SonicWallCoverage_CL
| where scope_id=="sonicwall-20261107-v6"
| summarize raw_records=sum(raw_records),raw_expected_records=sum(raw_expected_records),targeted_messages=sum(targeted_messages),excluded_records=sum(excluded_records),unrecognized_records=sum(unrecognized_records),normalized_matches=sum(normalized_matches),timestamp_gaps=sum(timestamp_gaps),mapping_gaps=sum(mapping_gaps),manifest_gaps=sum(manifest_gaps),binding_not_applicable=sum(binding_not_applicable),h1_gap=sum(h1_gap),h2_gap=sum(h2_gap),h3_gap=sum(h3_gap),h4_gap=sum(h4_gap) by snapshot_id,coverage_source
