

Let's see practically so that it gets into our minds easily. We can use this keyword not only for "TimeGenerated" but to any column which is required.Įxtend command lets us create new columns within the output. Here, ''ago'' mainly says that whatever the current date and time is I want you to go back in x quantity. However, rather than looking for columns like above Search keyword for a specific value, we can use this to limit based upon one or more conditions.įor almost every table in either in Log Analytics or Application Insights, there would be a column "TimeGenerated", means when that particular row got inserted in the table. This is another popular keyword in KQL which is more or similar to "Select" in SQL. Still, there are many interesting ways we can make use of the ''search'' keyword, but I have mentioned only a few to get started. And we can also search for a word ending too, vice-versa like below. PerfĪs the statement itself easily says that if we want to search for data that start with any word, then we can do it in the above way. This symbol " : " here is just like " % " in SQL, which means it will retrieve all the values which contain the asked word in Database. Nevertheless, ‘Search’ keyword can be used in multiple ways in KQL which are shown below briefly. We can add multiple statements together by piping the data. So the query above takes all the rows in the Perf table and pipes them through the search statement to search for the specific given word in the entire table. Now, we are ready to understand what the above basic KQL query means. The pipe symbol basically means to send all the data to the next command.


This symbol ' | ' is called a pipe which we use for all queries in KQL. And we are trying to search for the word "virtual machines". Let's see a basic example of how the 'Search' command works. This article mainly constitutes the 5 most used commands in KQL.Īs the name itself suggests, it is used to search any word in one or more tables/columns. Microsoft has given us a great availability to practice KQL with the demo platform, where we can easily practice and acquire skills on KQL. If we are a bit familiar with Structured Query Language, then we can easily get our feet wet with KQL too. KQL, it sounds somewhat similar to SQL, right?! Yes, even the queries are also quite relatable to SQL. Like this, KQL can be used in many of the Azure Services. App Insights is also a great feature for Web Developers who are building and managing the application on multiple platforms. With the help of KQL, we can quickly analyze our Azure logs to look for trends, issues, and gain further insights for our Azure Services. KQL can be used on multiple platforms in Azure one of which is Azure Log Analytics, which is an overall monitoring solution to get insights about systems availability performance. It is mainly used to query big datasets in Kusto Engine.
