Events
Feb 11, 3 PM - Feb 12, 6 PM
Learn technical best practices for your Azure projects and excel in Azure and AI Adoption.
Add to calendarThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Azure Monitor Logs is based on Azure Data Explorer, and log queries are written by using the same Kusto Query Language (KQL). This rich language is designed to be easy to read and author, so you should be able to start writing queries with some basic guidance.
Areas in Azure Monitor where you'll use queries include:
Invoke-AzOperationalInsightsQuery
.For an example of how to implement the Azure Monitor Query client library for Python, see Analyze data in Azure Monitor Logs using a notebook.
The best way to get started learning to write log queries by using KQL is to use available tutorials and samples:
Documentation for KQL, including the reference for all commands and operators, is available in the Azure Data Explorer documentation. Even as you get proficient at using KQL, you'll still regularly use the reference to investigate new commands and scenarios that you haven't used before.
Although Azure Monitor uses the same KQL as Azure Data Explorer, there are some differences. The KQL documentation will specify those operators that aren't supported by Azure Monitor or that have different functionality. Operators specific to Azure Monitor are documented in the Azure Monitor content. The following sections list the differences between versions of the language for quick reference.
The following operators support specific Azure Monitor features and aren't available outside of Azure Monitor:
Events
Feb 11, 3 PM - Feb 12, 6 PM
Learn technical best practices for your Azure projects and excel in Azure and AI Adoption.
Add to calendarTraining
Learning path
Analyze monitoring data with Kusto Query Language - Training
Learn how to analyze data in Azure Monitor using Kusto Query Language (KQL).
Certification
Microsoft Certified: Azure Cosmos DB Developer Specialty - Certifications
Write efficient queries, create indexing policies, manage, and provision resources in the SQL API and SDK with Microsoft Azure Cosmos DB.