Hi all, how can i limit this search query to the top 5 rows?
eventtype="searchDC" Type="Audit Success" CategoryString="Logon/Logoff" Message="Logon attempt using explicit credentials*" success User_Name="*" |stats count by Target_User_Name | sort by count desc
thanks
Try
| head 5
thanks a lot! bye