A KQL Events table has Timestamp and Service. You need event counts by service for the last hour. Which query fits?

1. Events | project Service
2. Events | take 1
3. Events | summarize Events=count()
4. Events | where Timestamp > ago(1h) | summarize Events=count() by Service