MustLearnKQL - The Project Operator

A demonstration of the Kusto Query Language project operator.
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices


  • Used to cut out all the rif raf and view only the pieces of data that are meaningful to you
  • Project-Away: Display all columns except columns listed
  • Project-rename: rename a column at runtime
  • Project-reorder: As expected reorders columns from the default as needed

Twitter: @cyberautomate