Jan 10 2022 06:56 AM
Hello,
I have a query that checks how many logs appear in log analytics but when are no logs I need 0 value but there probably is null. I need two information numbers of logs and the name of the device. What the correct query should look like?
Heartbeat
| where TimeGenerated > ago(12h)
| where Computer contains "devicename"
| summarize Count = count() by Computer
| project Value = iff(isnull(Count), 0, Count), Computer
Jan 11 2022 09:17 AM