I have a kql script that queries the table (csv format) at bottom and creates the line chart here:

I have a kql script that queries the table (csv format) at bottom and creates the line chart here:

I have a kql script that queries the table (csv format) at bottom and creates the line chart here:

Through the use of KQL materialize() one can cache a tabular expression during query execution. This can be good for performance if the tabular expression is used many times in the query and is referenced multiple times in the query. However, materialize does not work with scalar values.

I have two tables in azure data explorer db, first table is Users and the second one is Heartbeat. Users table has certain fields including email. Heartbeat table has email and Heartbeat send date/time column.

I have a device_event table and I’m trying out following query :

I have a table with Dates, Tickers, And Strategies for multiple stocks. I’d like to create a revised strategy column that pulls the most recent strategy per ticker that isn’t equal to “Flat”. How could this be accomplished? I’ve tried serializing and used the prev function with no luck. Here’s an example of my data:

Suppose I have a table with some columns. One of the columns is called Details, has a dynamic type, and is an array of JSON objects similar to this:

I have been trying to find a way to search between dates in Azure Data Explorer but every example or format I find on the internet has led me to more errors. I need to be able to search our Log files between to dates. I found a previous question on here but the solutions do not seem to work for me.

I have different Types (A, B, C, …) and different States type string in Azure Data Explorer.
I would like to have a chart where all Types a sumed up by their States. So every column consists of A, B, C, etc. and then the sums by State.