Introduction

Completed

Kusto Query Language (KQL) is the query language used by several Microsoft products. Including, Azure Data Explorer, Real-Time Analytics in Microsoft Fabric, Log Analytics in Azure Monitor, Microsoft Sentinel, Microsoft Defender XDR, Azure Resource Graph, and Resource Manager. Querying data using KQL lets you gain insights about your IT, business, and security from large data sets you collect, in near real-time.

What will we be doing?

In this module, you learn about what KQL does, how it works, and when to use it. You explore basic query types, learn about some of the services that use KQL, and run simple queries in these service environments.

What is the main goal?

By the end of this session, you're able to identify key features and query environments for using KQL.