title: Azure log analytics query to display computers if event count bigger than X
body: <p>I have past few hours trying to build query that shows/list computers which have generated over 10 events of specific id's. 
  E.g query list all computers that has occurred event 2222 but I would want to have query that would list computers only if it has reported e.g over 10 events of same id in past 48 hours. If none computer has reported over 10 events of specific id, then result is just empty.</p>
  
  <pre><code>Event | where Source contains "service" | where EventID == 2222
  </code></pre>
  
  <p>Another example which display results computers that has occurred event 2222 and how many times, but still missing that displaying results if count is bigger than 10.</p>
  
  <pre><code> Event
      | where Source contains "service"  | where EventID == 2222 
      | summarize count() by  Computer
  </code></pre>
  
  <p>Logic behind this would be to create some kinda alert. A single event is not alone important but if it occurs more then it start to matter. Any tips?</p>