I want do an equivalent of the following SQL query -
(roughly)
SELECT
Name,
application_Version
Rank() OVER (PARTITION BY application_Version ORDER BY CountOfEventNamePerVersion)
FROM
customEvents
Assuming I get the CountOfCompanyPerVersion
field easily. I want to do the same using AIQL but I'm not able to do this. Here's a query that I am tried -
customEvents
| summarize count() by name, application_Version
| project name, application_Version, count_
| summarize x = count(count_) by application_Version
| where x = count_
Basically I want to get the most common Name per application_Version. How can I do this?
arg_max should do the trick: