Forum Discussion
Onboarded
I would like to know how many new devices were onboarded today. Could you please provide this information, possibly through QKL or any other available means?
purskii Hi, if you are referring to Defender for Endpoint you can use this:
DeviceInfo
| where FirstSeen >= startofday(now())
| summarize OnboardedDevices = count()Hi,
To find out how many new devices were onboarded today, you can use Microsoft Defender for Endpoint with Advanced Hunting queries in KQL.
DeviceEvents
| where ActionType == "OnboardingStatus"
| where DeviceOnboardingStatus == "Onboarded"
| where Timestamp >= startofday(now()) and Timestamp < endofday(now())
| summarize OnboardedDevices = count()
Best Regards,Ali Koc
