Query: Top 10 Actors

select
  authentication_info.principal_email as "Actor",
  count(*) as "Logs"
from
  gcp_audit_log
where
  authentication_info.principal_email is not null
group by
  authentication_info.principal_email
order by
  count(*) desc
limit 10;