This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 19%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Hello, I'm trying to find a way to enter the number of lines a KQL query in each row of the results in Microsoft Sentinel. This would be equivalent to having count() on each line. Thank you in advance for any help you can provide. | MachineName|IP|NumberOfMachines| | -------- | -------- | -------- | |Homer |192.168.1.100|3| |Marge |192.166.1.101|3| |Lisa|192.168.102|3|
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
Sorry, can you clarify the questions please?
datatable (MachineName:string,IP:string,NumberOfMachines:int)
[
"Homer" ,"192.168.1.100",3,
"Marge" ,"192.166.1.101",3,
"Lisa","192.168.102",3]
I think your data looks like this above example, and displays like the below screenshot?
What part are you trying to count?
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more