How to read/get Virtual machine background processes using Kusto LOg query , Azure Monitor

0
votes

I hope you all are doing great.

I'd like to How to read/get Virtual machine background processes using Kusto Log query on Azure Monitor log analytics process.

e.g. As shown in below screen shot: enter image description here

Kindly advise.

1
azureazure-monitoringazure-data-explorerkql

1 Answers

0
votes

Enable the perf counters for the process and you need to get the Process Names out of it by querying the perf table.

You can add the perf counter Process(*)\% Processor Time. By going to Log Analytics instance -> Advanced Settings -> Windows Performance Counters. Then query these performance counters as below.

Perf | where ObjectName == "Process" | where CounterName contains "Processor Time" | summarize makelist(InstanceName) by Computer

And other alternate way is by using the service map feature refer this , you can query ServiceMapProcess_CL table https://docs.microsoft.com/en-us/azure/azure-monitor/insights/vminsights-log-search .

Let me know if this answers.