Perf

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

Reference for Perf table in Azure Monitor Logs.

Attribute	Value
Category	Low value
Basic Logs Eligible	✓ Yes (source)
Supports Transformations	✓ Yes (source)
Ingestion API Supported	✗ No
Lake-Only Ingestion	✗ No
Azure Monitor Tables Reference	View Documentation

Schema
Schema References
Solutions
Content Items
Resource Types

Schema (19 columns)

Source: Azure Monitor documentation

Column Name	Type	Description
_BilledSize	real	The record size in bytes
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable isfalseingestion isn't billed to your Azure account
_ResourceId	string	A unique identifier for the resource that the record is associated with
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
BucketEndTime	datetime
BucketStartTime	datetime
Computer	string	Computer that the counter was collected from.
CounterName	string	Name of the performance counter.
CounterPath	string	Full path of the counter in the form <Computer>\ObjectName(InstanceName)\CounterName.
CounterValue	real	Value of the performance counter sample.
InstanceName	string	Counter instance name. Empty when no instance applies.
Max	real
Min	real
ObjectName	string	Performance object for the counter.
SampleCount	int
SourceSystem	string	The type of agent the event was collected by. For example,OpsManagerfor Windows agent, either direct connect or Operations Manager,Linuxfor all Linux agents, orAzurefor Azure Diagnostics
StandardDeviation	real
TenantId	string	The Log Analytics workspace ID
TimeGenerated	datetime	Date and time the counter was recorded.

Schema References

Official Microsoft Learn documentation for field/column information:

Perf Schema Reference (Azure Monitor)

Solutions (3)

This table is used by the following solutions:

Content Items Using This Table (7)

Workbooks (7)

In solution Barracuda CloudGen Firewall: InstanceName == "BNGF"
ObjectName == "Connections_New"

Workbook
Barracuda

In solution Forcepoint NGFW: CounterName contains "Processor Time"

Workbook
ForcepointNGFWAdvanced

In solution SOC Handbook:

Workbook	Selection Criteria
SecurityStatus

GitHub Only:

Workbook	Selection Criteria
Barracuda	`InstanceName == "BNGF"` `ObjectName == "Connections_New"`
DataCollectionHealthMonitoring	`CounterName in "Available MBytes,Available MBytes Memory,Free Megabytes"`
ForcepointNGFWAdvanced	`CounterName contains "Processor Time"`
SecurityStatus

Resource Types

This table collects data from the following Azure resource types:

microsoft.operationalinsights/workspaces
microsoft.containerservice/managedclusters
microsoft.kubernetes/connectedclusters
microsoft.compute/virtualmachines
microsoft.conenctedvmwarevsphere/virtualmachines
microsoft.azurestackhci/virtualmachines
microsoft.scvmm/virtualmachines
microsoft.compute/virtualmachinescalesets
microsoft.azurestackhci/clusters
microsoft.hybridcontainerservice/provisionedclusters

Selection Criteria Summary (2 criteria, 2 total references)

References by type: 0 connectors, 2 content items, 0 ASIM parsers, 0 other parsers.

Selection Criteria	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
`InstanceName == "BNGF"` `ObjectName == "Connections_New"`	-	1	-	-	1
`CounterName contains "Processor Time"`	-	1	-	-	1
Total	0	2	0	0	2

CounterName

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
`contains Processor Time`	-	1	-	-	1

InstanceName

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
`BNGF`	-	1	-	-	1

ObjectName

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
`Connections_New`	-	1	-	-	1