You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/logs/computer-groups.md
+2-15Lines changed: 2 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -61,9 +61,9 @@ No longer supported
61
61
## Managing computer groups
62
62
You can view computer groups that were created from a log query from the **Legacy computer groups** menu item in your Log Analytics workspace in the Azure portal. Select the **Saved Groups** tab to view the list of groups.
63
63
64
-
Click the **Delete** icon to delete the computer group. Click the **Run query** icon for a group to run the group's log search that returns its members. You can't modify a computer group but instead must delete and then recreate it with the modified settings.
64
+
Click the **Run query** icon for a group to run the group's log search that returns its members. Click the **Delete** icon to delete the computer group. You can't modify a computer group but instead must delete and then recreate it with the modified settings.
65
65
66
-
:::image type="content" source="media/computer-groups/configure-saved.png" alt-text="Screenshot of a Log Analytics resource in Azure with Legacy computer groups pane, Saved Groups tab, Run query icon, and Delete icon highlighted." border="false" lightbox="media/computer-groups/configure-saved.png":::
66
+
:::image type="content" source="media/computer-groups/configure-saved.png" alt-text="Screenshot of a Log Analytics resource in Azure with Legacy computer groups pane, Saved Groups tab, Run query icon, and Delete icon highlighted." lightbox="media/computer-groups/configure-saved.png":::
67
67
68
68
## Using a computer group in a log query
69
69
You use a Computer group created from a log query in a query by treating its alias as a function, typically with the following syntax:
@@ -78,18 +78,5 @@ For example, you could use the following to return UpdateSummary records for onl
78
78
UpdateSummary | where Computer in (mycomputergroup)
79
79
```
80
80
81
-
Imported computer groups and their included computers are stored in the **ComputerGroup** table. For example, the following query would return a list of computers in the Domain Computers group from Active Directory.
82
-
83
-
```kusto
84
-
ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "Domain Computers" | distinct Computer
85
-
```
86
-
87
-
The following query would return UpdateSummary records for only computers in Domain Computers.
88
-
89
-
```kusto
90
-
let ADComputers = ComputerGroup | where GroupSource == "ActiveDirectory" and Group == "Domain Computers" | distinct Computer;
91
-
UpdateSummary | where Computer in (ADComputers)
92
-
```
93
-
94
81
## Next steps
95
82
* Learn about [log queries](./log-query-overview.md) to analyze the data collected from data sources and solutions.
0 commit comments