Identify Top Disk IO Processes
Query
// Use Case: Identifying and prioritizing processes with high on-disk working set size for system resource optimization.
Process
| where DiskBytesRead > 50000000 or DiskBytesWritten > 50000000
| project ProcessName, ProcessId, DiskBytesRead, DiskBytesWritten
| order by DiskBytesRead desc, DiskBytesWritten desc
| take 5Explanation
This query is designed to identify and prioritize processes that are using a large amount of disk resources, specifically focusing on those with high on-disk working set sizes. Here's a simple breakdown of what it does:
- Filter Processes: It looks at processes that have read or written more than 50,000,000 bytes to disk.
- Select Information: For these processes, it selects and displays the process name, process ID, and the amount of data read from and written to the disk.
- Order Processes: It sorts the processes in descending order, first by the amount of data read from the disk and then by the amount of data written.
- Limit Results: Finally, it shows the top 5 processes based on this sorting.
In summary, the query helps in identifying the top 5 processes that are using the most disk resources, which can be useful for optimizing system performance.
Details
Ugur Koc
Released: December 13, 2024
Tables
Process
Keywords
Process
Operators
whereorprojectorder bydesctake