使用Kusto查询中的自定义字段在视图设计器中创建仪表板 [英] Creating Dashboard in View Designer by using custom fields in Kusto query

问题描述

我正在尝试使用在Kusto查询中创建的自定义字段在View desginer中设计概述。



例如：UAComputer下没有默认位置字段，我创建了一个查询，得到了如下预期结果。我想知道每个位置的计算机数量以及主机详细信息。



查询：让西雅图= UAComputer |通过Computer = Seattle汇总计数（计算机以"WASE"开头）;
$


结果：西雅图100 



这里"WASE"是指计算机命名约定（例如 - WASE00001）



与上述查询一样，我可以获取每个位置的计算机计数列表，但是当我尝试在view desginer中设计Donut和List视图，我无法使用导航查询获取每个位置的计算机详细信息（查询Donut
和List工作正常）。 



例如，如果我在视图设计器的列表视图下单击城市名称，它应该填充该特定位置中存在的计算机的详细信息以及操作系统，硬件等的详细信息。 / p>

提前致谢。

Ezhil

解决方案

您好Ezhil_Pa，

如果您的要求是

 

1.每个位置都有一个甜甜圈的计算机分配视图。

2。要有一个列表视图的位置和计数如下所示（为了便于说明，考虑a，b，c，d，e，因为一些数量的计数和总位置被认为是5，即西雅图，雷德蒙德，纽约市，华盛顿特区， Sanfrancisco）。

LOCATION	COUNT
西雅图	a
Redmond	b
Newyorkcity	c
Washingtondc	d
Sanfranciso	e

3。为了能够获取特定位置中存在的计算机列表及其他详细信息，请单击列表视图中的特定位置名称。



然后为了满足您的要求，请将您的查询显示如下所示，其中以WASE开头的计算机被认为是西雅图位置，以RRRR开头的计算机被认为是Redmond位置，以NNNN开头的计算机是考虑到Newyorkcity位置的
，计算机以WWWW被认为是Washingtondc的位置，以SSSS开头的计算机被认为是Sanfrancisco的位置。



甜甜圈查询：¥b $ b

 UAComputer | extend CustomLocation = case（Computer startswith"WASE"，"Seattle"，Computer startswith"RRRR"，"Redmond"，Computer startswith"NNNN"，"Newyorkcity"，Computer startswith"WWWW"，" Washingtondc"，Computer startswith"SSSS"，"Sanfrancisco"，"Others"）|通过CustomLocation汇总count（）

列表查询：

 UAComputer | extend CustomLocation = case（Computer startswith"WASE"，"Seattle"，Computer startswith"RRRR"，"Redmond"，Computer startswith"NNNN"，"Newyorkcity"，Computer startswith"WWWW"，" Washingtondc"，Computer startswith"SSSS"，"Sanfrancisco"，"Others"）|通过CustomLocation汇总count（）

导航查询：

 UAComputer | extend CustomLocation = case（Computer startswith"WASE"，"Seattle"，Computer startswith"RRRR"，"Redmond"，Computer startswith"NNNN"，"Newyorkcity"，Computer startswith"WWWW"，" Washingtondc"，Computer startswith"SSSS"，"Sanfrancisco"，"Others"）| extend CustomNavigationQueryColumn = iif（（{selected item}），"Yes"，"No"|）|其中CustomNavigationQueryColumn ==" Yes"; 

为了更好，更有意义地看到甜甜圈视图和列表查看，随时更新"组标题"参数"按位置计算机分发"和列表"名称"列标题为"位置"。



希望这有助于!!干杯!!

Hi,

I am trying to design a overview in View desginer using custom fields created in the Kusto query.

For example: There is no default location field under UAComputer and I have created a query and got the expected result as below. I want to the number of computer for each location along with host details.

Query: let Seattle = UAComputer | summarize count (Computer startswith "WASE") by Computer = Seattle;

Result: Seattle 100 

Here "WASE" refers to the Computer naming convention (E.g - WASE00001)

Like the above query, I am able to get the list of computer count for each location, however when I try to design a Donut and List view in view desginer, I am not able to fetch the computer details for each location by using Navigation query (Query for Donut and List works fine). 

For instance, If I click the city name under the list view in view designer, it should populate the details of the computers present in that particular location along with the details of OS, hardware etc.

Thanks in advance.

Ezhil

解决方案

Hi Ezhil_Pa,

If your requirement is

 
1. To have a donut view of computer distribution by each location.

2. To have a list view of location and count as shown below (For illustration purpose, consider a, b, c, d, e as some numbers of the count and total locations are considered as 5 i.e., Seattle, Redmond, Newyorkcity, Washingtondc, Sanfrancisco).

LOCATION	COUNT
Seattle	a
Redmond	b
Newyorkcity	c
Washingtondc	d
Sanfranciso	e

3. To be able to get the list of computers present in a particular location along with it's other details, when clicked on a particular location name from the list view.

Then to accomplish your requirement please have your queries something like shown below where computers starting with WASE are considered for Seattle location, computers starting with RRRR are considered for Redmond location, computers starting with NNNN are considered for Newyorkcity location, computers starting with WWWW are considered for Washingtondc location, computers starting with SSSS are considered for Sanfrancisco location.

Donut query:

UAComputer | extend CustomLocation = case(Computer startswith "WASE", "Seattle", Computer startswith "RRRR", "Redmond", Computer startswith "NNNN", "Newyorkcity", Computer startswith "WWWW", "Washingtondc", Computer startswith "SSSS", "Sanfrancisco", "Others") | summarize count() by CustomLocation

List query:

UAComputer | extend CustomLocation = case(Computer startswith "WASE", "Seattle", Computer startswith "RRRR", "Redmond", Computer startswith "NNNN", "Newyorkcity", Computer startswith "WWWW", "Washingtondc", Computer startswith "SSSS", "Sanfrancisco", "Others") | summarize count() by CustomLocation

Navigation query:

UAComputer | extend CustomLocation = case(Computer startswith "WASE", "Seattle", Computer startswith "RRRR", "Redmond", Computer startswith "NNNN", "Newyorkcity", Computer startswith "WWWW", "Washingtondc", Computer startswith "SSSS", "Sanfrancisco", "Others") | extend CustomNavigationQueryColumn = iif(({selected item}), "Yes", "No") | where CustomNavigationQueryColumn == "Yes";

For better and meaningful visibility of the donut view and list view, feel free to update the "Group Title" parameter to "Computer Distribution by Location" and List "Name" column title to "Location".

Hope this helps!! Cheers!!

这篇关于使用Kusto查询中的自定义字段在视图设计器中创建仪表板的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！