Log Analytics : Active Session count

New Contributor

I have enabled the Terminal Service\Active Sessions from the Advanced Settings.

 

I need to query around the Remote Desktop Sessions but not able to figure out where. Specifically looking for maximum active session, in lets say, last 24 hours. How do I go about it.

 

Please help. Thanks.

1 Reply

Nevermind.

 

I was able to get the query to get the desired results. It’d look something like this:

 

Perf

| where Computer contains "XXX" or Computer contains "XXX" and CounterName == "Active Sessions"

| summarize MaxSessionCount=max(CounterValue) by Computer, bin(TimeGenerated, 1d)

 

 

Computer

TimeGenerated

MaxSessionCount

xxx

2020-03-19T00:00:00Z

9

xxx

2020-03-19T00:00:00Z

3

xxx

2020-03-20T00:00:00Z

12

xxx

2020-03-20T00:00:00Z

2

 

Thanks to genius friend @Shawn Davies