Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Query Azure Virtual Desktop (AVD) connection logs for client versions used by users over time
let startTime = ago(30d);
| where TimeGenerated > startTime
| summarize min(TimeGenerated), max(TimeGenerated) by UserName, ClientOS, ClientType, ClientVersion
| sort by UserName, min_TimeGenerated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment