Is there an existing Expression to Azure Data Explorer (Kusto) query converter?

Is there an existing, preferably official, implementation of a tool that takes as input an Expression and converts it to Azure Data Explorer query? I am trying to avoid having to implement my own...

How to properly authenticate Kusto using a Python client?

I'm trying to test a connection between my node and Azure Data Explorer (ADX/ Kusto). I'm thinking to create a table on Kusto using a python script. Please be aware that I'm not very familiar with...

How to Partition Database Table in Azure Data Explorer?

I started exploring ADX a few days back. I imported my data from Azure SQL to ADX using ADF pipeline but when I query those data, it is taking a long time. To find out some workaround I researched...

Kusto Connection with cluster using C# {kusto.data}

I'm trying to establish connection to Azure DataExplorer cluster using C# .. I referenced the C# in https://docs.microsoft.com/en-us/azure/kusto/api/netfx/about-kusto-data and installed nuget...

Kusto Query, selecting an interval of 5 minutes and calculate the average

I'm fairly new to the Kusto Query language so perhaps this is something very common, but I really can't find my answer. So here goes. I've enabled performance gathering with Azure Log Analytics on...

Azure Data Explorer Kusto: group by with difference in datetime

Is there a way to find datetime difference grouping by a column in Data Explorer Kusto? I would like to find out total time spent by each traveler in Spain. A traveler is considered to be in a...

Azure Kusto Data Explorer - convert duration to days

Is there a way to find number of days from timespan? For example, time(00:00:00.2000000), time(00:30:30), time(01:00:00), time(413.00:00:00) should return 0, 0, 0, 413

Azure Kusto Data Explorer: combine rows by column

I am looking to update/extend column Process such that it reflects whether or not the Process has ended. For example, table below should return: Id Process 1 Completed 1 Completed 1 ...

How to get distinct count for each table by kusto (Azure Data Exploer)

I have lots of table with different name but with the same schema in a database such like: let _t1 = datatable(Guid:string, name:string) [ 'a00001','n1', 'a00001', 'n2', 'a00001', 'n1', 'a00002',...

Azure App Insights KQL - How can I perform an aggregate sum of nested data?

Azure Application Insights uses the Kusto Query Language (KQL) that is clearly quite powerful, but I cannot seem to get it to aggregate nested data. The best way to explain this is through an...

Generate unique string in Kusto - Azure Data Explorer

How can we generate a unique string in Kusto? For example, it could be equivalent to Guid.NewGuid method in C#.

make-series in kusto step 1 year

In Azure data explorer we have multi options of the timespan to use, which they are "day, minute, second ... etc). for example: we have a dataset which we want to step on it each year not a day or...

Azure Data Explorer / Kusto JSON Ingestion Transform (GetPathElement)

I have some troubles understanding the ingestion of JSON entries (from Event Hubs) into Kusto / ADX. I seem not to be able to get the GetPathElement transform statement to work. I'd expected that...

Replace NaN with null kusto

I have a problem with a kusto query and I need your help: I developed a query that results in a table with several columns. The problem is that sometimes some of these columns come with the NaN...

How to calculate time grain based on selected period from azure dashboard in a custom chart

While writing a kusto query to create a custom chart on my azure dashboard, I want to be able to calculate the time grain based on the period the user selected on the dashboard. For example: last...

Azure Data Explorer: Multi-Select Parameter "Select All" return all possible options instead

In Azure Data Explorer (dashboards, accessed via the web at the URL: dataexplorer.azure.com/dashboards/ ), a multi-select parameter will return empty (isempty() == true) if the "Select All" option...

Getting "Total number of messages on IoT hub exceeded the allocated quota" error even if usage is just 95.5KB

I am using free tier IoT hub . As per the document, https://azure.microsoft.com/en-in/pricing/details/iot-hub/ , the documentation of Azure says 'the messages sent by devices connected via the...

How to Provide Query Parameters For Azure Log Analytics REST API

I am using Azure Log Analytics REST API to query data from Azure Log Analytics workspace using the Kusto query language. Kusto provides a way to prevent query injection by using query parameters...

Unite multiple tables into a single one using union and a loop operator in Kusto

I am pretty new to Azure Data Explorer (Kusto) queries. I have a stored function, that takes a dateTime as a parameter, does some querying around that dateTime and return a data...

Azure Kusto Data Explorer - invoking multiple management queries at once

I want to run multiple alter-column commands at once (to save some time). For example, I have these 2 commands: .alter column e53b2c81_eb5c_45e4_9e5e_333332211111.name policy encoding...

Kusto/Azure Data Explorer - How can I partition an external table using a timespan field?

Hoping someone can help.. I am new to Kusto and have to get an external table reading data from an Azure Blob storage account working, but the one table I have is unique in that the data for the...

How to i expand JSON data in kusto/data explorer that has multiple layers?

I am trying to ingest JSON array data (specifically the 'Objects' array) into Azure data explorer, as per this Microsoft article. (Only the JSON Array...

Query Prometheus data using Kusto Query Language

I'm struggling trying to set up some Grafana dashboards using Prometheus data stored in Azure Monitor. So I have: An ASP.NET Core application running on AKS that exports Prometheus data via a...

Using apache-airflow-providers-snowflake on airflow (no module named Snowflake)

I have installed package apache-airflow-providers-snowflake on airflow on docker and i am getting error No module named Snowflake Please refer attachment (check the error mentioned for the...

Azure Sentinel Kusto query table with data from another query

I'm trying to find a way to use the Azure Sentinel to pull all DNS results to a domain based upon a Security Alert. Under the Security Alert table, they provide the domain name for an event as...

Fill empty fields with previous values in Kusto query in Azure Data Explorer

Background We have a dataset with the following format in Azure Data Explorer. sensorid timestamp value valve1 24-03-2021 123 valve1 23-03-2021 234 cylinderspeed ...

Is it possible to use a dynamic array/list as input for parameterizing a kusto query?

I have an application that uses the Python library azure.kusto.data to query data from a Kusto cluster. I'm wondering, is it possible to use a dynamic array as input for paramterizing a kusto...

How to I expand JSON data in kusto/data explorer that has nested data?

I am trying to ingest JSON array data into Azure data explorer, as per this Microsoft article. (Only the JSON Array section)...

Azure functions unable to import certain python packages

when using azure functions I have the problem that certain packages (e.g. azure.kusto.data) can not be installed from the init file. My init file looks like this: import datetime import...

How do you join two tables based on substring matches in Azure Data Explorer / Kusto?

I would like to create a resulting table from the joining of these two tables based on the cells in the Fruit having substring matches in the Things data table. let Fruit = datatable(fruit:string)...