Azure Log Analytics Summarize Operator

This post is aimed at beginners with Azure Log Analytics. I’ll be discussing how you can use the Azure Log Analytics Summarize operator when you query data in your Log Analytics workspace. The Summarize Operator will likely be the most commonly used Operator. It seems like at least once a week I learn something knew …

Read more

Format the TimeGenerated Field Azure Log Analytics

I was recently writing a summary performance report binned by day. If you have used the summarize operator with bin you know that the TimeGenerated field has a lot of extra characters on it. So naturally my next question was how do you format the TimeGenerated Field?  I took a look at the official format_datetime() …

Read more

Azure Log Analytics Project Operator

This post is aimed at beginners with Azure Log Analytics. I’ll be discussing how you can use the Azure Log Analytics Project operator when you query data in your Log Analytics workspace. The Project operator works similarly to Select-Object in Powershell. If we do: We get a bunch of fields back. Including our TenantId, which …

Read more

Find High CPU Processes in Azure Log Analytics

Staying on top of performance issues is a top priority for any ops team. When it comes to high CPU issues your monitoring solution may be able to tell you when CPU is high on any server. But beyond that you were then logging into the server to run perfmon or some other tool, or …

Read more

Using Azure Log Analytics Distinct Operator

azure log analytics

This post is aimed at beginners with Azure Log Analytics. I’ll be discussing how you can use the Azure Log Analytics Distinct operator when you query data in your Log Analytics workspace. The Distinct operator is useful when you want to DE-duplicate your data. Or if you want to generate a report, or finding how …

Read more