How to do while / for loop in azure data explorer / kusto?

Question

I want to run for/while loop to retrieve records using Kusto query. For eg i want to query some rows and depending on corresponding values of those rows i want to query more rows and keep doing it till certain condition satisfy. And while doing this i want to keep appending result of each query to some temp variable/view? Its like building a graph report from one single table.

So how can we run loops in Kusto. I looked into stored function but could not find any loop syntax.

Answer 1

Hello Sunil,

Azure Data Explorer is a database, therefor the Kusto language is thinking in datasets.

If you want to make a decision on the outcome of a certain decision, you could try to join that with another query by capturing the first set in a 'variable'.

Check out the LET statement.

This is an example that is without meaning but it shows the possibilities:

let compromisedProxies = Votes
| where vote == “YaddaYadda”
| where outliers == 1
| distinct via_ip;
Votes
| where not(via_ip in (compromisedProxies) and vote == “BlaBla”)
| summarize Count=count() by vote

Here, the two queries are combined with this 'in' but a 'join' or 'union' could work too.