kusto
2 TopicsQuerying tables from different Log Analytics Workspace
Dear specialists, when using "workspace("GUID").tablename" I can get information from a table in a different workspace. However, when I extend tablename | where ColumnName it says that "ColumnName" cannot be found. Any idea how work with tables in other LAWs including normal KQL functionalities? Thank you in advance! 🙂 Ruben408Views0likes0CommentsCompare Kusto results from three timespans
I've seen some examples of this, but not quite nailed it myself. I basically want to find the number of users this week, last week and the week before that and put it in a simple table. I think I need to use the LET, but haven't figured it out yet. Theses are the three basic KQL's I want to to create a simple table of: customEvents | where timestamp < ago(14d) and timestamp > ago(21d) | extend DeviceId_ = tostring(parse_json(tostring(customDimensions.Properties)).DeviceId) | summarize dcount(DeviceId_) customEvents | where timestamp < ago(7d) and timestamp > ago(14d) | extend DeviceId_ = tostring(parse_json(tostring(customDimensions.Properties)).DeviceId) | summarize dcount(DeviceId_) customEvents | where timestamp > ago(7d) | extend DeviceId_ = tostring(parse_json(tostring(customDimensions.Properties)).DeviceId) | summarize dcount(DeviceId_)7.3KViews0likes1Comment