SOLVED

Computer group in OMS query

Microsoft

I have two type of group Saved and active directory. I could run query on saved group as below

Perf | where Computer in (['ProdServers'])

 

How can i run the similar query for AD group. I could list the ad group member using the query below

ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "SV_Prod" |distinct  Computer

 

2 Replies
Highlighted
Best Response confirmed by Mayank Bansal (Microsoft)
Solution

Hi@Mayank Bansal 

You can do the following:

let MyGroup = ComputerGroup | where GroupSource == "ActiveDirectory"  and Group == "SV_Prod  |distinct  Computer;
Perf | where Computer in (MyGroup)

Additionally you can save the results from:

ComputerGroup | where GroupSource == "ActiveDirectory"  and Group == "SV_Prod  |distinct  Computer

to a computer group let's say with name MySavedGroup and reference it in

Perf | where Computer in (MySavedGroup)

like any other computer group.

Highlighted
Thanks this solved my problem.