updates

queries/delays/OrchestrationLogSpikeTip.csl

@@ -1,3 +1,5 @@
+// Use this to sample a few OrchestrationIds
+// Run those OrchestrationIds through queries/delays/WhatHappened.csl
 let scaleUnit = "{su}";
 let startTime = todatetime("{start}") - 15min;
 let endTime = todatetime("{end}") + 15min;
@@ -16,27 +18,4 @@ let hostId = "{hostId}";
  | where HostId startswith hostId
  | where Command contains command
  | project PreciseTimeStamp, OrchestrationId, ExceptionMessage, Feature, HostId
- | top 1000 by PreciseTimeStamp desc
-
-// Take some sample orchestrationId and run this
-// let planId = "a1d4ca72-3150-4610-ba6f-3a6396189602"; 
-// let hostId = tostring(toscalar(OrchestrationPlanContext | where PlanId == planId | summarize by HostId));
-// let hostName = tostring(toscalar(ServiceHostAggregated() | where HostId == hostId | take 1 | project Name));
-// find in (ActivityLog, AgentPoolRequestHistory, HttpOutgoingRequests, OrchestrationLog, OrchestrationPlanContext, ProductTrace)
-// where OrchestrationId startswith planId
-// project PreciseTimeStamp, 
-//         OrchestrationId, 
-//         Tracepoint,
-//         Command, 
-//         Message,  
-//         UrlPath, 
-//         ResponseCode, 
-//         Level, // for coloring :)
-//         ActivityId, 
-//         ExceptionMessage,
-//         UserAgent,
-//         HttpClientName,
-//         HttpMethod
-// | extend HostName = hostName
-// | extend Agent = coalesce(UserAgent, strcat(HttpMethod, "-", HttpClientName))
-// | project-away UserAgent, HttpClientName, HttpMethod
+ | top 1000 by PreciseTimeStamp desc