microsoft sentinel
2 TopicsHow to start with KQL Oct 2021
KQL stands for Kusto Query Language. It's the language used to query the Azure Data Explorer, Azure Defenders, Azure log databases: Azure Monitor Logs, Azure Monitor Application Insights and others. Kusto databases are perfect for massive amounts of streamed data like application logs and telemetry database.7.7KViews1like0CommentsHow to ingest historical data into ADX
This article shows you how to auto-generate light Ingest command to load historical data from an existing storage system to Azure Data Explorer through an ingestion wizard. In addition to creating the command, you can use this process to create a new table, and create schema mapping. This tool infers schema mapping from your data set.3.4KViews0likes0Comments