Sep 13 2019
04:00 PM
- last edited on
Apr 08 2022
10:07 AM
by
TechCommunityAP
Sep 13 2019
04:00 PM
- last edited on
Apr 08 2022
10:07 AM
by
TechCommunityAP
I have two type of group Saved and active directory. I could run query on saved group as below
Perf | where Computer in (['ProdServers'])
How can i run the similar query for AD group. I could list the ad group member using the query below
ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "SV_Prod" |distinct Computer
Sep 15 2019 10:49 PM
SolutionYou can do the following:
let MyGroup = ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "SV_Prod |distinct Computer;
Perf | where Computer in (MyGroup)
Additionally you can save the results from:
ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "SV_Prod |distinct Computer
to a computer group let's say with name MySavedGroup and reference it in
Perf | where Computer in (MySavedGroup)
like any other computer group.
Sep 15 2019 10:49 PM
SolutionYou can do the following:
let MyGroup = ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "SV_Prod |distinct Computer;
Perf | where Computer in (MyGroup)
Additionally you can save the results from:
ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "SV_Prod |distinct Computer
to a computer group let's say with name MySavedGroup and reference it in
Perf | where Computer in (MySavedGroup)
like any other computer group.