Based on the Microsoft documentation it is possible to query external data via KQL using "externaldata". I wanted to test it out and created a storage account and then simple table within (the table is in "Tables" not in "Containers")…
in the Pipeline Expression builder I want to run one command to ingest data into different tables. How is that possible? Below would be two commands who would work on its own, but I want to combine them and run…
Given Kusto query Table | where type == "TYPE" | summarize lastEventTime = arg_max(lastEvent, *), vmCount = count(), onboardedCount = countif(onboarded), failVM = make_list_if(entity, onboarded == false and isnotempty(entity)), allVM = make_set(entity) by environmentType, osType, id , type Now I…
I am writing the below code in KQL :- UserBaseTable | where RawData contains_cs "REF " I want the records which start with the string REF but when I run the above command I get records where in the "REF"…
Perhaps not the best question title but I believe my issue is simple enough. I'm new to KQL and what I'm trying to achieve is to generate a time series with some aggregation of a value per day. It works…
I get the following data from a query: Service 201 202 401 // 402 etc A 100 50 20 C 25 0 0 The columns are dynamic. It sometimes there can be just 201, sometimes 200, 201, 202, 204, etc…
I want to build a logic app that tells me when any of the logic apps in my environment fail or a connection is broken. (both manual triggers of logic apps and automated) The closest KQL i've found to achieve…
i am running a query on azure workbook that gives costs for on-demand and spot instances month to date within a number of resource groups. i want to have this data shown in bar chart as well where it could…
How can I have conditional parameter value in Azure Workbook? I want to have one parameter called environment. It has some text values. E.g. it has two values test and production. Also, I want to have two other parameters: subscription…
How can I find a specific element in a dynamic array in KQL? E.g. I have the json array (i.e. a string) [{"key": "foo", "val": "bar"}, {"key": "a", "val": "b"}] in KQL. Now I want to find out the value…