Advanced Timeseries Analytics and Anomaly detection in Fabric Realtime Intelligence
Proposed session for SQLBits 2026TL; DR
As organizations move toward hyper-responsive operations, real-time detection of anomalies in time series data becomes critical. This session explores how Microsoft Fabric Real-Time Intelligence (RTI), powered by Kusto Query Language (KQL), enables scalable streaming analytics and built-in anomaly detection.
You’ll learn how to model and analyze streaming time series data with advanced KQL, apply native anomaly detection functions to identify spikes, trends, outliers, and data gaps, and combine stateful pattern detection with event-driven actions using Activator. Real-world scenarios such as IoT telemetry monitoring, infrastructure health, and SLA tracking illustrate how anomaly detection can be embedded directly into streaming pipelines with low latency.
Session Details
As businesses move toward hyper-responsive operations, the ability to detect anomalies and act on time series data in real time is becoming mission-critical. This session dives deep into how Microsoft Fabric’s Real-Time Intelligence (RTI) stack—powered by Kusto Query Language (KQL)—enables streaming time series analytics and intelligent anomaly detection at scale.
You’ll explore advanced KQL capabilities to:
Build and analyze dynamic time series models over streaming data using make-series, summarize, and render timechart
Apply native anomaly detection algorithms (series_decompose_anomalies, series_outliers, etc.) in real-time
Detect trend shifts, spikes, volatility, and data absence (heartbeat failure) in high-cardinality signals
Combine stateful pattern detection in KQL with event routing via Activator for intelligent automation
We’ll walk through real-world use cases—like monitoring IoT telemetry, infrastructure stability, and SLA breaches—and showcase how to embed anomaly detection directly into streaming dataflows with sub-minute latency using Eventstreams, KQL, and Activator.
Expect hands-on demos, deep syntax insights, and performance tuning tips for advanced users. Whether you're building operational alerting for manufacturing or real-time analytics for finance, this session will help you take full control of your time series data in Fabric.
You’ll explore advanced KQL capabilities to:
Build and analyze dynamic time series models over streaming data using make-series, summarize, and render timechart
Apply native anomaly detection algorithms (series_decompose_anomalies, series_outliers, etc.) in real-time
Detect trend shifts, spikes, volatility, and data absence (heartbeat failure) in high-cardinality signals
Combine stateful pattern detection in KQL with event routing via Activator for intelligent automation
We’ll walk through real-world use cases—like monitoring IoT telemetry, infrastructure stability, and SLA breaches—and showcase how to embed anomaly detection directly into streaming dataflows with sub-minute latency using Eventstreams, KQL, and Activator.
Expect hands-on demos, deep syntax insights, and performance tuning tips for advanced users. Whether you're building operational alerting for manufacturing or real-time analytics for finance, this session will help you take full control of your time series data in Fabric.
3 things you'll get out of this session
Understand how Microsoft Fabric Real-Time Intelligence and KQL support real-time time series analytics at scale
Build and analyze streaming time series models using advanced KQL techniques
Apply native KQL anomaly detection functions to identify spikes, trends, outliers, and missing data
Implement stateful pattern detection and event-driven actions using Activator
Design low-latency, real-time anomaly detection solutions for scenarios such as IoT, infrastructure monitoring, and SLA tracking
Speakers
Frank Geisler's other proposed sessions for 2026
Automating Fabric with the PowerShell Module FabricTools - 2026
Break Data Silos: Real-Time Data Mesh with Microsoft Fabric RTI - 2026
Fabric IQ Explained: Turning Insights into Intelligent Action - 2026
From Awareness to Action: Building Healthy Habits in an IT Lifestyle - 2026
From Xbox to Insights: Real-Time Data in Action - 2026
IaC Thunderdome: Bicep vs. Terraform! - 2026
Releasing the Potential of Microsoft Real-Time Intelligence through AI Agents - 2026
Talk to Your Data: RAG Server for Real-Time Intelligence in Microsoft Fabric - 2026
Frank Geisler's previous sessions
ADX and the last crusade
Introductory session to Azure Data Explorer that shows some examples how to set up ADX and how to use it.
Introduction to Bicep for the Cloud DBA
In this Session MVP Frank Geisler and first time speaker Timur Dudhasch will give an introduction to Bicep for the Cloud DBA. As more and more systems are migrated to the cloud and as the sheer number of systems rises continuously Frank and Timur will demonstrate how to ease the process of creating and maintaining resources in the cloud via bicep
Code Your Report Environment
How to code everything in SSRS with PowerShell.