Query Details
//Enrollment Success by Enrollment Type IntuneOperationalLogs | where OperationName == "Enrollment" | where Result == "Success" | extend myJson=todynamic(Properties) | extend EnrollmentType = tostring(myJson ["EnrollmentType"]) | summarize OperationCount=count() by EnrollmentType | sort by OperationCount desc
This query is looking at operational logs in Intune and filtering for successful enrollment operations. It then converts the properties into a dynamic object and extracts the enrollment type. The query then summarizes the count of operations for each enrollment type and sorts them in descending order.

Rod Trent
Released: July 10, 2020
Tables
Keywords
Operators