How to join events for conditional statements

[josefa123]

I have a DeviceA that I am monitoring. There are cpu and ram. Metrics are on different event (cpu has its own event and also RAM). how can I put it in a where clause. For example | where cpu_load < 50 and Ram <50. If I run the search with | table cpu_load RAM_load it displays two event with one value at the cpu and one value at RAM. how can I combine it in just one record or event? Thanks

[woodcock]

You can do this (Note that it is AND, not and😞

 | where cpu_load < 50 AND Ram < 50

Also:

table cpu_load RAM_load | stats first * AS *