In Kusto, arg_max takes an expression and returns the selected columns from the row which maximizes it. What’s the best way to get it (or an equivalent expression) to maximize the value of one column then another, then return the matching row?

Here is the KQL table in which I am trying to calculate downtime between the current trolley_start timestamp and the previous trolley_end timestamp for each associate.

Here is the KQL table in which I am trying to calculate downtime between the current trolley_start timestamp and the previous trolley_end timestamp for each associate.

I have following have the table with two rows per cart_id. for each secon row I want to replace Trolley_Start timestamp with the Begin_Picking timestamp and for each first row I want to replace Trolley_End timestamp with the End_Picking timestamp using Kusto Query language. Some guidance or help will be appriciated.

I have following have the table with two rows per cart_id. for each secon row I want to replace Trolley_Start timestamp with the Begin_Picking timestamp and for each first row I want to replace Trolley_End timestamp with the End_Picking timestamp using Kusto Query language. Some guidance or help will be appriciated.

I’m trying to understand if it is possibe to extend a new column with the output of a user defined function.

I was hoping to get some help writing a kusto query, to summarize errors across a timespan into bins.

As a result of this SO post I had a kql script that creates a linechart. I added more rows to the data datatable and now a line connects the largest Stage_Num values. I’m still learning everything kusto and trying to research the ‘Series’ keyword (there is not much out there), but I didn’t expect that line to appear. How can I alter my query to get rid of that line?

As per this Microsoft blog an external table can be defined as delta.

I have a kql script that queries the table (csv format) at bottom and creates the line chart here: