Kusto Query Language (KQL) basics in Azure - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to select all records from the table named 'Events'.

Azure

[1]

Drag options to blanks, or click blank then click option'

Atable Events

Bselect * from Events

CEvents | where true

DEvents

Attempts:

3 left

💡 Hint

Common Mistakes

Using SQL syntax like 'select * from Events'

Adding unnecessary keywords before the table name

In KQL, to query all records from a table, you just write the table name.

2fill in blank

medium

Complete the code to filter records where the 'Status' column equals 'Error'.

Azure

Events | where Status [1] 'Error'

Drag options to blanks, or click blank then click option'

A==

B!=

C=

Dequals

Attempts:

3 left

💡 Hint

Common Mistakes

Using single '=' instead of '=='

Using 'equals' keyword which is not valid in KQL

In KQL, '==' is used to check equality in filters.

3fill in blank

hard

Fix the error in the code to summarize the count of records by 'Category'.

Azure

Events | summarize count() by [1]

Drag options to blanks, or click blank then click option'

AStatus

BCount

CCategory

DCategoryCount

Attempts:

3 left

💡 Hint

Common Mistakes

Using a non-existent column name

Using aggregate function names instead of column names

The 'by' clause should use the column name to group by, here 'Category'.

4fill in blank

hard

Fill both blanks to filter records where 'Duration' is greater than 5 and select only 'Name' and 'Duration' columns.

Azure

Events | where Duration [1] 5 | project [2]

Drag options to blanks, or click blank then click option'

A>

B<

CName, Duration

DDuration, Name

Attempts:

3 left

💡 Hint

Common Mistakes

Using '<' instead of '>' for filtering

Listing columns without commas or in wrong order

Use '>' to filter durations greater than 5, and 'project' to select columns by listing them separated by commas.

5fill in blank

hard

Fill all three blanks to count records grouped by 'Type' and filter groups having count greater than 10.

Azure

Events | summarize [1] = count() by [2] | where [3] > 10

Drag options to blanks, or click blank then click option'

ATotalCount

BType

DCount

Attempts:

3 left

💡 Hint

Common Mistakes

Using different names for the count alias

Using wrong column names in group or filter

Assign the count to 'TotalCount', group by 'Type', then filter where 'TotalCount' is greater than 10.