如何在OMS Log Analytics搜索查询中仅访存Azure计算机

Question

I am trying to fetch underutilized computers in Azure. I am trying to use OMS Log Analytics query for this.

The query returns the Azure VMs and on-premise servers as well (fetched via SCOM or direct agent). I need to filter the result to get only the Azure VMs. What is the best way (or query) to fetch only Azure computers in OMS Log Analytics Search Query?

I know that I need to create a Computer Group and then use that Computer Group in my Query as shown below.

Type=Perf ObjectName=Processor CounterName="% Processor Time" Computer IN $ComputerGroups[AzureComputers]

I need to know what Query should I use to create the Computer Group " AzureComputers " which is used in the above query.This computer group will contain only computers which are present in Azure ie which are Azure VMs.

Answer 1

This feature is now provided out of the box in OMS Log Analytics. Finding Azure computers is as easy as running below query in Log Analytics:

Heartbeat | where ComputerEnvironment == "Azure" and notempty(ResourceId) | distinct Computer