Azure Monitor log query language differences

While logs in Azure Monitor is built on Azure Data Explorer and uses the same Kusto query language, the version of the language does have some differences. This article identifies elements that are different between the version of the language used for Data Explorer and the version used for Azure Monitor log queries.

Note

This article was recently updated to use the term Azure Monitor logs instead of Log Analytics. Log data is still stored in a Log Analytics workspace and is still collected and analyzed by the same Log Analytics service. We are updating the terminology to better reflect the role of logs in Azure Monitor. See Azure Monitor terminology changes for details.

KQL elements not supported in Azure Monitor

The following sections describe elements of the Kusto query language that aren't supported by Azure Monitor.

Statements not supported in Azure Monitor

Functions not supported in Azure Monitor

Operators not supported in Azure Monitor

Plugins not supported in Azure Monitor

Additional operators in Azure Monitor

The following operators support specific Azure Monitor features and are not available outside of Azure Monitor.

Next steps