I've got an issue that I cannot make sense of. The objective for us is pretty straightforward: We have an ADLS Gen2 storage account that has JSON files stored on it We have a Fabric Eventhouse (KQL) database setup We…
I hope somebody can help me with a tricky Kusto query. I have the following dataset, which contains events raised by user, where events are represented with event code: datatable(CreatedDate:datetime, User:string, EventCode:string) [ datetime(4-22-2024 12:44:02.750 PM), "user1", "TS", datetime(4-23-2024 4:09:30.551…
There are common ways to handle dup data as described Here But I'm looking for more options. Thanks I have tried the options from here https://learn.microsoft.com/en-us/azure/data-explorer/dealing-with-duplicates and was looking into unique hashed row approach or a policy which triggers the…
I've got a KQL query, and I want to strip out the last row of data. However, the number of rows returned is variable, so I can't use take (aka limit) because I don't know what number to pass it.…
I have an ADF pipeline to copy data from ADLS to Data Explorer(ADX). I am reading all the data and able to copy to ADX. Problem is that every time my pipeline runs and ingest data the ADX table gets…
I am using lightIngest to ingest data from my blob in Azure to Azure Data Explorer. I am having the Storage Blob Data Reader role assignment under my Azure Data Explorer Cluster. I am able to read and list the…
in the Pipeline Expression builder I want to run one command to ingest data into different tables. How is that possible? Below would be two commands who would work on its own, but I want to combine them and run…
Given Kusto query Table | where type == "TYPE" | summarize lastEventTime = arg_max(lastEvent, *), vmCount = count(), onboardedCount = countif(onboarded), failVM = make_list_if(entity, onboarded == false and isnotempty(entity)), allVM = make_set(entity) by environmentType, osType, id , type Now I…
Perhaps not the best question title but I believe my issue is simple enough. I'm new to KQL and what I'm trying to achieve is to generate a time series with some aggregation of a value per day. It works…
I get the following data from a query: Service 201 202 401 // 402 etc A 100 50 20 C 25 0 0 The columns are dynamic. It sometimes there can be just 201, sometimes 200, 201, 202, 204, etc…