topic Re: New to KQL and Azure. Is there a basic KQL to test functionality in Cloud platforms

New to KQL and Azure. Is there a basic KQL to test functionality

runatyr — Mon, 03 Mar 2025 10:44:38 GMT

Good morning Dynatrac-ians ! 😁

I am in the process of leveraging an extenstion in dyantrace manged that connects to Azure and is capable of executing a Kusto Query from Azure.

So, my challenge is... I still a novice when it comes to Azure and KQL.

Does anyone know of a basic KQL command in Azure I could run against the simplest thing to prove it works in Azure before I try it through the Dynatrace extension?

Anything really... the more generic and universal the better!

Thank you as always community!

-runatyr

Re: New to KQL and Azure. Is there a basic KQL to test functionality

kayjayeff1 — Fri, 28 Feb 2025 15:39:03 GMT

There are lots of options. Here is a query I run to retrieve a list of tables in our Log Analytics Workspace and the last time a log was inserted.

search * | summarize LastLog=max(TimeGenerated) by $table | sort by LastLog asc

Re: New to KQL and Azure. Is there a basic KQL to test functionality

runatyr — Fri, 28 Feb 2025 16:51:49 GMT

I think I found the space to run this from... I had to select KQL in the far right.

Is this what you would anticipate?

Re: New to KQL and Azure. Is there a basic KQL to test functionality

kayjayeff1 — Fri, 28 Feb 2025 19:51:14 GMT

yes those are the results I would expect from that query. That query is doing summarization of data. If you want actual log entries pick one of the table names that is the output of the above KQL.

for example this will return all logs from AppRequests for the last hour

AppRequests
| where TimeGenerated >= ago(1h)