Exam AZ-400 topic 2 question 37 discussion

from the last 24 hours: TimeGenerated > ago(24h) compare the hourly CPU usage: bin(TimeGenerated, 1h) must include a graph that has threshold line at 75 percent: extend Threshold = 75 But you need to use "render timechart" after, to generate the graph with the threshold line with static value 75.

peformance counters | where TimeGenerated > ago(1d) | where counter == "% Processor Time" | summarize avg(value), by cloud_RoleInstance, bin(TimeGenerated, 1d) | render Threshold = 75

I will go with "extend", https://stackoverflow.com/questions/63122428/is-there-a-way-to-add-a-threshold-to-the-charts-in-azure-monitor

performanceCounters | where TimeGenerated > ago(1d) | where counter == "% Processor Time" | summarize avg(value) by cloud_RoleInstance, bin(TimeGenerated, 1h) | extend Threshold = 75

performanceCounters | where TimeGenerated > ago(1d) | where counter == "% Processor Time" | summarize avg(value), by cloud_RoleInstance, bin(TimeGenerated, 1h) | extend Threshold = 75 where TimeGenerated > ago(1d) -> Counters from the last 24 summarize ... bin(TimeGenerated, 1h) -> Hourly CPU usage extend Threshold = 75 -> Add a calculated column named Theshold In order to produce a visual as stated in the question, a "render timechart" statement should be added at the end.

Actual Query will be this: First Placeholder: bin(TimeGenerated, 1h) Second Placeholder: extend performance counters | where TimeGenerated > ago(1d) | where counter == "% Processor Time" | summarize avg(value) by cloud_RoleInstance, bin(TimeGenerated, 1h) | extend Threshold = 75 | project cloud_RoleInstance, bin_TimeGenerated, avg_value, Threshold | render Here's the breakdown of the changes: bin(TimeGenerated, 1h) is used to bin the timestamp into hourly intervals, extend Threshold = 75 adds the threshold value, project cloud_RoleInstance, bin_TimeGenerated, avg_value, Threshold Finally, render is used to render the graph. This query will compare the hourly CPU usage of App1 from the last 24 hours, including a graph with a threshold line at 75 percent.

Suspect the question isn't complete. without render "timechart", the requirement wont be met. but without "timechart", render Threshold = 75 wont produce a visual.

should be "extend"

Looks like the "project" operator will do the job: https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/projectoperator | project Threshold = 75

1. bin(TimeGenerated, 1h) 2. render https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/renderoperator?pivots=azuredataexplorer Instructs the user agent to render a visualization of the query results.