New to KQL and Azure. Is there a basic KQL to test functionality

[runatyr]

Good morning Dynatrac-ians ! 😁

I am in the process of leveraging an extenstion in dyantrace manged that connects to Azure and is capable of executing a Kusto Query from Azure.

So, my challenge is... I still a novice when it comes to Azure and KQL.

Does anyone know of a basic KQL command in Azure I could run against the simplest thing to prove it works in Azure before I try it through the Dynatrace extension?

Anything really... the more generic and universal the better!

Thank you as always community!

-runatyr

[kayjayeff1]

There are lots of options.  Here is a query I run to retrieve a list of tables in our Log Analytics Workspace and the last time a log was inserted.

search * | summarize LastLog=max(TimeGenerated) by $table | sort by LastLog asc

[runatyr]

I think I found the space to run this from... I had to select KQL in the far right.

Is this what you would anticipate?

[kayjayeff1 · Accepted solution]

yes those are the results I would expect from that query.  That query is doing summarization of data.  If you want actual log entries pick one of the table names that is the output of the above KQL.

for example this will return all logs from AppRequests for the last hour

AppRequests
| where TimeGenerated >= ago(1h)