Working with multiple dimensions

Using multiple dimensions, you can use expressions in the by clause to create multiple visualization rows, one for each combination of values:

  1. In the new query field in the Analytics portal, type the following query into the search field:
SecurityEvent| where TimeGenerated > ago(1d)| summarize count() by tostring(EventID), AccountType,bin(TimeGenerated, 1h)
  1. Click the Go button  in the upper right-hand corner of your screen to return a distribution of your data over the last day. By default, the results are displayed in a table.
  1. In the results pane, click Chart to view a multidimensional depiction of the ...

Get Microsoft Operations Management Suite Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial