Subs Created Per Hour
Query
//Counts the number of subscription creation events per hour and returns a table with two columns: TimeGenerated and count_.
AzureActivity
| where OperationNameValue == "Microsoft.Resources/subscriptions/write"
| summarize count() by bin(TimeGenerated, 1h)Explanation
This query counts the number of subscription creation events per hour and displays the results in a table with two columns: TimeGenerated and count_.