```kusto
let StartTimeGenerated = '2022-01-07 00:00:00';
let StopTimeGenerated = '2022-01-08 00:00:00';
let TimeOffset = '+8';
let StartTimeActual = todatetime(strcat(StartTimeGenerated, TimeOffset));
let StopTimeActual = todatetime(strcat(StopTimeGenerated, TimeOffset));
AzureDiagnostics
| where hostname_s contains 'host.com'
| make-series C=count() on TimeGenerated from StartTimeActual to StopTimeActual step 30m by clientIp_s
| render timechart
```
# Create time series on unique hostnames using local time
```kusto
let StartTimeGenerated = '2022-01-11 01:49:00';
let StopTimeGenerated = '2022-01-11 02:30:00';
let TimeOffset = '+8';
let StartTimeActual = todatetime(strcat(StartTimeGenerated, TimeOffset));
let StopTimeActual = todatetime(strcat(StopTimeGenerated, TimeOffset));
AzureDiagnostics
| where OperationName in ('ApplicationGatewayAccess', 'ApplicationGatewayFirewall')
| where Resource !~ 'something'
| make-series C=count() on TimeGenerated from StartTimeActual to StopTimeActual step 5m by hostname_s
| render timechart
```
# Extra resources
https://github.com/microsoft/MicrosoftDefenderForEndpoint-PowerBI/blob/master/TVM/TVM%20report%20templates%20June%202021/vulnerabilities_report_V6_full_dataset.pbit