Numerical operators
Applies to: ✅ Microsoft Fabric ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel
The types int
, long
, and real
represent numerical types.
The following operators can be used between pairs of these types:
Operator | Description | Example |
---|---|---|
+ |
Add | 3.14 + 3.14 , ago(5m) + 5m |
- |
Subtract | 0.23 - 0.22 , |
* |
Multiply | 1s * 5 , 2 * 2 |
/ |
Divide | 10m / 1s , 4 / 2 |
% |
Modulo | 4 % 2 |
< |
Less | 1 < 10 , 10sec < 1h , now() < datetime(2100-01-01) |
> |
Greater | 0.23 > 0.22 , 10min > 1sec , now() > ago(1d) |
== |
Equals | 1 == 1 |
!= |
Not equals | 1 != 0 |
<= |
Less or Equal | 4 <= 5 |
>= |
Greater or Equal | 5 >= 4 |
in |
Equals to one of the elements | see here |
!in |
Not equals to any of the elements | see here |
Note
To convert from one numerical type to another, use to*()
functions. For example, see tolong()
and toint()
.
Type rules for arithmetic operations
The data type of the result of an arithmetic operation is determined by the data types of the operands. If one of the operands is of type real
, the result will be of type real
. If both operands are of integer types (int
or long
), the result will be of type long
.
Due to these rules, the result of division operations that only involve integers will be truncated to an integer, which might not always be what you want. To avoid truncation, convert at least one of the integer values to real
using the todouble() before performing the operation.
The following examples illustrate how the operand types affect the result type in division operations.
Operation | Result | Description |
---|---|---|
1.0 / 2 |
0.5 |
One of the operands is of type real , so the result is real . |
1 / 2.0 |
0.5 |
One of the operands is of type real , so the result is real . |
1 / 2 |
0 |
Both of the operands are of type int , so the result is int . Integer division occurs and the decimal is truncated, resulting in 0 instead of 0.5 , as one might expect. |
real(1) / 2 |
0.5 |
To avoid truncation due to integer division, one of the int operands was first converted to real using the real() function. |
Comment about the modulo operator
The modulo of two numbers always returns in Kusto a "small non-negative number". Thus, the modulo of two numbers, N % D, is such that: 0 ≤ (N % D) < abs(D).
For example, the following query:
print plusPlus = 14 % 12, minusPlus = -14 % 12, plusMinus = 14 % -12, minusMinus = -14 % -12
Produces this result:
plusPlus | minusPlus | plusMinus | minusMinus |
---|---|---|---|
2 | 10 | 2 | 10 |