A video demonstration of the Kusto Query Language summarize operator. MustLearnKQL Table of Contents: https://aka.ms/MustLearnKQL Get the Ebook: https://cda.ms/3mT KQL Best Practices: https://cda.ms/3s1 Must Learn KQL Part 11: The Summarize Operator https://cda.ms/3yf Must Learn KQL Part 10: The Count Operator …

A video demonstration of the Kusto Query Language count operator. MustLearnKQL Table of Contents: https://aka.ms/MustLearnKQL Get the Ebook: https://cda.ms/3mT KQL Best Practices: https://cda.ms/3s1 Must Learn KQL Part 10: The Count Operator https://cda.ms/3sM Must Learn KQL Part 9: The Limit/Take Operators …

A video demonstration of the Kusto Query Language take / limit operator. MustLearnKQL Table of Contents: https://aka.ms/MustLearnKQL Get the Ebook: https://cda.ms/3mT KQL Best Practices: https://cda.ms/3s1 Must Learn KQL Part 9: The Limit/Take Operators https://cda.ms/3s7 Must Learn KQL Part 8: The Where Operator …

A demonstration of the Kusto Query Language where operator, maybe the most used operator of all. MustLearnKQL Table of Contents: https://aka.ms/MustLearnKQL Get the Ebook: https://cda.ms/3mT KQL Best Practices: https://cda.ms/3s1 Must Learn KQL Part 8: The Where Operator https://cda.ms/3qj Must Learn KQL Part 7: …

How to use the KQL schema operator and view schema information in the Sentinel user interface. MustLearnKQL Table of Contents - https://aka.ms/MustLearnKQL Get the Ebook - https://cda.ms/3mT Must Learn KQL Part 7: Schema Talk https://cda.ms/3pm Must Learn KQL Part 6: Interface Intimacy https://cda.ms/3mc Must …

A comprehensive walk-through of the Sentinel interface in the Azure Portal. MustLearnKQL Table of Contents - https://aka.ms/MustLearnKQL Get the Ebook - https://cda.ms/3mT This video corresponds to the content in Parts 4 and 5 of the #MustLearnKQL series. Must Learn KQL Part 6: Interface Intimacy Posted December 2, …

A demonstration of how to use the KQL Search operator and integrate it into your workflow. MustLearnKQL Table of Contents - https://aka.ms/MustLearnKQL Get the Ebook - https://cda.ms/3mT This video corresponds to the content in Parts 4 and 5 of the #MustLearnKQL series. Must Learn KQL Part 4: Search for Fun and …

This is a basic example of how to use @RodTrent's KQL workflow to go from blank canvas to actionable query. MustLearnKQL Github repo https://aka.ms/MustLearnKQL - Everything Rod produces can be found here. Direct links to each blog post Must Learn KQL Part 1: Tools and Resources Must Learn KQL Part 2: Just Above Sea …

@RodTrent is writing a series of blog posts walking through what you need to know to get up to speed with Kusto Query Language, forever more referred to as just KQL. I need to get up to speed with KQL myself so it seemed like a great opportunity to create some content around this topic. Come along for the ride as I …