Visualization- DefenderMachineGroups.md

Visualize the devices in the defined machinegroups

In order to get results the device groups need to be defined: MS Documentation

Defender For Endpoint

DeviceInfo
| summarize dcount(DeviceName) by MachineGroup
| sort by dcount_DeviceName
| render columnchart with(title="Total Devices by MachineGroup")

Sentinel

DeviceInfo
| summarize dcount(DeviceName) by MachineGroup
| sort by dcount_DeviceName
| render columnchart with(title="Total Devices by MachineGroup")