Perf

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

---

Reference for Perf table in Azure Monitor Logs.

Attribute	Value
Category	Low value
Basic Logs Eligible	✗ No (source)
Supports Transformations	✓ Yes (source)
Ingestion API Supported	✗ No
Azure Monitor Tables Reference	View Documentation

Contents

• Schema
• Solutions
• Content Items
• Resource Types

Schema (19 columns)

Source: Azure Monitor documentation

Column Name	Type	Description
_BilledSize	real	The record size in bytes
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
_ResourceId	string	A unique identifier for the resource that the record is associated with
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
BucketEndTime	datetime
BucketStartTime	datetime
Computer	string	Computer that the counter was collected from.
CounterName	string	Name of the performance counter.
CounterPath	string	Full path of the counter in the form <Computer>\ObjectName(InstanceName)\CounterName.
CounterValue	real	Value of the performance counter sample.
InstanceName	string	Counter instance name. Empty when no instance applies.
Max	real
Min	real
ObjectName	string	Performance object for the counter.
SampleCount	int
SourceSystem	string	The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
StandardDeviation	real
TenantId	string	The Log Analytics workspace ID
TimeGenerated	datetime	Date and time the counter was recorded.

Solutions (3)

This table is used by the following solutions:

• Barracuda CloudGen Firewall
• Forcepoint NGFW
• SOC Handbook

---

Content Items Using This Table (3)

Workbooks (3)

In solution Barracuda CloudGen Firewall: InstanceName == "BNGF"
ObjectName == "Connections_New"

Workbook
Barracuda

In solution Forcepoint NGFW: CounterName contains "Processor Time"

Workbook
ForcepointNGFWAdvanced

In solution SOC Handbook:

Workbook	Selection Criteria
SecurityStatus

Resource Types

This table collects data from the following Azure resource types:

• microsoft.operationalinsights/workspaces
• microsoft.containerservice/managedclusters
• microsoft.kubernetes/connectedclusters
• microsoft.compute/virtualmachines
• microsoft.conenctedvmwarevsphere/virtualmachines
• microsoft.azurestackhci/virtualmachines
• microsoft.scvmm/virtualmachines
• microsoft.compute/virtualmachinescalesets
• microsoft.azurestackhci/clusters
• microsoft.hybridcontainerservice/provisionedclusters

Selection Criteria Summary (2 criteria, 2 total references)

References by type: 0 connectors, 2 content items, 0 ASIM parsers, 0 other parsers.

Selection Criteria	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
InstanceName == "BNGF" ObjectName == "Connections_New"	-	1	-	-	1
CounterName contains "Processor Time"	-	1	-	-	1
Total	0	2	0	0	2

CounterName

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
contains Processor Time	-	1	-	-	1

InstanceName

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
BNGF	-	1	-	-	1

ObjectName

Value	Connectors	Content Items	ASIM Parsers	Other Parsers	Total
Connections_New	-	1	-	-	1

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index