Forum Discussion
ZenderBing
Mar 20, 2020Copper Contributor
Log Analytics : Active Session count
I have enabled the Terminal Service\Active Sessions from the Advanced Settings.
I need to query around the Remote Desktop Sessions but not able to figure out where. Specifically looking for maximum active session, in lets say, last 24 hours. How do I go about it.
Please help. Thanks.
- ZenderBingCopper Contributor
Nevermind.
I was able to get the query to get the desired results. It’d look something like this:
Perf
| where Computer contains "XXX" or Computer contains "XXX" and CounterName == "Active Sessions"
| summarize MaxSessionCount=max(CounterValue) by Computer, bin(TimeGenerated, 1d)
Computer
TimeGenerated
MaxSessionCount
xxx
2020-03-19T00:00:00Z
9
xxx
2020-03-19T00:00:00Z
3
xxx
2020-03-20T00:00:00Z
12
xxx
2020-03-20T00:00:00Z
2
Thanks to genius friend Shawn Davies