In terms of performance, is the following query
ResourceEvents
| where ResourceType == "Foo" and EventType == "Bar"
practically the same as
ResourceEvents
| where ResourceType == "Foo"
| where EventType == "Bar"
Or are the records filtered sequentially, performing two searches instead of one combined?
both options are equivalent in terms of semantics and performance