Exam SC-300 topic 4 question 51 discussion

SigninLogs | where ResultType == 0 | summarize login_count = count() by Identity | render columnchart To view and query the logs, you will need to open Log Analytics, click on your workspace and then click on the Logs page. Logs are queried using a language called Kusto Query Language (KQL). Kusto Query Language (KQL) is a powerful tool to explore your data and discover patterns, identify anomalies and outliers, create statistical modeling, and more. The query uses schema entities that are organized in a hierarchy similar to SQLs: databases, tables, and columns. ResultType - The result of the sign-in operation can be 0 for success or an error code for failure. In this question it shows successful logins. The summarize operator is essential to performing aggregations over your data. The summarize operator groups together rows based on the by clause and then uses the provided aggregation function to combine each group in a single row. Find the number of events by Identity using summarize with the count aggregation function. Render operator instructs the user agent to render a visualization of the query results. In this question, it uses column chart.

SigninLogs |where ResultType == 0 |summarize login_count = count() by Identity |render columnchart Test in my lab.

summarize login_count = count() by Identity render columnchart

this question was in exam SigninLogs | where ResultType == 0 | summarize login_count = count() by Identity | render columnchart

- Summarize - Render

Correct SigninLogs | where ResultType == 0 | summarize login_count = count() by Identity | render columnchart