Pipe your base search into a where or search command with server_load > 80.
<base search> | where server_load > 80 | table <your fields>
You don't even need the where clause if your server_load is an original field from the events. In which case you can simply add "server_load > 80" as part of your base search.
<base search> server_load > 80 | table <your fields>
Isn't it easy to just apply where condition server_load>80 in your search query? Am i not getting something!! Kindly explain.
Pipe your base search into a where or search command with server_load > 80.
<base search> | where server_load > 80 | table <your fields>
You don't even need the where clause if your server_load is an original field from the events. In which case you can simply add "server_load > 80" as part of your base search.
<base search> server_load > 80 | table <your fields>
Brilliant, I'll note this one down for future use.
Thanks a bunch!