I am trying to analyze my usage of Azure Application Insights and figure out where I am spending money.
I am reading this article: https://docs.microsoft.com/en-us/azure/azure-monitor/logs/log-standard-columns#_isbillable
The article gives some examples of KQL (Kusto) queries that I can run in order to get an overview of billable data, such as this:
union withsource = tt *
| where _IsBillable == true
| extend computerName = tolower(tostring(split(Computer, '.')[0]))
| where computerName != ""
| summarize TotalVolumeBytes=sum(_BilledSize) by computerName
The article also says:
Use queries with union
withsource = tt *sparingly as scans across data types are expensive to execute.
In other words, the article cautions against using the query examples verbatim lest I waste money scanning data that I don't need.
As far as I understand, withsource = tt * is a union/join of multiple tables. Can I check where the important columns like IsBillable are actually located so that I can join just those tables I actually need?
