KQL Search

Query Details

Direct Agent

Query

Heartbeat
| where Category == "Direct Agent"
| distinct Computer , Category , OSType , OSMajorVersion , OSMinorVersion

Explanation

This query selects the Heartbeat events where the Category is "Direct Agent" and retrieves unique values for the Computer, Category, OSType, OSMajorVersion, and OSMinorVersion fields.

Details

Rod Trent profile picture

Rod Trent

Released: March 26, 2020

Tables

Heartbeat

Keywords

HeartbeatCategoryDirect AgentComputerOSTypeOSMajorVersionOSMinorVersion

Operators

| where==distinct

Actions

GitHub