Using the Azure Log Analytics demo environment (https://portal.loganalytics.io/demo) and the perf and SecurityEvent tables wrote a query that will: Identify computers within the last day with an average % processor time for the entire processor > 50 that also had a security event in the same time frame. Return the computer name and average percent of processor time.


0 comments