Kusto：从特定数据添加其他列

Posted 2023-01-28

使用Kusto在Azure Log Analytics中，我试图完成对特定时间段内处理器活动的概述。像这样的东西：

Perf 
| where TimeGenerated between ((startofday(now())) .. (endofday(now())))
| where Computer == "servername.domain.local"
| where ObjectName == "Processor Information" and CounterName == "% Processor Time" and InstanceName == "_Total"
| summarize avg(CounterValue) by bin(TimeGenerated, 1m)
| render timechart 

我想添加的是来自处理器核心的数据，该数据位于总处理时间之上，并在时间表中显示。我已经忙了一天，但似乎无法正常工作。因此，基本上可以归结为执行多个where语句并将结果放在单独的列中（我认为）]

任何人都可以分享一些见解吗？

答案

Perf | where TimeGenerated between ((startofday(now())) .. (endofday(now()))) | where Computer == "servername.domain.local" | where ObjectName == "Processor Information" and CounterName == "% Processor Time" | summarize avg(CounterValue) by bin(TimeGenerated, 1m), InstanceName | render timechart