Group similar Process name in LogsAnalytics
Hi, I am looking for a query where I can get % Process CPU for specific Process. My main concern is that I would like to group some of them. For instance: "ZSAService", "ZSATunnel" and "ZSATray" sould all been group under ZScaler My current query : Perf | where Computer contains "sl2" | where ObjectName == "Process" and CounterName == "% Processor Time" | where (InstanceName contains "Sysmon" or InstanceName contains "CSFalconSer" or InstanceName contains "ZSA" ) | summarize avg(CounterValue) by InstanceName, bin(TimeGenerated, 1d) | render timechart title = "% CPU SECURITE" and the current result:
Barchart ignoring one data series
The following query Heartbeat | where TimeGenerated >= startofday(ago(2d)) | where Computer == "ADMIN-PC" or Computer == "SERVER-PC" | summarize dcount(Computer) by t = endofday(TimeGenerated) , Computer | sort by t, Computer | render barchart kind=default produces the following table of 6 record in two sets: I'd expect to see a barchart with two series, but the result only shows one: The behavour is consistent. When I chose three series only two will be displayed. Do I miss anything? Regards Jörg
Azure monitoring
Hello! First and foremost, I'm new to Azure and Azure monitoring. That's why I'm starting this conversation. I'm currently trying to migrate our SolarWinds monitor into the Azure monitoring portal, but I'm unable to carry on because my knowledge about queries is absolutely minimum. I would like some assistance when it comes to queries, does anybody for instance know a query to monitor the CPU load on different computers and/or servers? And which tile in the designer should I use for this query? I hope some of you can help me out 🙂 Kind regards, Rik
Dashboard performance issues and Creating a dashboard with dynamic target source dropdown list
Hi, Two issues that I am dealing with application insights: 1. Dashboard performance - It takes a long time to load all the charts even when the queries are very simple. for example a simple query like: let ids = customMetrics | where name == 'my_metric_name' | project customDimensions.id; customMetrics | where name == 'another_metric_name' and customDimensions.id in (ids) without much data loaded, can take about 30 seconds. Maybe I am doing something wrong? is there maybe a way to index my customDimensions properties? 2. Dynamic target resource - I have many target resources with the same metrics data structures, and I want to create one dashboard with many charts, that will be updated automatically by the given target resource - that can be changed from something like a drop down list with all the target resources. Right now I have the same dashboard for each target resource. Thanks in advance, Elad.
