DeviceProcessEvents
| where FileName contains "sqlservr.exe"
| join kind=inner (
    DeviceInfo
    | where OSPlatform contains "Server"
) on DeviceId
| summarize by DeviceId, DeviceName, OSPlatform

DeviceProcessEvents
| where InitiatingProcessFileName contains "sql"
| join kind=inner (
    DeviceInfo
    | where OSPlatform contains "Server"
) on DeviceId
| summarize by DeviceId, DeviceName, OSPlatform