ingestion_time()
Returns the approximate time at which the current record was ingested.
This function must be used in the context of a table of ingested data for which the IngestionTime policy was enabled when the data was ingested. Otherwise, this function produces null values.
Retrieves the datetime when the record was ingested and ready for query.
Note
The value returned by this function is only approximate, as the ingestion process may take several minutes to complete and multiple ingestion activities may take place concurrently. To process all records of a table with exactly-once guarantees, use database cursors.
Tip
The ingestion_time() function refers to the service side ingestion time. There is no guarantee that two ingest commands that were sent with a specific time gap from the client application, will preserve the same time gap in the ingestion_time(). In fact, the ingestion_time() can be the equal or vary in any direction, based on the ingestion activity of the service. To preserve the application semantic of the order of events, we advise adding an application timestamp column.
Syntax
ingestion_time()
Returns
A datetime value specifying the approximate time of ingestion into a table.
Example
T
| extend ingestionTime = ingestion_time() | top 10 by ingestionTime