Kusto Query Language learning resources

Kusto Query Language (KQL) is a powerful tool to explore your data and discover patterns, identify anomalies and outliers, create statistical modeling, and more. Are you new to KQL or want to improve your KQL skills? Take a look at the following learning resources. For more information on KQL, see KQL overview.

General training

This training is not product-specific, and provides basic KQL learning:

• Pluralsight: KQL from scratch
• Kusto Detective Agency
• Tutorial: Learn common operators
• Tutorial: Use aggregation functions
• Tutorial: Join data from multiple tables
• Cloud Academy: Introduction to Kusto Query Language

Azure Data Explorer

• Tutorial: Create geospatial visualizations
• Data analysis in Azure Data Explorer with Kusto Query Language
• Free Pluralsight training: Azure Data Explorer

Real-Time Intelligence in Microsoft Fabric

• Get started with Real-Time Intelligence in Microsoft Fabric

Azure Monitor

• Tutorial: Detect and analyze anomalies using KQL in Azure Monitor
• Analyze monitoring data with Kusto Query Language
• Koenig: KQL for Azure Admins

Microsoft Sentinel

• Must learn KQL
• Udemy: Learn KQL for Microsoft Sentinel
• SC-200: Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
• Infosec Train: Kusto Query Language (KQL) eLearning Training Program Online