I have this data: let data = datatable(Timestamp:datetime, Name:string, Value:int) [ datetime(2022-02-18 10:00:00 AM), "Floor 1", 100, ]; let mydict = dynamic( { "Id":"1", "Product": "" } ); data | extend messageMetaData = mydict | project Timestamp, Name, Value, messageMetaData = replace_string(tostring(messageMetaData), "", "Wheat") What I am trying to achieve here is to replace the… Read More Replace empty value in dictionary Kusto

I have the following data sample: let data = datatable(Name:string, Value:string) [ "Device_1", "60.12.12 %", "Device_2", "40.12.12 %", "Device_3", "50.12.12 %", "Device_4", "48.33.33 %" ]; As you can see in the Value column, the values after the decimal points are duplicated. How can we trim the second decimal point and the values after it ?… Read More How to trim duplicated values in a string KQL?

I have seen an instruction on Microsoft docs that we pack the python script of code as : let code = ”’ if 1: *…* ”’ table_name | evaluate python(typeof(*),code,…) But i would like to ask, is there anyway which allow us to call a python file .py, .ipynb directly into a kusto. I plan… Read More Call a python scripts alternatively to kusto

Suppose I have a table, I run a query like below :- let data = orders | where zip == "11413" | project timestamp, name, amount ; inject data into newOrdersInfoTable in another cluster // ==> How can i achieve this? >Solution : There are many ways to do it. If it is a manual… Read More Kusto – How to put results into another table in another cluster?

I want to write a Kusto function with an optional argument. If the argument is not provided, I don’t want to do a ‘where’ statement. Is that possible? let f = (a:string = "default") { table1 | where region = a // only do this search if a != default }; f() >Solution : you… Read More Is it possible to have a Kusto where statement only if some other condition is met?

I have a data set in Kusto and I would like to gather the ids from each day where their latency is greater than the 99th percentile for that day. e.g I have a table like this: id latency time a 23.4 1/2/2022 c 1.4 1/2/2022 b 25.6 1/3/2022 d 2.3 1/3/2022 and I want… Read More How to extract the ids from the 99th percentile of results for each day

I would like to know if there is a possibility to customize the format of a specific datetime in KQL. For example I have the following code: let value = format_datetime(datetime(07:30:00), "HH:mm"); print value As a result we obtain 07:30 My question here is that instead of having 07:30, is there a possibility to format… Read More Custom date format in KQL

I have a Kusto database with the following retention policy: { "SoftDeletePeriod": "30.00:00:00", "Recoverability": "Enabled" } Yesterday some data was removed from a table in the database since it was over 30 days old. According to the retention policy docs, if the Recoverability attribute is set, "If set to Enabled, the data will be recoverable… Read More Kusto table – How to recover soft-deleted data that is retained by the Recoverability = enabled set