Jul 25 2018
Need some help with query WireData, need to get a total number of TotalBytes in 1 row.
I did something like this but the count is wrong or maybe I'm doing something wrong.
Aug 16 2018
Aug 20 2018
Your solution makes sense, but will only return you the results from the last 5 minutes.
If you'd like to see that total number per 5 minutes, I'd recommend using
| summarize sum(TotalBytes) by Computer, bin(TimeGenerated, 5m)
to see it as a chart, you can add '| render timechart' at the end, as shown here.