Security Log File Cleared
Query
//Computers where the Security log file has been cleared
search in (SecurityEvent) EventID == 1102
| summarize LogClearedCount = count() by Computer | limit 500000Explanation
This query searches for computers where the Security log file has been cleared. It counts the number of times the log file has been cleared for each computer and limits the results to 500,000.