Depends on your scenario.

Resources