azure-data-explorer Questions

3

Solved

Kusto provides functions to get the start- and end-day of the week. These are invoked through startofweek() and endofweek(). startofweek() returns Sunday, and endofweek() returns Saturday. In some...
Thickhead asked 12/6, 2020 at 10:43

5

Solved

Is it possible to update rows in Azure Data Explorer? Is it a good choice for storing large inventory (100M items) that are updated frequently or it is mostly optimized to append-only data scenar...
Satori asked 23/1, 2020 at 16:30

2

Solved

I ve been through the official doc of Sort and Order. But there isn't a clear difference on what sort and order does differently. Just wanted to confirm if they are one and the same.
Bilbrey asked 14/6, 2020 at 2:0

3

Solved

If I have a string for example: "this.is.a.string.and.I.need.the.last.part" I am trying to get the last part of the string after the last ".", which in this case is "part&q...
Grenadines asked 16/9, 2020 at 9:33

2

Solved

I have a Java application that sends log4j2 logs to App Insights. When logging an exception I basically pass a JSON in string format and the exception something like this JSONObject json=new JSONO...
Dowski asked 28/5, 2020 at 22:38

2

Solved

I have an ADF which writes output of a Kusto Function to a Kusto Table daily. I need to upsert the data daily into the table. I did not find a way to update the existing data in Kusto DB. Is there ...
Hagerman asked 24/7, 2019 at 7:43

3

Can someone tell me why this Kusto statement in Log Analytics fails with "no tabular statement found"? let eventcnt = Event | where TimeGenerated > ago(10m) I can run this query and a table o...
Morel asked 5/6, 2020 at 20:10

2

I have a column with a string representing a datetime, where the month name is 3 letters, and there's the time zone info. How do I convert it into a datetime? "Jul 13 2020 23:05:58 GMT" -...
Cesena asked 19/7, 2020 at 23:19

1

I am struggling to find that in the list of scalar functions. Is there something more convenient that strcat() for string formatting in Kusto?
Obau asked 29/4, 2022 at 6:7

3

Solved

Below is a quick and unglamorous solution. If you have a better one, please include it in your answer. let tree_height = 15; range i from -1 to tree_height * 2 step 2 | extend side_width = tree_hei...

3

Solved

In terms of performance, is the following query ResourceEvents | where ResourceType == "Foo" and EventType == "Bar" practically the same as ResourceEvents | where ResourceType ...
Chloric asked 27/5, 2022 at 15:48

2

Solved

I am having the following problem and an extensive search online didn't provide any good results. When trying to access my Azure Data Explorer Database and querying using the Kusto.Data SDK in an A...
Dollhouse asked 3/8, 2022 at 8:32

2

Solved

I am using make-series to create an error dashboard showing events over a given period at a specified interval like so: make-series dcount(id) default=0 on timestamp from ago(30d) to now() step 8h...

2

Solved

I have a set of telemetry data stored in a table in the below format. Lets call this table as RawTelemetryData device_id TIME ABC DEF GHI LMN 123 2021-04-20 00:00:00.0000000 1 2 3 4 121 2...
Remunerate asked 5/5, 2021 at 5:39

2

Solved

I wanted to extract the time in minutes for a Kusto query I was working on. I have a cloumn where timespan is represented in the following format (HH:MM:SS.MilliSeconds) 01:18:54.0637555. I wanted ...
Plunkett asked 30/3, 2021 at 11:9

1

Solved

I have a table which I would like to get the latest entry for each group using Kusto Query Language. Here's the table: DocumentStatusLogs ID DocumentID Status DateCreated 2 1 S1 7/29/2011 ...

1

Solved

Say I have a table like this data = (Name:string, Team:string)[ "Toma","Team1", "Tomb","Team2", "Tomc","Team3", "Tomd",&quo...
Alta asked 23/2, 2022 at 6:19

2

I have a Kusto chart that has Legend with the Variable name (Platform) from the Query. I would like to remove the additional text from this Legend. I did some research and was able to see similar r...
Delacruz asked 5/10, 2021 at 5:1

1

Solved

I am trying to write a Kusto query, where I have a bool variable and based on that variable I want to call different functions. For example: let flag = true; let result = iff(flag == "true&quo...
Killian asked 6/1, 2022 at 11:23

2

Solved

I am looking at Azure log analytics for a web app, and I have multiple out-of-the-box "tables" containing data: traces, requests, exceptions, etc. Can I construct a query that runs on data from mu...
Yemen asked 29/10, 2019 at 21:52

1

Solved

I'm new to Kusto/KQL but experienced in T-SQL. I am trying to get a list of exceptions, group them by type, add a count, and order by that count descending. In SQL it would be: SELECT Type, COUNT(T...
Proficiency asked 15/12, 2021 at 10:18

1

Solved

Suppose I have a table like the following in Azure Data Explorer: let data = datatable(id:int, dateTime:datetime) [ 1,"2021-03-03", 1,"2021-03-04", 1,"2021-03-12", ...
Rueful asked 9/9, 2021 at 19:35

2

Solved

Update July 13, 2021 The links used below are now partially obsolete. Here is the new section on language differences. Original post On Azure Portal, in my App Insights / Logs view, I can query the...

1

Solved

I want to scale a data series on a time chart so that it is visible with the other series. The first two series represent successfully and failed requests with the 3rd series representing a customE...
Chemoprophylaxis asked 2/5, 2019 at 0:14

1

I have a string column which includes "," delimiter, I want to split this column into multiple rows. Here's the table |Token |Shop| |a |P | |A10,A9a,C1a,F1 |R | Expected Output: |Token |...
Debunk asked 24/6, 2021 at 16:39

© 2022 - 2024 — McMap. All rights reserved.