I am trying to get the event names in each department by Id. I tried with filters and othe but unable to get it. Any inputs?
>Solution :
you could try using the make_set() aggregation function.
for example:
T
| summarize make_set(Event) by DeptId, DeptName