Create NoNewOpenIncidents24hrs.txt

samitks77 · Nov 4, 2021 · fa97c6c · fa97c6c
1 parent 50d381e
commit fa97c6c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/NoNewOpenIncidents24hrs.txt b/NoNewOpenIncidents24hrs.txt
@@ -0,0 +1,7 @@
+//Number of new, open Incidents in the last 24 hours
+
+SecurityIncident
+| where TimeGenerated > ago(1d)
+| summarize arg_max(TimeGenerated, Status, Severity, Owner, AdditionalData) by IncidentNumber
+| where Status == "New"
+| summarize count() by Status