Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to get sum() by Column by Date in Kusto

I want to have a report with a metrics of sum by count by some column by date in LogAnalytics.

So far I could use -

Perf
| summarize sum(CounterValue) by TimeGenerated, Computer

which gives me below result in screenshot. But I want in a format per day. Something like -

Date,Computer,sum_Count
01-17-2020,ABC,100
01-16-2020,ABC,132
01-17-2020,XYZ,700
01-16-2020,XYZ,800

enter image description here

like image 889
Anirban Nag 'tintinmj' Avatar asked Sep 01 '25 02:09

Anirban Nag 'tintinmj'


1 Answers

try using startofday():

Perf
| summarize sum(CounterValue) by startofday(TimeGenerated), Computer

or bin():

Perf
| summarize sum(CounterValue) by bin(TimeGenerated, 1d), Computer
like image 100
Yoni L. Avatar answered Sep 03 '25 00:09

Yoni L.