Query Details

Make Series To Fill In Gaps With Default For Bin By Bucket

Query

let window = 1d;
let bucket = 1h;
let min_t = toscalar(customMetrics | where timestamp > ago(window) | summarize min(timestamp));
let max_t = toscalar(customMetrics | where timestamp > ago(window) | summarize max(timestamp));
customMetrics
| where timestamp > ago(window)
| make-series totalHeartbeatCountByHour=count() default=0 on timestamp in range(min_t, max_t, bucket) 
| mvexpand timestamp to typeof(datetime),
    totalHeartbeatCountByHour to typeof(double)
| sort by timestamp desc

Explanation

This query calculates the total number of heartbeats received per hour for a specific time window. It first defines a window and bucket size, then finds the minimum and maximum timestamps within that window. It then filters the customMetrics data based on the timestamp within the window and creates a series of total heartbeat counts per hour using the specified bucket size. Finally, it expands the timestamp and count columns, sorts the results by timestamp in descending order.

Details

Rod Trent profile picture

Rod Trent

Released: March 26, 2020

Tables

customMetrics

Keywords

CustomMetrics,Timestamp,TotalHeartbeatCountByHour

Operators

letwindowbuckettoscalarcustomMetricswhereagosummarizeminmaxmake-seriescountdefaultonrangemvexpandtypeofsortbydesc

Actions