Log Analytics : Active Session count

[ZenderBing]

I have enabled the Terminal Service\Active Sessions from the Advanced Settings.

I need to query around the Remote Desktop Sessions but not able to figure out where. Specifically looking for maximum active session, in lets say, last 24 hours. How do I go about it.

Please help. Thanks.

[#2]

Nevermind.

I was able to get the query to get the desired results. It’d look something like this:

Perf

| where Computer contains "XXX" or Computer contains "XXX" and CounterName == "Active Sessions"

| summarize MaxSessionCount=max(CounterValue) by Computer, bin(TimeGenerated, 1d)

Computer	TimeGenerated	MaxSessionCount
xxx	2020-03-19T00:00:00Z	9
xxx	2020-03-19T00:00:00Z	3
xxx	2020-03-20T00:00:00Z	12
xxx	2020-03-20T00:00:00Z	2

Thanks to genius friend @Shawn Davies