I hope somebody can help me with a tricky Kusto query. I have the following dataset, which contains events raised by user, where events are represented with event code: datatable(CreatedDate:datetime, User:string, EventCode:string) [ datetime(4-22-2024 12:44:02.750 PM), "user1", "TS", datetime(4-23-2024 4:09:30.551…
When I go to the Azure portal to display the resources in the resource group, the list of types would look like: I ran the following Kusto query in the Azure Resource Graph Explorer to obtain the resources in the…
I get the following data from a query: Service 201 202 401 // 402 etc A 100 50 20 C 25 0 0 The columns are dynamic. It sometimes there can be just 201, sometimes 200, 201, 202, 204, etc…
Need some help with Kusto (Azure Data Explorer). Is it possible to convert this query into a materialized view? customobject | join kind=inner ( customobject | summarize max_dp_adf_copy_start_time = max(dp_adf_copy_start_time) by accountId, id ) on $left.accountId == $right.accountId and $left.id…
I try to access nested json in the Kusto query via KQL. But I realized that assignedTo and AssignedTo2 are empty.How can I get sub value in nested json via KQL ? this is my Kusto query : requests |…
Usage - List I'm trying to get Compute Usage List using KQL in Azure, you can find it in above link for reference. { "value": [ { "unit": "Count", "currentValue": 17, "limit": 19, "name": { "value": "aaaaaaaaaaaaaaaaaa", "localizedValue": "aaaaaaaaaaaaaa" }…
I need to save a output from a Kusto query on monitoring logs into a database table but I am unable to find a way to do it. I am presuming there will be a way to get the output…