This is a basic example of how to use @RodTrent's KQL workflow to go from blank canvas to actionable query.
MustLearnKQL Github repo https://aka.ms/MustLearnKQL - Everything Rod produces can be found here.
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices …
@RodTrent is writing a series of blog posts walking through what you need to know to get up to speed with Kusto Query Language, forever more referred to as just KQL. I need to get up to speed with KQL myself so it seemed like a great opportunity to create some content around this topic.
MustLearnKQL Github repo …