An analyst wants the number of matching events per account. Which KQL pattern fits?

Published
  1. project AccountName
  2. take 1
  3. distinct AccountName
  4. summarize EventCount = count() by AccountName

Comments — 0