Forum Discussion

ZenderBing's avatar
ZenderBing
Copper Contributor
Mar 20, 2020

Log Analytics : Active Session count

I have enabled the Terminal Service\Active Sessions from the Advanced Settings.

 

I need to query around the Remote Desktop Sessions but not able to figure out where. Specifically looking for maximum active session, in lets say, last 24 hours. How do I go about it.

 

Please help. Thanks.

  • ZenderBing's avatar
    ZenderBing
    Copper Contributor

    Nevermind.

     

    I was able to get the query to get the desired results. It’d look something like this:

     

    Perf

    | where Computer contains "XXX" or Computer contains "XXX" and CounterName == "Active Sessions"

    | summarize MaxSessionCount=max(CounterValue) by Computer, bin(TimeGenerated, 1d)

     

     

    Computer

    TimeGenerated

    MaxSessionCount

    xxx

    2020-03-19T00:00:00Z

    9

    xxx

    2020-03-19T00:00:00Z

    3

    xxx

    2020-03-20T00:00:00Z

    12

    xxx

    2020-03-20T00:00:00Z

    2

     

    Thanks to genius friend Shawn Davies 

Resources