Get the latest heartbeat record per computer IP #arg_max This example returns the last heartbeat record for each computer IP. Heartbeat | summarize arg_max(TimeGenerated, *) by ComputerIP