Share via

Azure Data Explorer

  • Reference

Azure Data Explorer a.k.a Kusto is a log analytics cloud platform optimized for ad-hoc big data queries. Read more about it here: http://aka.ms/kdocs

This connector is available in the following products and regions:

Service Class Regions
Logic Apps Standard All Logic Apps regions except the following:
     -   US Department of Defense (DoD)
Power Automate Premium All Power Automate regions except the following:
     -   US Government (GCC High)
     -   US Department of Defense (DoD)
Power Apps Premium All Power Apps regions except the following:
     -   US Government (GCC High)
     -   US Department of Defense (DoD)
Contact
Name Microsoft
URL Microsoft LogicApps Support
Microsoft Power Automate Support
Microsoft Power Apps Support
Connector Metadata
Publisher Microsoft

Known Issues and Limitations

Calculating work units

Creating a connection

The connector supports the following authentication types:
Default Parameters for creating connection. All regions Not shareable

Default

Applicable: All regions

Parameters for creating connection.

This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.

Throttling Limits

Name Calls Renewal Period
API calls per connection 100 60 seconds
Work units per day 90000 86400 seconds

Actions

Run async control command

Runs control command in async mode and returns its ID, state and status on completion. Command can run for maximum 1 hour. The 'async' keyword is mandatory e.g .set-or-append async TargetTable <| SourceTable.
Run control command and render a chart

Runs the control command and returns the result as a chart of your choice e.g .clear table TableName data.
Run KQL query

Runs the KQL query and returns the result as a set of rows which can be iterated over in the following connectors e.g TableName | take 10.
Run KQL query and render a chart

Runs the KQL query and returns result as a chart of your choice e.g TableName | where Timestamp > ago(1h) | project timestamp, value.
Run show control command

Runs the show control command and returns the result as a set of rows which can be iterated over in the following connectors e.g .show table TableName policy caching.

Run async control command

Operation ID:
runAsyncControlCommandAndWait

Runs control command in async mode and returns its ID, state and status on completion. Command can run for maximum 1 hour. The 'async' keyword is mandatory e.g .set-or-append async TargetTable <| SourceTable.

Parameters

Name Key Required Type Description
Cluster URL
 cluster True string

Specify the cluster url e.g. https://..kusto.windows.net
Database Name
 db True string

Specify the database name
Control Command
 csl True string

Specify the show control command you would like to run

Returns

Body
AsyncCommandResult

Run control command and render a chart

Operation ID:
runKustoCommandAndVisualizeResultsPost

Runs the control command and returns the result as a chart of your choice e.g .clear table TableName data.

Parameters

Name Key Required Type Description
Cluster URL
 cluster True string

Specify the cluster url e.g. https://..kusto.windows.net
Database Name
 db True string

Specify the database name
Control Command
 csl True string

Specify the control command you would like to run
Chart Type
 chartType True string

Specify the resulting chart type

Returns

Body
VisualizeResults

Run KQL query

Operation ID:
listKustoResultsPost

Runs the KQL query and returns the result as a set of rows which can be iterated over in the following connectors e.g TableName | take 10.

Parameters

Name Key Required Type Description
Cluster URL
 cluster True string

Specify the cluster url e.g. https://..kusto.windows.net
Database Name
 db True string

Specify the database name
Query
 csl True string

Specify the query you would like to run

Returns

The outputs of this operation are dynamic.

Run KQL query and render a chart

Operation ID:
runKustoQueryAndVisualizeResultsPost

Runs the KQL query and returns result as a chart of your choice e.g TableName | where Timestamp > ago(1h) | project timestamp, value.

Parameters

Name Key Required Type Description
Cluster URL
 cluster True string

Specify the cluster url e.g. https://..kusto.windows.net
Database Name
 db True string

Specify the database name
Query
 csl True string

Specify the query you would like to run
Chart Type
 chartType True string

Specify the resulting chart type

Returns

Body
VisualizeResults

Run show control command

Operation ID:
listKustoShowCommandResultsPost

Runs the show control command and returns the result as a set of rows which can be iterated over in the following connectors e.g .show table TableName policy caching.

Parameters

Name Key Required Type Description
Cluster URL
 cluster True string

Specify the cluster url e.g. https://..kusto.windows.net
Database Name
 db True string

Specify the database name
Control Command
 csl True string

Specify the show control command you would like to run

Returns

The outputs of this operation are dynamic.

Definitions

VisualizeResults

Name Path Type Description
Body
 body byte

The body of the result in base64 encoding.
BodyHtml
 bodyHtml HTML

The body of the result in html encoding.
Attachment Content
 attachmentContent byte

The content of the attachment.
Attachment Name
 attachmentName string

The name of the attachment file.
Links to Kusto Explorer
 kustoDeepLink string

Links to run the query in Kusto tools, for instance in KustoExplorer.

AsyncCommandResult

Name Path Type Description
State
 state string

The state of the command.
Status
 status string

The status of the command.
Operation ID
 operationId string

The operation ID of the control command