kql

kql

Is there an option on KustoExplorer so I can write my dates with UK format?

Use KQL query to return a list of column names

Can i use invoke on stored tabular function in Log Analytics?

Group matching timestamps into buckets and summarize count

Defender KQL to show blocked Bluetooth Devices with all relevant fields

IFF function in KQL azure analytics?

KQL - Remove Characters from String

KQL :: return only tags with more than 4 records

Kusto: How to transform a table to a table where columns and rows are defined by unique values of two columns?

Self-join Kusto Query in Analytics Rule

Cleaning up raw syslog events coming into Sentinel - json/string

Render a chart for incidences based on Age

Using watchlist value without Search Key

Azure Log Analytics Cross-Workspace using watchlist

KQL summarize by count and then filter

Display most recent data using kusto query

Set automatic date and time in json using kql or anything

KQL Regex Extraction for a string

KQL - Check value every hour to see if it's higher than the week average

How to get the latest row per value?

How can I find last time an azure function was executed in log analytics workspace?

Is there a way to get Kusto explorer to make a sound once my query finishes running?

KQL - Searching in lists/strings

KQL query to take a table with a field with array data and break out each value in the array

Filter in KQL arrays

MS Sentinel KQL - Unable to perform string match on decoded base 64 data [duplicate]

KQL query for azure disk free space in GB and free disk percentage using Insights

Why Microsoft invented KQL rather than using SQL for Azure Data Explorer

Kusto | calculate percentage grouped by 2 columns

How to extract first element from a JSON structure in KQL?

How to summarize data by month?

KQL Remove from array if array item contains equals condition

Group data using list KQL

Compare two arrays of strings - KQL

KQL: How to put unique values from a column as names of columns

Don't return batch in the results

How to expand this dynamic column with only 1 value

How to pass column name to toscalar function?

Kusto Query Language - Microsoft Defender IP Subnet Query

How do I specify minutes range between 55 and 60 (both inclusive) in kusto

Azure AlertRule queries sometimes changes query

Is it possible to automatically update rule analytics on Sentinel?

How to query nested object in kusto?

merge rows with the same timestamp into new column values

How would I remove specific words or text from KQL query?

Microsoft Sentinel - Map ResourceGroup in Analytics Rules

How do I compare current diskspace with previous days diskspace in KQL

Deduping to newest items in a time bucket for time series

KQL summarize by count then take those with a count above x

create an array of strings from and existing array keys

How to filter by Azure Storage Account Container using KQL?

KQL string function not parsing all characters

Is it possible to rename a column that contains special signs and numbers in microsoft azure in KQL?

How to use KQL to format datetime stamp in 'yyyy-MM-ddTHH:mm:ss.fffZ'?

KQL Query for creating domain list from UserPrincipalName

'extend' operator: Failed to resolve scalar expression named 'd'

Combine KQL Queries into a single query

What is a straightforward way to parse hierarchical namespaces for filenames in Azure Storage Uri's using KQL?

KQL return Security Event ID's and their count by computer

Kusto error - has_any(): failed to cast argument 2 to scalar constant

page:1 of 3 next page main page

Categories

spartacus-storefront

skype-for-business

azure-container-service

string-aggregation

azure-storage-queues

firebase-dynamic-links

azure-backup-vault

rethinkdb-python

laravel-fortify

netbeans-plugins

attention-model

asynchronous-postback

game-center-leaderboard

ninject.web.mvc

manifest-merging

pointer-to-array

Resources