Creating KQL queries for experienced SQL users

In this session, we will use your existing experience in creating SQL queries to learn how to work with KQL.

You can create SQL databases in Microsoft Azure and Fabric. However, you might eventually meet a stumbling block. Several features in Azure and Fabric require knowledge of KQL. You might want to ingest data using eventstreams in Fabric or store real-time logs in Azure. If you want to query this data, knowledge of KQL can be key - but it can look very different from SQL.

In this 50 minute session, we will look at the building blocks of KQL queries, and how they relate to SQL. We'll look at:

• How to reference the data to be used,
• Reducing the columns returned,
• How to add additional columns,
• Filtering the data,
• Grouping the data,
• Sorting your results, and
• Combining data sets together.

Towards the end of the session, we'll also see how to easily convert your own SQL queries into KQL - but also why some knowledge of how to build KQL queries is essential to refine it.

We will be doing this live using Azure Data Explorer and sample data, which you can also use for free.

By the end of the session, you will be able to create your own KQL queries, and review other people's queries and understand how they work and what data they will retrieve. You can then incorporate this newfound knowledge into your own work.

Products: Microsoft Azure, Microsoft Fabric

Learn how to create KQL queries. See how T-SQL queries can be converted easily into KQL. Use it in Fabric, Azure, and more.