I have a first KQL query that returns a list of domain names, and then I want to use these to filter another KQL query. I just can't figure out the syntax to do it. Is there a way to…
I have a Kusto query that will output for me processes from my VMs (whether they are stopped or not). Here is the query: ConfigurationData | project Computer, SvcName, SvcDisplayName, SvcState, TimeGenerated, _ResourceId | distinct Computer, SvcName, SvcDisplayName, SvcState, TimeGenerated…
We are creating a dashboard that shows us number of exception on a given system over a time window - specifically, the last 24 hours. The graph looks like this: If you look closely though, the last bar is a…
I have a Kusto query taken from this example that looks like this: Resources | where type =~ 'microsoft.compute/virtualmachines' | extend vmPowerState = tostring(properties.extended.instanceView.powerState.code) | summarize count() by vmPowerState I would like to create an weekly alert that send the…
i have a Question about an KQL Query. I would like to restrict the Query only of the Work Days from Monday to Friday. How can i build this in KQL Query? Thanks a lot. A short Edit: How can…
i have a Question about a Query in KQL. I would like to use a Time at the KQL Query who only shows me the Results between 08:00 and 17:00 Time. How can i build these at the KQL Query?…
I am trying to create a query that will show me the missing critical updates and security updates on VM but only from 15days ago and longer but not within 15days. So I have created this query... Update | where…
I need to get the category name from category id using kusto query. First i have got the most searched url from the website using the below kusto query and ran it in app insights logs Requests | where resultCode==200…
I am new to KQL, so bare with me. My goal is to search through the "Microsoft.Cdn/Profiles/AccessLog/Write" and first filter down to distinct IP address. I have figured out what values in the userAgent_s column that will tell me what…
I'm trying to query my customlogs table (Eg: CustomData_CL) by giving the time range. The result of this query will be the filtered time ranged data. I want to find out the data size of the resulted output. Query which…