🌴
🌴
🌴
🌴
The Amazing KQL
Search
⌃
K
The Amazing KQL
💠
KQL Quick Guide
Useful Resources 🔦
My favorites 😍
search
take
where
summarize
distinct
case
project
sort by
extend
extract
parse
stract
count
mv-expand
dcount
Create table
let
join
union
materialize
Need to practice more 🎯
Need to learn later 🐢
💻
Microsoft Endpoint Manager
Device Inventory
Powered By
GitBook
sort by
Sort the rows of the input table into order by one or more columns. Default is
descending order
🦄 Example: Intune audit log for the past 7 days
Sort by TimeGenerated column in ascending order.
IntuneAuditLogs
| where TimeGenerated > ago (7d)
| sort by TimeGenerated asc
Previous
project-keep
Next
extend
Last modified
10mo ago
