Forum Discussion
Join two or more tables
Hello guys
I need your help. How can create a query to join a table "ConfigurationChange" and table "Perf" to know the % of CPU with a condition to have the same Publisher.
Thank you for ...
Hi
I am not quite sure what exactly you want to achieve. Can make a simple mockup how the first and the second table should look and how they should look after they are joined.
Hello.
Thank you for your reply
I want to filter one query that find publisher = "SAP" and see the Percentage of CPU and order by asc. I only can do with join the the table perf that information give the the % of CPU and the table ConfigurationChange that give the publisher "SAP".
One example:
1 - search * | where Publisher contains "SAP" (this information is insert on the table Perf)
Join
2 - search * | where ObjectName == "Memory" and CounterName == "% Committed Bytes In Use" | summarize UsedMemory = avg(CounterValue) by Computer | sort by UsedMemory desc (this information in insert on the table ConfigurationData)
- Meir_Mendelovich
Microsoft
Nuno, Queries that are not type specific are inefficient and harder to author as the type is not known to the query editor. Please refine from using queries that start with "search *" and use the table name instead.
We are not blocking it from the language as there are cases were it is needed but "search *" query could be 10 time longer than the same query with type specific. - What is the common field that these two tables should be joined on? Computer?
