You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: data-explorer/kusto/management/callout-policy.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -38,7 +38,7 @@ Callout policies are managed at cluster-level and are classified into the follow
38
38
| sandbox_artifacts | Controls sandboxed plugins ([python](../query/python-plugin.md) and [R](../query/r-plugin.md)). |
39
39
| external_data | Controls access to external data through [external tables](../query/schema-entities/external-tables.md) or [externaldata](../query/externaldata-operator.md) operator. |
40
40
| webapi | Controls access to http endpoints. |
41
-
|ai_embed_text| Controls the [ai_embed_text plugin)](../query/ai-embed-text-plugin.md). |
41
+
|azure_openai| Controls calls to Azure OpenAI plugins such as the embedding plugin [ai_embed_text plugin](../query/ai-embed-text-plugin.md). |
Copy file name to clipboardExpand all lines: data-explorer/kusto/query/parse-kv-operator.md
+10-9Lines changed: 10 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: parse-kv operator
3
3
description: Learn how to use the parse-kv operator to represent structured information extracted from a string expression in a key/value form.
4
4
ms.reviewer: alexans
5
5
ms.topic: reference
6
-
ms.date: 08/11/2024
6
+
ms.date: 02/06/2025
7
7
---
8
8
9
9
# parse-kv operator
@@ -14,13 +14,13 @@ Extracts structured information from a string expression and represents the info
14
14
15
15
The following extraction modes are supported:
16
16
17
-
*[**Specified delimeter**](#specified-delimeter): Extraction based on specified delimiters that dictate how keys/values and pairs are separated from each other.
18
-
*[**Non-specified delimeter**](#nonspecified-delimiter): Extraction with no need to specify delimiters. Any nonalphanumeric character is considered a delimiter.
17
+
*[**Specified delimiter**](#specified-delimiter): Extraction based on specified delimiters that dictate how keys/values and pairs are separated from each other.
18
+
*[**Non-specified delimiter**](#nonspecified-delimiter): Extraction with no need to specify delimiters. Any nonalphanumeric character is considered a delimiter.
19
19
*[**Regex**](#regex): Extraction based on [regular expressions](regex.md).
The `parse` operator provides a streamlined way to `extend` a table by using multiple `extract` applications on the same `string` expression. This result is useful, when the table has a `string` column that contains several values that you want to break into individual columns. For example, a column that's produced by a developer trace ("`printf`"/"`Console.WriteLine`") statement.
71
75
72
76
### Parse and extend results
77
+
73
78
In the following example, the column `EventText` of table `Traces` contains
74
79
strings of the form `Event: NotifySliceRelease (resourceName={0}, totalSlices={1}, sliceNumber={2}, lockTime={3}, releaseTime={4}, previousLockTime={5})`.
75
80
The operation extends the table with six columns: `resourceName`, `totalSlices`, `sliceNumber`, `lockTime`, `releaseTime`, and `previousLockTime`.
The `parse-where` operator provides a streamlined way to `extend` a table by using multiple `extract` applications on the same `string` expression. This is most useful when the table has a `string` column that contains several values that you want to break into individual columns. For example, you can break up a column that was produced by a developer trace ("`printf`"/"`Console.WriteLine`") statement.
The partition operator partitions the records of its input table into multiple subtables according to values in a key column. The operator runs a subquery on each subtable, and produces a single output table that is the union of the results of all subqueries.
13
13
14
-
This operator is useful when you need to perform a subquery only on a subset of rows that belongs to the same partition key, and not query the whole dataset. These subqueries could include aggregate functions, window functions, top *N* and others.
14
+
The partition operator is useful when you need to perform a subquery only on a subset of rows that belong to the same partition key, and not a query of the whole dataset. These subqueries could include aggregate functions, window functions, top *N* and others.
15
15
16
16
The partition operator supports several strategies of subquery operation:
17
17
@@ -36,16 +36,16 @@ The partition operator supports several strategies of subquery operation:
36
36
|*Column*|`string`|:heavy_check_mark:| The name of a column in *T* whose values determine how to partition the input tabular source.|
37
37
|*TransformationSubQuery*|`string`|:heavy_check_mark:| A tabular transformation expression. The source is implicitly the subtables produced by partitioning the records of *T*. Each subtable is homogenous on the value of *Column*.</br></br> The expression must provide only one tabular result and shouldn't have other types of statements, such as `let` statements.|
38
38
|*SubQueryWithSource*|`string`|:heavy_check_mark:| A tabular expression that includes its own tabular source, such as a table reference. This syntax is only supported with the [legacy strategy](#legacy-strategy). The subquery can only reference the key column, *Column*, from *T*. To reference the column, use the syntax `toscalar(`*Column*`)`.</br></br> The expression must provide only one tabular result and shouldn't have other types of statements, such as `let` statements.|
39
-
| *Hints*| `string` | | Zero or more space-separated parameters in the form of: *HintName*`=`*Value* that control the behavior of the operator. See the [supported hints](#supported-hints) per strategy type.
39
+
|*Hints*|`string`|| Zero or more space-separated parameters in the form of: *HintName*`=`*Value* that control the behavior of the operator. See the [supported hints](#supported-hints) per strategy type.|
40
40
41
41
### Supported hints
42
42
43
43
|Hint name|Type|Strategy|Description|
44
44
|--|--|--|--|
45
45
|`hint.shufflekey`|`string`|[shuffle](#shuffle-strategy)| The partition key used to run the partition operator with the `shuffle` strategy. |
46
-
|`hint.materialized`|`bool`|[legacy](#legacy-strategy)| If set to `true`, will materialize the source of the `partition` operator. The default value is `false`. |
46
+
|`hint.materialized`|`bool`|[legacy](#legacy-strategy)| If set to `true`, materializes the source of the `partition` operator. The default value is `false`. |
47
47
|`hint.concurrency`|`int`|[legacy](#legacy-strategy)| Determines how many partitions to run in parallel. The default value is `16`.|
48
-
|`hint.spread`|`int`|[legacy](#legacy-strategy)| Determines how to distribute the partitions among cluster nodes. The default value is `1`.</br></br> For example, if there are *N* partitions and the spread hint is set to *P*, then the *N* partitions will be processed by *P* different cluster nodes equally in parallel/sequentially depending on the concurrency hint.|
48
+
|`hint.spread`|`int`|[legacy](#legacy-strategy)| Determines how to distribute the partitions among cluster nodes. The default value is `1`.</br></br> For example, if there are *N* partitions and the spread hint is set to *P*, then the *N* partitions are processed by *P* different cluster nodes equally, in parallel/sequentially depending on the concurrency hint.|
49
49
50
50
## Returns
51
51
@@ -120,10 +120,14 @@ If the subquery is a tabular transformation without a tabular source, the source
120
120
To use this strategy, specify `hint.strategy=legacy` or omit any other strategy indication.
121
121
122
122
> [!NOTE]
123
-
> An error will occur if the partition column, *Column*, contains more than 64 distinct values.
123
+
> An error occurs if the partition column, *Column*, contains more than 64 distinct values.
124
124
125
125
## Examples
126
126
127
+
The examples in this section show how to use the syntax to help you get started.
Copy file name to clipboardExpand all lines: data-explorer/kusto/query/pattern-statement.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -56,13 +56,14 @@ For more information, see [Working with middle-tier applications](#work-with-mid
56
56
|*PathArgType*|`string`|| The type of the *PathArgType* argument. Possible values: `string`|
57
57
|*ArgValue*|`string`|:heavy_check_mark:| The *ArgName* and optional *PathName* tuple values to be mapped to an *expression*. |
58
58
|*PathValue*|`string`|| The value to map for *PathName*. |
59
-
|*expression*|`string`|:heavy_check_mark:| A tabular or lambda expression that references a function returning tabular data. For example: `Logs | where Timestamp > ago(1h)`|
59
+
|*expression*|`string`|:heavy_check_mark:| A tabular or lambda expression that references a function returning tabular data. For example: `Logs | where Timestamp > ago(1h)`|
60
60
61
61
## Examples
62
62
63
+
The examples in this section show how to use the syntax to help you get started.
The following example outputs a row with two columns. One column contains the sum of a series of numbers and the other column contains the value of the variable, `x`.
Copy file name to clipboardExpand all lines: data-explorer/kusto/query/query-parameters-statement.md
+7-1Lines changed: 7 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,7 +34,7 @@ To reference query parameters, the query text, or functions it uses, must first
34
34
|Name|Type|Required|Description|
35
35
|--|--|--|--|
36
36
|*Name1*|`string`|:heavy_check_mark:|The name of a query parameter used in the query.|
37
-
|*Type1*|`string`|:heavy_check_mark:|The corresponding type, such as `string` or `datetime`. The values provided by the user are encoded as strings. The appropriate parse method is applied to the query parameter to get a strongly-typed value.|
37
+
|*Type1*|`string`|:heavy_check_mark:|The corresponding type, such as `string` or `datetime`. The values provided by the user are encoded as strings. The appropriate parse method is applied to the query parameter to get a stronglytyped value.|
38
38
|*DefaultValue1*|`string`||A default value for the parameter. This value must be a literal of the appropriate scalar type.|
39
39
40
40
> [!NOTE]
@@ -44,8 +44,14 @@ To reference query parameters, the query text, or functions it uses, must first
44
44
45
45
## Example
46
46
47
+
The examples in this section show how to use the syntax to help you get started.
This query retrieves storm events from the *StormEvents* table where the total number of direct and indirect injuries exceeds a specified threshold (default is 90). It then projects the *EpisodeId*, *EventType*, and the total number of injuries for each of these events.
54
+
49
55
:::moniker range="azure-data-explorer"
50
56
> [!div class="nextstepaction"]
51
57
> <ahref="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA4WNuw7CMBAE+0j5hytBpKAFBBUpXEOPrHgFjvzifAEi8fEkQUBJO9qZNWicZtC1A/enpFl7CDjPvH6o0HYMs3YxnGlLq+V8UxYHiezrG4JkKosn3S8Y9GlqkfeW0QgtvkAF80Y7+hVHL3FsR14nm6OBMhVN1WOfUJFE0e7TGL7/9l+H314eyAAAAA=="target="_blank">Run the query</a>
Copy file name to clipboardExpand all lines: data-explorer/kusto/query/range-operator.md
+21-14Lines changed: 21 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: range operator
3
3
description: Learn how to use the range operator to generate a single-column table of values.
4
4
ms.reviewer: alexans
5
5
ms.topic: reference
6
-
ms.date: 01/07/2025
6
+
ms.date: 01/22/2025
7
7
---
8
8
# range operator
9
9
@@ -26,7 +26,7 @@ Generates a single-column table of values.
26
26
|--|--|--|--|
27
27
|*columnName*|`string`|:heavy_check_mark:| The name of the single column in the output table.|
28
28
|*start*|int, long, real, datetime, or timespan|:heavy_check_mark:| The smallest value in the output.|
29
-
|*stop*|int, long, real, datetime, or timespan|:heavy_check_mark:| The highest value being generated in the output or a bound on the highest value if *step*steps over this value.|
29
+
|*stop*|int, long, real, datetime, or timespan|:heavy_check_mark:| The highest value being generated in the output or a bound on the highest value if *step*is over this value.|
30
30
|*step*|int, long, real, datetime, or timespan|:heavy_check_mark:| The difference between two consecutive values.|
31
31
32
32
> [!NOTE]
@@ -39,6 +39,10 @@ whose values are *start*, *start* `+` *step*, ... up to and until *stop*.
39
39
40
40
## Examples
41
41
42
+
The example in this section shows how to use the syntax to help you get started.
@@ -134,16 +138,19 @@ whose type is `long` and results in values from one to eight incremented by thre
134
138
135
139
```kusto
136
140
range Steps from 1 to 8 step 3
141
+
```
142
+
143
+
**Output**
137
144
138
145
| Steps |
139
-
|-------|
140
-
| 1 |
141
-
| 4 |
142
-
| 7 |
146
+
|--|
147
+
| 1 |
148
+
| 4 |
149
+
| 7 |
143
150
144
151
### Traces over a time range
145
152
146
-
The following example shows how the `range` operator can be used to create a dimension table that is used to introduce zeros where the source data has no values. It takes timestamps from the last four hours and counts traces for each oneminute interval. When there are no traces for a specific interval, the count is zero.
153
+
The following example shows how the `range` operator can be used to create a dimension table that is used to introduce zeros where the source data has no values. It takes timestamps from the last four hours and counts traces for each one-minute interval. When there are no traces for a specific interval, the count is zero.
0 commit comments