时间图的KQL查询

Question

我使用了这个查询，但是我无法获得显示CPU趋势的时间图。似乎只显示当前cpu。我的目标是显示每台计算机(主机)的趋势。

 Telemetry_system
 | where hostname_s contains "computer-A"
 | where TimeGenerated > ago(5m)
 | summarize
  by
 hostname,
 callBackUrl,
 cpu_d
 | summarize Aggregatedcpu= avg(cpu_d) by hostname, callBackUrl
 | render timechart

Answer 1

如果我正确理解您的意图，请尝试如下：

Telemetry_system
| where hostname_s contains "computer-A"
| where TimeGenerated > ago(5m)
| summarize Aggregatedcpu = avg(cpu_d) by strcat(hostname, "_", callBackUrl), bin(TimeGenerated, 1s)
| render timechart