The Execute Direct Query event has a duration of 2.1 seconds – meaning that again there is a gap to be explained, a gap where ...
You can use sqltop or Kibana to analyze these data. $ sqlmon \ --ss-address sql.example.com \ --ss-user sa \ --ss-password p@ssw0rd \ --es-address elasticsearch ...