A video demonstration of the Kusto Query Language take / limit operator.

MustLearnKQL Table of Contents: https://aka.ms/MustLearnKQL
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices

• Must Learn KQL Part 20: Your first analytics rule …

A demonstration of the Kusto Query Language where operator, maybe the most used operator of all.

MustLearnKQL Table of Contents: https://aka.ms/MustLearnKQL
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices

• Must Learn KQL Part 20: Your first analytics …

How to use the KQL schema operator and view schema information in the Sentinel user interface.

MustLearnKQL Table of Contents - https://aka.ms/MustLearnKQL
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices

• Must Learn KQL Part 20: Your first analytics …

A comprehensive walk-through of the Sentinel interface in the Azure Portal.

MustLearnKQL Table of Contents - https://aka.ms/MustLearnKQL
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices

• Must Learn KQL Part 20: Your first analytics rule …

A demonstration of how to use the KQL Search operator and integrate it into your workflow.

MustLearnKQL Table of Contents - https://aka.ms/MustLearnKQL
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices

• Must Learn KQL Part 20: Your first analytics rule …

This is a basic example of how to use @RodTrent's KQL workflow to go from blank canvas to actionable query.

MustLearnKQL Github repo https://aka.ms/MustLearnKQL - Everything Rod produces can be found here.
Get the Ebook
Get the Paperback
MustLearnKQL Store (all profit goes directly to St. Jude)
KQL Best Practices …

@RodTrent is writing a series of blog posts walking through what you need to know to get up to speed with Kusto Query Language, forever more referred to as just KQL. I need to get up to speed with KQL myself so it seemed like a great opportunity to create some content around this topic.

MustLearnKQL Github repo …