0

Consider the following query:

Perf
| where CounterName == '% Processor Time'
| project TimeGenerated, CounterValue
| render timechart 

It yields something like this:

enter image description here

I would like it to display '% Processor Time' instead of CounterValue. However, I cannot use project_rename, since the desired title contains spaces. So, how do I do it?

mark
  • 725
  • 3
  • 15
  • 32

1 Answers1

0

This query will do what you want:

Perf
| where CounterName == '% Processor Time'
| project TimeGenerated, ['% Processor Time']=CounterValue 
| render timechart
Sam Cogan
  • 38,736
  • 6
  • 78
  • 114