Query Details
Impact Of Processes Over Time By Looking At How Long They Run
Query
Use Case: Identifying long-running processes with high resource utilization on a system for performance analysis and optimization. Query: Process | project ProcessName, StartDateTime, ElapsedTimeInMinutes = ElapsedTimeMilliseconds / 60000, ThreadCount, HandleCount | where ElapsedTimeInMinutes > 0 // Ensuring we only look at processes that have a reported elapsed time | order by ElapsedTimeInMinutes desc, ThreadCount desc, HandleCount desc
Explanation
The query is used to identify processes on a system that are running for a long time and using a lot of resources. It retrieves information about the process name, start time, elapsed time in minutes, thread count, and handle count. The results are filtered to only include processes with a reported elapsed time, and then sorted in descending order based on elapsed time, thread count, and handle count.
Details
Ugur Koc
Released: February 4, 2024
Tables
Process
Keywords
Process,StartDateTime,ElapsedTimeInMinutes,ThreadCount,HandleCount
Operators
projectwhereorder by