Azure 平台
数据盘空间使用达到400G
Perf
|?where?Computer?==?"FTPSERVER2012"
|?where?CounterName?==?"Free?Megabytes"
|?where?InstanceName?==?"E:"
|?extend?FreeGigabytes?=?500-CounterValue/1024
|?sort?by?TimeGenerated?desc
|?summarize?AggregatedValue=min(FreeGigabytes)?by?bin(TimeGenerated,?1d)
?
使用SSH登陆成功的设备清单
Event?
|?where?Source?==?"OpenSSH"
|?where?RenderedDescription?contains?"Accepted"?
|?sort?by?TimeGenerated?desc
|?project?TimeGenerated?,?Computer?,?RenderedDescription?
使用RDP登陆成功的设备清单
Event
|?where?Source?==?"Microsoft-Windows-TerminalServices-RemoteConnectionManager"
|?where?EventID?==?1149
|?sort?by?TimeGenerated?desc
|?project?TimeGenerated?,?Computer?,?RenderedDescription?