KQL Search

This query is designed to identify and prioritize processes that are using a large amount of disk resources, specifically focusing on those with high on-disk working set sizes. Here's a simple breakdown of what it does:

1. Filter Processes: It looks at processes that have read or written more than 50,000,000 bytes to disk.
2. Select Information: For these processes, it selects and displays the process name, process ID, and the amount of data read from and written to the disk.
3. Order Processes: It sorts the processes in descending order, first by the amount of data read from the disk and then by the amount of data written.
4. Limit Results: Finally, it shows the top 5 processes based on this sorting.

In summary, the query helps in identifying the top 5 processes that are using the most disk resources, which can be useful for optimizing system performance.