Forum Discussion
Joe_Lane
Dec 20, 2023Copper Contributor
KQL Query to summerize session counts over time
Hello folks,
I'm trying to find a "good" way to achieve what I think is a simple task but cannot think of a simple solution.
I have logs with session information, one entry per session
StartTime(datetime), EndTime(datetime), Duration(in seconds), Computer(string)
I want to count how many sessions are active for each 5 minute interval and graph that. Keep in mind, the sessions will overlap. I included a graphic of what I'm trying to do. With the result below
Which should return:
Time + 5, 1
Time + 10, 3
Time + 15, 3
Time + 20, 2
No RepliesBe the first to reply