KQL Query to check CPU utilization and memory utilization of each user in the AVD environment

Question

Hi,

I am trying to use KQL query to check the CPU utilization based on the performance counter of "Process/% Processor Time" and memory utilization based on the performance counter of "Process/Private Bytes" according to each user in the AVD setup. In the perf table, there are no parameters for the username only the computer. Is there any way I can do this using the join or union operator?

Thanks for any help or suggestion.

Answer

Hello Syed Harith Zaki,

Welcome to microsoft Q&A, thankyou for posting your query here.

The whole query is made up of 2 different parts WVD Connection, Perf processor and Perf memory.

Perf
| where (ObjectName == "Processor" and CounterName == "% Processor Time" and InstanceName == "_Total")
    or (ObjectName == "Memory" and CounterName == "Available MBytes")
| summarize avg(CounterValue) by TimeGenerated, ObjectName, CounterName, InstanceName
| project TimeGenerated, ObjectName, CounterName, InstanceName, CounterValue = avg_CounterValue

use the join operator to combine the ProcessorData and MemoryData tables based on the TimeGenerated column.

let ProcessorData = Perf
| where ObjectName == "Processor" and CounterName == "% Processor Time" and InstanceName == "_Total"
| summarize CPUUtilization = avg(CounterValue) by TimeGenerated;
let MemoryData = Perf
| where ObjectName == "Memory" and CounterName == "Available MBytes"
| summarize MemoryUtilization = avg(CounterValue) by TimeGenerated;
ProcessorData
| join kind=inner MemoryData on TimeGenerated
| project TimeGenerated, CPUUtilization, MemoryUtilization;

Hope this helps you.

Share via

KQL Query to check CPU utilization and memory utilization of each user in the AVD environment

1 answer