NQL summarize

The summarize statement condenses the information into a single result.

Syntax

...
| summarize <new metric name> = <metric>.<aggregation function>

Examples

Compute the average value of the number of page views per device.

devices
| with web.page_views from Jun 1 to Jun 7
| compute num_navigations = number_of_page_views.sum()
| summarize average_num_navigation_per_device = num_navigations.avg()

Count the number of devices active in the last 7 days. In case of the count() aggregation function, you can omit the filed name before the aggregation to count the number of records of the root table.

devices during past 7d
| summarize number_of_devices = count()

Compute the total size of all the binaries.

binaries during past 7d
| summarize total_size = size.sum()