Edit

Share via

Function types

  • Article

Applies to: ✅ Microsoft Fabric ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel

Functions are reusable queries or query parts. Kusto supports two kinds of functions:

  • Built-in functions are hard-coded functions defined by Kusto that can't be modified by users.

  • User-defined functions, which are divided into two types:

    • Stored functions: user-defined functions that are stored and managed database schema entities, similar to tables. For more information, see Stored functions. To create a stored function, use the .create function command.

    • Query-defined functions: user-defined functions that are defined and used within the scope of a single query. The definition of such functions is done through a let statement. For more information on how to create query-defined functions, see Create a user defined function.

    For more information on user-defined functions, see User-defined functions.