KQL Search

Query Details

Direct Agent

Query

Heartbeat
| where Category == "Direct Agent"
| distinct Computer , Category , OSType , OSMajorVersion , OSMinorVersion

Explanation

This query selects the Heartbeat events where the Category is "Direct Agent" and retrieves unique values for the Computer, Category, OSType, OSMajorVersion, and OSMinorVersion fields.