This worked, thank you. Our final search looks like this now:
| from datamodel:"Change_Analysis"."Account_Management" | where result_id="4726" | where tag="delete"| stats max(_time) as "lastTime",latest(_raw) as "orig_raw",values(result) as "signature",values(src) as "src",values(dest) as "dest",count by "src_user","user" | where 'count'>0
... View more