Forum Discussion
ScottAllison
Oct 05, 2018Iron Contributor
Last 3 values for multiple categories
All, I'm trying to get the last three values of a dataset by a particular category, and I am having trouble figuring out the best way to do this. I have the following columns: TimeGenerated Mo...
Meir_Mendelovich
Microsoft
Oct 07, 2018Hi Scott,
We have the arg_max() function but it returns only a single raw per each aggregation value.
For example:
… | summarize arg_max(TimeGenerated, *) by SiteName, MonitorName
Hope it helps,
Meir :->