KQL Search

Query Details

Intune Activity Types

Query

//Activity Types
IntuneAuditLogs
| summarize OperationCount=count() by OperationName 
| sort by OperationCount desc

Explanation

This query is counting the number of operations for each operation name in the IntuneAuditLogs and then sorting them in descending order based on the count.