Microsoft Sentinel where clause failing for more than one character
I'm having difficulty searching a field for a value in KQL. The field I am searching I get by decoding a base64 encoded string using the built in function base64_decode_tostring(). The string I am decoding is: …
Azure Data Explorer
Microsoft Sentinel


ADX Kusto Self Join with a combination of equality and inequality
Hi, How do we generate Kusto query to achieve a self-join query, where one column matches but the other doesn't? For example: myTable | where myColumnSubset == "mySubGroup" | join kind=inner ( myTable | where myColumnSubset ==…
Azure Data Explorer
I would like to know if connector is available for SAP BPC?
Hi Experts, I am working on solution development to ingest data from different SAP systems to ADLS Gen 2. I have selected ADF for the integration and could see ADF connectors available for SAP BW, HANA, C2C etc. However, I don't find any information…
Azure Data Lake Storage
Azure Data Explorer
Azure Data Factory
SQL Server Integration Services
How can I connect Azure Data Explorer to a Log Analytics resource using AMPLS to privately query
I have a log analytics workspace that is only accessible through AMPLS and Data Explorer doesnt appear to support connections to resources that are setup to only allow Restricted Private Inbound queries even when accessing via a device that has network…
Azure Data Explorer
Azure ADX - UpdatePolicy fails to insert data
Hi Everyone, I believe everyone is doing good and safe. I am facing challenge with ADX. Please find the problem details below. Problem statement: We are unable to insert a result data into a target table from source table using an UpdatePolicy. …
Azure Data Explorer
E_RUNAWAY_QUERY
Hi, How do we systematically Debug and pinpoint the root cause of E_RUNAWAY_QUERY error? Are there any built in tools in ADX? .show queryplan is not useful. Typical errors read "Query Limits Exceeded...Partial Query Error.....Aggregated String…
Azure Data Explorer
How do I recover data deleted from a table ?
How do I recover data deleted from a table ? The data has been automatically deleted by a data retention policy.
Azure Data Explorer
Inability in connecting to Azure Data Explorer cluster from WebUI
I created a ADE cluster through the Azure portal under my team's subscription. While the cluster looks active + has a URI link available, when I try to 1) click on the URI link or 2) add a connection from the WebUI, I get this error: Failed to connect…
Azure Data Explorer
IsObject() isArray()
Hi, is there any IsArray() or IsObject() or IsBag() or typeof() function supported by Azure Data Explorer to check whether my Dynamic data is property bag or array, before applying mv-expand? My source sends semi-structured data to my application.…
Azure Data Explorer
Do I pay only for the storage in case that the Azure Data Explorer is stopped?
Hi all, In case that I have a stopped Azure Data Explorer cluster , do I pay only for the storage that I used. Kind regards, SM
Azure Data Explorer

Datamodel graphic in context of PurView / Data Catalog
I govern conceptional, logical and physical models in Azure Data Catalog / PurView. How can I get an grahical overview of a selection of related entities? Is there a tool available providing some functionality to arrange entities and relationsships? …
Azure Data Explorer
Azure Data Catalog
Microsoft Purview

i want to create a ADX dashboard using terraform, but i am not able to get the terraform resource for that
i want to create a ADX dashboard using terraform, but i am not able to get the terraform resource for that
Azure Data Explorer
Azure Data Explorer ingests duplicated records from Event Hub
We have data ingestions set up between an event hub and Azure Data Explorer. There are abnormally high duplicated records in Azure Data Explorer database tables. I understand that the ingestion delivery is at least once. having dups are sort of expected.…
Azure Data Explorer
Why ADX uses 2 VMs SKUs D11 v2 and D2a v4 ?
Hello Team, Analysing my costs, I noticed that there are 2 SKUs associated with ADX, D11 v2 and D2a v4. The purpose of D11 v2 is clear - this is the one I selected as underlaying machine for the cluster and has utilization 100% since my cluster is always…
Azure Data Explorer
All logs are not showing in the Log Analytics Workspace - Azure Data Explorer
I created a Log Analytics Workspace connection in Azure Data Explorer. I tried to query AzureDiagnostics logs for one month. But it was not showing all the expected logs. How can I get all logs?
Azure Data Explorer
Encountered Error When Recreating Azure Kusto Cluster: Name Already Taken
Hello, I recently removed an existing Kusto cluster from Azure using the "az kusto cluster remove" command. However, when attempting to recreate a new cluster with the same name, I encountered the following error message: "Name 'XXXX'…
Azure Data Explorer
Azure Data Explorer External Table with Partition
I am trying to create an Azure Data Explorer external table in azure using a parquet file with partitions and somehow ,I am not able to get the URI properly using UI or KQL always getting error or return query count from external table as 0. without…
Azure Data Explorer
IoT Hub ingestion into Azure Data Explorer runs at 100% avg ingestion utilization
My setup consists of several databases in a single Kusto cluster, each having a landing table with ingestion mapping configured from IoT Hubs. The data in the landing table is then split with update policies into specialized tables. I have no ingestion…
Azure Data Explorer


Is it allowed to use an Azure Data Explorer cluster with a "Dev/Test" workload for production database monitoring?
Hello! We've been evaluating the Azure Database Watcher service and have nothing but great things to say. However, we have a question about provisioning the service in production. We understand the benefits and limitations of "free" Azure Data…
Azure Data Explorer


Data ingestion from azure function to ADX
hi all, I am trying to get an azure function app going to write the incoming http json payload to ADX table. below are the steps i followed: Create a new DB in ADX and create a corresponding table. create a new function app using node and create a…