Merge pull request #284057 from kainawroth/kainawroth-perf-new

Adding perf counter tables to AMA doc [from PR #283490]

Author: ttorble

articles/azure-monitor/agents/data-collection-performance.md

@@ -10,16 +10,17 @@ ms.reviewer: jeffwo
 ---
 
 # Collect performance counters with Azure Monitor Agent
-**Performance counters** is one of the data sources used in a [data collection rule (DCR)](../essentials/data-collection-rule-create-edit.md). Details for the creation of the DCR are provided in [Collect data with Azure Monitor Agent](./azure-monitor-agent-data-collection.md). This article provides additional details for the Windows events data source type.
+
+**Performance counters** is one of the data sources used in a [data collection rule (DCR)](../essentials/data-collection-rule-create-edit.md). Details for the creation of the DCR are provided in [Collect data with Azure Monitor Agent](./azure-monitor-agent-data-collection.md). This article provides more details for the Windows events data source type.
 
 Performance counters provide insight into the performance of hardware components, operating systems, and applications. [Azure Monitor Agent](azure-monitor-agent-overview.md) can collect performance counters from Windows and Linux machines at frequent intervals for near real time analysis.
 
 ## Prerequisites
 
-- If you are going to send performance data to a [Log Analytics workspace](../logs/log-analytics-workspace-overview.md), then you must have one created where you have at least [contributor rights](../logs/manage-access.md#azure-rbac)..
-- Either a new or existing DCR described in [Collect data with Azure Monitor Agent](./azure-monitor-agent-data-collection.md).
+* If you're going to send performance data to a [Log Analytics workspace](../logs/log-analytics-workspace-overview.md), then you must have one created where you have at least [contributor rights](../logs/manage-access.md#azure-rbac).
+* Either a new or existing DCR described in [Collect data with Azure Monitor Agent](./azure-monitor-agent-data-collection.md).
 
-## Configure performance counters data source 
+## Configure performance counters data source
 
 Create a data collection rule, as described in [Collect data with Azure Monitor Agent](./azure-monitor-agent-data-collection.md). In the **Collect and deliver** step, select **Performance Counters** from the **Data source type** dropdown. 
 
@@ -30,29 +31,56 @@ For performance counters, select from a predefined set of objects and their samp
 Select **Custom** to specify an [XPath](https://www.w3schools.com/xml/xpath_syntax.asp) to collect any performance counters not available by default. Use the format `\PerfObject(ParentInstance/ObjectInstance#InstanceIndex)\Counter`. If the counter name contains an ampersand (&), replace it with `&`. For example, `\Memory\Free & Zero Page List Bytes`. You can view the default counters for examples.
 
 :::image type="content" source="media/data-collection-performance/data-source-performance-custom.png" lightbox="media/data-collection-performance/data-source-performance-custom.png" alt-text="Screenshot that shows the Azure portal form to select custom performance counters in a data collection rule." border="false":::
-  
 
 > [!NOTE] 
 > At this time, Microsoft.HybridCompute ([Azure Arc-enabled servers](../../azure-arc/servers/overview.md)) resources can't be viewed in [Metrics Explorer](../essentials/metrics-getting-started.md) (the Azure portal UX), but they can be acquired via the Metrics REST API (Metric Namespaces - List, Metric Definitions - List, and Metrics - List).
 
-
 ## Destinations
 
 Performance counters data can be sent to the following locations.
 
-| Destination | Table / Namespace |
-|:---|:---|
-| Log Analytics workspace | [Perf](/azure/azure-monitor/reference/tables/perf) |
-| Azure Monitor Metrics | Windows: Virtual Machine Guest<br>Linux: azure.vm.linux.guestmetrics
+| Destination             | Table / Namespace                                                    |
+|:------------------------|:---------------------------------------------------------------------|
+| Log Analytics workspace | Perf (see [Azure Monitor Logs reference](/azure/azure-monitor/reference/tables/perf#columns)) |
+| Azure Monitor Metrics   | Windows: Virtual Machine Guest<br>Linux: azure.vm.linux.guestmetrics |
 
-
 > [!NOTE]
 > On Linux, using Azure Monitor Metrics as the only destination is supported in v1.10.9.0 or higher.
 
 :::image type="content" source="media/data-collection-performance/destination-metrics.png" lightbox="media/data-collection-performance/destination-metrics.png" alt-text="Screenshot that shows configuration of an Azure Monitor Logs destination in a data collection rule.":::
 
+## Log queries with performance records
+
+The following queries are examples to retrieve performance records.
+
+#### All performance data from a particular computer
+
+```query
+Perf
+| where Computer == "MyComputer"
+```
+
+#### Average CPU utilization across all computers
+
+```query
+Perf 
+| where ObjectName == "Processor" and CounterName == "% Processor Time" and InstanceName == "_Total"
+| summarize AVGCPU = avg(CounterValue) by Computer
+```
+
+#### Hourly average, minimum, maximum, and 75-percentile CPU usage for a specific computer
+
+```query
+Perf
+| where CounterName == "% Processor Time" and InstanceName == "_Total" and Computer == "MyComputer"
+| summarize ["min(CounterValue)"] = min(CounterValue), ["avg(CounterValue)"] = avg(CounterValue), ["percentile75(CounterValue)"] = percentile(CounterValue, 75), ["max(CounterValue)"] = max(CounterValue) by bin(TimeGenerated, 1h), Computer
+```
+
+> [!NOTE]
+> Additional query examples are available at [Queries for the Perf table](/azure/azure-monitor/reference/queries/perf).
+
 ## Next steps
 
-- [Collect text logs by using Azure Monitor Agent](data-collection-text-log.md).
-- Learn more about [Azure Monitor Agent](azure-monitor-agent-overview.md).
-- Learn more about [data collection rules](../essentials/data-collection-rule-overview.md).
+* [Collect text logs by using Azure Monitor Agent](data-collection-text-log.md).
+* Learn more about [Azure Monitor Agent](azure-monitor-agent-overview.md).
+* Learn more about [data collection rules](../essentials/data-collection-rule-overview.md).