Forum Discussion
Preben902
Dec 12, 2019Copper Contributor
Compare count of errors in last 12h against last multiple periods of 12h
I have a set of VMs that generate errors. I want a query to return a result if the last 12 hours has generated more errors than the last multiple periods of 12 hours. Event| where TimeGenerated ...