Table Sizes

%3CLINGO-SUB%20id%3D%22lingo-sub-1872020%22%20slang%3D%22en-US%22%3ETable%20Sizes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1872020%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20view%20the%20table%20size%2C%20i.e.%20if%20I%20ran%3C%2FP%3E%3CP%3ESigninlogs%3C%2FP%3E%3CP%3E%7C%20count%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInstead%20of%20getting%20the%20number%20of%20events%2CI%20would%20get%20120mb%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advanced%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1872415%22%20slang%3D%22en-US%22%3ERe%3A%20Table%20Sizes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1872415%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F864036%22%20target%3D%22_blank%22%3E%40superjay%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-cpp%22%3E%3CCODE%3ESigninLogs%0A%7C%20summarize%20count()%2C%20MBytes%20%3D%20sum(_BilledSize)%20%2F%20(1024*1024)%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CDIV%3E%0A%3CTABLE%20cellspacing%3D%221%22%20cellpadding%3D%225%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTH%3Ecount_%3C%2FTH%3E%0A%3CTH%3EMBytes%3C%2FTH%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%3E325%3C%2FTD%3E%0A%3CTD%3E1.4729270935058594%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FDIV%3E%0A%3CP%3Eand%20my%20workbook%20would%20do%20this%20for%20you%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FCliveW-MSFT%2FKQLpublic%2Ftree%2Fmaster%2FKQL%2FWorkbooks%2FWorkspaceUsage%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FCliveW-MSFT%2FKQLpublic%2Ftree%2Fmaster%2FKQL%2FWorkbooks%2FWorkspaceUsage%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1873124%22%20slang%3D%22en-US%22%3ERe%3A%20Table%20Sizes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1873124%22%20slang%3D%22en-US%22%3EThanks%20Clive!%20Works%20great!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1895174%22%20slang%3D%22en-US%22%3ERe%3A%20Table%20Sizes%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1895174%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F864036%22%20target%3D%22_blank%22%3E%40superjay%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInstead%20you%20can%20use%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3ESigninlogs%7C%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3Esummarize%3C%2FSPAN%3E%3CSPAN%3E%20Total%3Dsum%3C%2FSPAN%3E%3CSPAN%3E(%3C%2FSPAN%3E%3CSPAN%3Eestimate_data_size%3C%2FSPAN%3E%3CSPAN%3E(%3C%2FSPAN%3E%3CSPAN%3E*%3C%2FSPAN%3E%3CSPAN%3E))%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%3C%2FSPAN%3E%3CSPAN%3Eproject%3C%2FSPAN%3E%3CSPAN%3E%20format_bytes%3C%2FSPAN%3E%3CSPAN%3E(%3C%2FSPAN%3E%3CSPAN%3ETotal%3C%2FSPAN%3E%3CSPAN%3E)%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi all, 

 

Is there a way to view the table size, i.e. if I ran

Signinlogs

| count

 

Instead of getting the number of events,I would get 120mb 

 

Thanks in advanced

3 Replies

@superjay 

SigninLogs
| summarize count(), MBytes = sum(_BilledSize) / (1024*1024)

 

count_ MBytes
325 1.4729270935058594

 

 

and my workbook would do this for you https://github.com/CliveW-MSFT/KQLpublic/tree/master/KQL/Workbooks/WorkspaceUsage

Thanks Clive! Works great!

@superjay 

Instead you can use 

Signinlogs|
summarize Total=sum(estimate_data_size(*))
|project format_bytes(Total)