如何获取与给定日期的最高会话数相关的记录

Question

我有一个 App Insights table 如下所示，预期输出是：需要 select processDate 及其相关字段，该字段在当天具有最高的 sessionCount 聚合值（黄色突出显示的行是预期结果）

let da = datatable(id:int, processDate:datetime, message:string,col:string, sessionCount:int)
    [
        1,"2021-03-03 12:00:00", "a","aa",2,
        1,"2021-03-03 12:00:00", "a","aa2",8,
        1,"2021-03-03 09:00:00", "g","gg",20,
        1,"2021-03-03 09:00:00", "g","g1",3,
        1,"2021-03-03 15:00:00", "b","bb",9,
        1,"2021-03-03 15:00:00", "b","bb1",1,
        2,"2021-03-07 21:00:00", "f","ff",6,
        2,"2021-03-07 21:00:00", "f","ff",2,
        2,"2021-03-07 21:00:00", "abc","faf",21,
        2,"2021-03-07 22:00:00", "abc","fav",25,
        2,"2021-03-07 22:00:00", "z","zz",9
    ];
    
    da 
    | summarize maxsessionCountperRun = sum(sessionCount) by  processDate  
;

预期结果如下

Answer 1

let da = datatable(id:int, processDate:datetime, message:string,col:string, sessionCount:int)
    [
        1,"2021-03-03 12:00:00", "a","aa",2,
        1,"2021-03-03 12:00:00", "a","aa2",8,
        1,"2021-03-03 09:00:00", "g","gg",20,
        1,"2021-03-03 09:00:00", "g","g1",3,
        1,"2021-03-03 15:00:00", "b","bb",9,
        1,"2021-03-03 15:00:00", "b","bb1",1,
        2,"2021-03-07 21:00:00", "f","ff",6,
        2,"2021-03-07 21:00:00", "f","ff",2,
        2,"2021-03-07 21:00:00", "abc","faf",21,
        2,"2021-03-07 22:00:00", "abc","fav",25,
        2,"2021-03-07 22:00:00", "z","zz",9
    ];
da
| summarize sum(sessionCount) by processDate  
| summarize arg_max(sum_sessionCount, processDate) by processDate_day = bin(processDate,1d) 
| project-away processDate_day

sum_sessionCount	processDate
23	2021-03-03T09:00:00Z
34	2021-03-07T22:00:00Z

Fiddle

如何获取与给定日期的最高会话数相关的记录

How to get records related to highest sessioncount in a given day

kql

azure-data-explorer