Examkin

Question

Difficulty: EasyLog Analytics Workspaces and KQL Queries

You configure the Log Analytics agent to collect performance counters from several Azure virtual machines. You need to write a query to identify all records where the processor utilization exceeds 90 percent. Which Kusto Query Language (KQL) query should you run?

  1. Perf
    | where CounterName == "% Processor Time"
    | where CounterValue > 90    Answer
  2. B
    Perf
    | where CounterName = "% Processor Time" and CounterValue > 90
  3. C
    Performance
    | where CounterName == "% Processor Time"
    | where CounterValue > 90
  4. D
    Perf
    | filter CounterName == "% Processor Time" and CounterValue > 90

Answer

The query that starts with the Perf table and uses the where operator with the double equals (==) comparison operator.
The correct query references the Perf table and uses the where operator with the double equals (==) comparison operator to filter performance counter records.

Step-by-Step Solution

1
Determine the correct log table for virtual machine performance metrics.
The target table is Perf.
Azure Log Analytics stores performance counter data in the Perf table.
2
Filter the rows to match the specific counter and value threshold.
Use 'where CounterName == "% Processor Time"' and 'where CounterValue > 90'.
The where operator filters records, and the double equals (==) operator performs equality comparison in KQL.

Key Concept

Querying VM performance logs using basic KQL operators and the Perf table
Estimated Time:45s
Rate this question

Topics

Log Analytics Workspaces and KQL Queries

More questions from this topic