Let me bind TWO queries on the timeline tile in dashboard to stack/correlate two queries against each other
For more context, the idea was discussed first here https://social.msdn.microsoft.com/Forums/azure/en-US/cad60298-be3a-4892-acc0-8d35abad1fad/exlude-reboot-results-from-configuration-change-searches?forum=opinsights
12
votes
AdminOMS Log Analytics Team
(Product Manager, Microsoft Azure)
shared this idea
Seeded idea. Would you like to see this enhancement in dashboards?
1 comment
-
Anonymous
commented
I strongly support that idea! Also very useful for situations like for example filtering out failed antimalware signature update (event id 2001) followed by a successful antimalware update (event id 2000).