Get the latest record per category #arg_max Get the latest AzureDiagnostics' record in each unique category AzureDiagnostics | where TimeGenerated > ago(1d) | summarize arg_max(TimeGenerated, *) by Category