Forum Discussion
Event Total Volume Collect
Hello I would like to add up the total amount of GB for events. However, I don't think my query works the way I want it to let daystoSearch = 31d; union withsource = tt * | where TimeGenerated >...
Dale Koetke
Microsoft
MicrosoftUnless you need this segmented by computer, just use the Usage data type, e.g. as documented at https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-cost-storage#data-volume-by-solution. You're query for the total billable data from the last 31 days would be:
Usage
| where TimeGenerated > startofday(ago(31d))
| where IsBillable == true
| summarize BillableDataGB = sum(Quantity) / 1000.