diff --git a/data-explorer/kusto/query/sort-operator.md b/data-explorer/kusto/query/sort-operator.md index 056f718fac..b7b746f236 100644 --- a/data-explorer/kusto/query/sort-operator.md +++ b/data-explorer/kusto/query/sort-operator.md @@ -3,13 +3,11 @@ title: sort operator description: Learn how to use the sort operator to sort the rows of the input table by one or more columns. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 -monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel " +ms.date: 01/21/2025 --- # sort operator -> [!INCLUDE [applies](../includes/applies-to-version/applies.md)] [!INCLUDE [fabric](../includes/applies-to-version/fabric.md)] [!INCLUDE [azure-data-explorer](../includes/applies-to-version/azure-data-explorer.md)] [!INCLUDE [monitor](../includes/applies-to-version/monitor.md)] [!INCLUDE [sentinel](../includes/applies-to-version/sentinel.md)] - +> [!INCLUDE [applies](../includes/applies-to-version/applies.md)] [!INCLUDE [fabric](../includes/applies-to-version/fabric.md)] [!INCLUDE [azure-data-explorer](../includes/applies-to-version/azure-data-explorer.md)] [!INCLUDE [monitor](../includes/applies-to-version/monitor.md)] [!INCLUDE [sentinel](../includes/applies-to-version/sentinel.md)] Sorts the rows of the input table into order by one or more columns. @@ -52,6 +50,8 @@ When the input table contains the special values `null`, `NaN`, `-inf` and `+inf The following example shows storm events by state in alphabetical order with the most recent storms in each state appearing first. +[!INCLUDE [help-cluster-note](../includes/help-cluster-note.md)] + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query @@ -62,6 +62,8 @@ StormEvents | sort by State asc, StartTime desc ``` +**Output** + This table only shows the top 10 query results. |StartTime|State|EventType|...| diff --git a/data-explorer/kusto/query/summarize-operator.md b/data-explorer/kusto/query/summarize-operator.md index cbd5f974c5..90257fcbc6 100644 --- a/data-explorer/kusto/query/summarize-operator.md +++ b/data-explorer/kusto/query/summarize-operator.md @@ -3,14 +3,12 @@ title: summarize operator description: Learn how to use the summarize operator to produce a table that summarizes the content of the input table. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 +ms.date: 01/21/2025 ms.localizationpriority: high -monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel " --- # summarize operator -> [!INCLUDE [applies](../includes/applies-to-version/applies.md)] [!INCLUDE [fabric](../includes/applies-to-version/fabric.md)] [!INCLUDE [azure-data-explorer](../includes/applies-to-version/azure-data-explorer.md)] [!INCLUDE [monitor](../includes/applies-to-version/monitor.md)] [!INCLUDE [sentinel](../includes/applies-to-version/sentinel.md)] - +> [!INCLUDE [applies](../includes/applies-to-version/applies.md)] [!INCLUDE [fabric](../includes/applies-to-version/fabric.md)] [!INCLUDE [azure-data-explorer](../includes/applies-to-version/azure-data-explorer.md)] [!INCLUDE [monitor](../includes/applies-to-version/monitor.md)] [!INCLUDE [sentinel](../includes/applies-to-version/sentinel.md)] Produces a table that aggregates the content of the input table. @@ -30,7 +28,7 @@ Produces a table that aggregates the content of the input table. |*Column*| `string` ||The name for the result column. Defaults to a name derived from the expression.| |*Aggregation*| `string` | :heavy_check_mark:|A call to an [aggregation function](aggregation-functions.md) such as `count()` or `avg()`, with column names as arguments.| |*GroupExpression*|scalar| :heavy_check_mark:|A scalar expression that can reference the input data. The output will have as many records as there are distinct values of all the group expressions.| -|*SummarizeParameters*| `string` ||Zero or more space-separated parameters in the form of *Name* `=` *Value* that control the behavior. See [supported parameters](#supported-parameters). +|*SummarizeParameters*| `string` ||Zero or more space-separated parameters in the form of *Name* `=` *Value* that control the behavior. See [supported parameters](#supported-parameters).| > [!NOTE] > When the input table is empty, the output depends on whether *GroupExpression* @@ -39,7 +37,6 @@ Produces a table that aggregates the content of the input table. > * If *GroupExpression* is not provided, the output will be a single (empty) row. > * If *GroupExpression* is provided, the output will have no rows. - ### Supported parameters |Name |Description | @@ -78,6 +75,10 @@ The following table summarizes the default values of aggregations: ## Examples +The example in this section shows how to use the syntax to help you get started. + +[!INCLUDE [help-cluster](../includes/help-cluster-note.md)] + :::image type="content" source="media/summarizeoperator/summarize-price-by-supplier.png" alt-text="Summarize price by fruit and supplier."::: ### Unique combination @@ -131,6 +132,7 @@ StormEvents | 01:08:00 | 11:55:00 | ::: moniker range="microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel" + ### Distinct count The following query calculates the number of unique storm event types for each state and sorts the results by the number of unique storm types: @@ -192,7 +194,6 @@ When the input of `summarize` operator doesn't have an empty group-by key, the r > [!div class="nextstepaction"] > Run the query - ```kusto datatable(x:long)[] | summarize any_x=take_any(x), arg_max_x=arg_max(x, *), arg_min_x=arg_min(x, *), avg(x), buildschema(todynamic(tostring(x))), max(x), min(x), percentile(x, 55), hll(x) ,stdev(x), sum(x), sumif(x, x > 0), tdigest(x), variance(x) @@ -206,11 +207,9 @@ datatable(x:long)[] The result of `avg_x(x)` is `NaN` due to dividing by 0. - > [!div class="nextstepaction"] > Run the query - ```kusto datatable(x:long)[] | summarize count(x), countif(x > 0) , dcount(x), dcountif(x, x > 0) @@ -222,11 +221,9 @@ datatable(x:long)[] |---|---|---|---| |0|0|0|0| - > [!div class="nextstepaction"] > Run the query - ```kusto datatable(x:long)[] | summarize make_set(x), make_list(x) @@ -259,11 +256,9 @@ range x from 1 to 4 step 1 The regular count will count nulls: - > [!div class="nextstepaction"] > Run the query - ```kusto range x from 1 to 2 step 1 | extend y = iff(x == 1, real(null), real(5)) @@ -276,11 +271,9 @@ range x from 1 to 2 step 1 |---| |2| - > [!div class="nextstepaction"] > Run the query - ```kusto range x from 1 to 2 step 1 | extend y = iff(x == 1, real(null), real(5)) diff --git a/data-explorer/kusto/query/visualization-anomalychart.md b/data-explorer/kusto/query/visualization-anomalychart.md index 105feb687e..c32dab11ae 100644 --- a/data-explorer/kusto/query/visualization-anomalychart.md +++ b/data-explorer/kusto/query/visualization-anomalychart.md @@ -3,7 +3,7 @@ title: Anomaly chart visualization description: This article describes the anomaly chart visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 +ms.date: 01/21/2025 monikerRange: "microsoft-fabric || azure-data-explorer" --- # Anomaly chart @@ -61,6 +61,10 @@ This visualization supports splitting into multiple y-axis values. The supported ## Example +The example in this section shows how to use the syntax to help you get started. + +[!INCLUDE [help-cluster](../includes/help-cluster-note.md)] + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query diff --git a/data-explorer/kusto/query/visualization-areachart.md b/data-explorer/kusto/query/visualization-areachart.md index e9756ed538..9d98844c0d 100644 --- a/data-explorer/kusto/query/visualization-areachart.md +++ b/data-explorer/kusto/query/visualization-areachart.md @@ -3,8 +3,7 @@ title: Area chart visualization description: This article describes the area chart visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 -monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel" +ms.date: 01/28/2025 --- # Area chart @@ -61,7 +60,6 @@ This visualization supports splitting into multiple y-axis values: |`axes` |A single chart is displayed with multiple y-axes (one per series).| |`panels` |One chart is rendered for each `ycolumn` value. Maximum five panels.| - ::: moniker-end ::: moniker range="azure-monitor || microsoft-sentinel" @@ -92,6 +90,10 @@ The supported values of this property are: ## Examples +The example in this section shows how to use the syntax to help you get started. + +[!INCLUDE [help-cluster](../includes/help-cluster-note.md)] + ### Simple area chart The following example shows a basic area chart visualization. diff --git a/data-explorer/kusto/query/visualization-barchart.md b/data-explorer/kusto/query/visualization-barchart.md index 4d14f70dd4..89b696959b 100644 --- a/data-explorer/kusto/query/visualization-barchart.md +++ b/data-explorer/kusto/query/visualization-barchart.md @@ -3,8 +3,7 @@ title: Bar chart visualization description: This article describes the bar chart visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 -monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel" +ms.date: 01/28/2025 --- # Bar chart @@ -91,6 +90,10 @@ The supported values of this property are: ## Examples +The example in this section shows how to use the syntax to help you get started. + +[!INCLUDE [help-cluster](../includes/help-cluster-note.md)] + ### Render a bar chart The following query creates a bar chart displaying the number of storm events for each state, filtering only those states with more than 10 events. The chart provides a visual representation of the event distribution across different states. @@ -157,6 +160,8 @@ StormEvents ### Use the `ysplit` property +The following query provides a daily summary of storm-related injuries and deaths, visualized as a bar chart with split axes/panels for better comparison. + > [!div class="nextstepaction"] > Run the query @@ -189,5 +194,4 @@ StormEvents :::image type="content" source="media/visualization-barchart/bar-chart-ysplit-panels.png" alt-text="Screenshot of column chart using ysplit panels property." lightbox="media/visualization-barchart/bar-chart-ysplit-panels.png"::: - -::: moniker-end \ No newline at end of file +::: moniker-end diff --git a/data-explorer/kusto/query/visualization-card.md b/data-explorer/kusto/query/visualization-card.md index 0072548e6d..ea1e5f7a1c 100644 --- a/data-explorer/kusto/query/visualization-card.md +++ b/data-explorer/kusto/query/visualization-card.md @@ -3,7 +3,7 @@ title: Card visualization description: This article describes the card visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 +ms.date: 01/28/2025 monikerRange: "microsoft-fabric || azure-data-explorer" --- # Card @@ -38,6 +38,10 @@ All properties are optional. ## Example +This query provides a count of flood events in Virginia and displays the result in a card format. + +[!INCLUDE [help-cluster-note](../includes/help-cluster-note.md)] + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query diff --git a/data-explorer/kusto/query/visualization-columnchart.md b/data-explorer/kusto/query/visualization-columnchart.md index 3bdc53a41c..c47c1a7e07 100644 --- a/data-explorer/kusto/query/visualization-columnchart.md +++ b/data-explorer/kusto/query/visualization-columnchart.md @@ -3,8 +3,7 @@ title: Column chart visualization description: This article describes the column chart visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 -monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel" +ms.date: 01/29/2025 --- # Column chart @@ -93,13 +92,17 @@ The supported values of this property are: ## Examples +The example in this section shows how to use the syntax to help you get started. + +[!INCLUDE [help-cluster](../includes/help-cluster-note.md)] + ### Render a column chart +This query provides a visual representation of states with a high frequency of storm events, specifically those with more than 10 events, using a column chart. > [!div class="nextstepaction"] > Run the query - ```kusto StormEvents | summarize event_count=count() by State @@ -112,6 +115,8 @@ StormEvents ### Use the `ysplit` property +This query provides a daily summary of storm-related injuries and deaths, visualized as a column chart with split axes/panels for better comparison. + > [!div class="nextstepaction"] > Run the query @@ -132,7 +137,6 @@ To split the view into separate panels, specify `panels` instead of `axes`: > [!div class="nextstepaction"] > Run the query - ```kusto StormEvents | summarize @@ -151,6 +155,8 @@ StormEvents ## Example +This query helps you identify states with a significant number of storm events and presents the information in a clear, visual format. + > [!div class="nextstepaction"] > Run the query diff --git a/data-explorer/kusto/query/visualization-ladderchart.md b/data-explorer/kusto/query/visualization-ladderchart.md index 3090fb323b..f9ad535d6d 100644 --- a/data-explorer/kusto/query/visualization-ladderchart.md +++ b/data-explorer/kusto/query/visualization-ladderchart.md @@ -3,7 +3,7 @@ title: Ladder chart visualization description: This article describes the ladder chart visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 +ms.date: 01/29/2025 monikerRange: "azure-data-explorer" --- # Ladder chart @@ -26,7 +26,7 @@ The last two columns are the x-axis, and the other columns are the y-axis. | Name | Type | Required | Description | | -- | -- | -- | -- | -| *T* | `string` | :heavy_check_mark: | Input table name. +| *T* | `string` | :heavy_check_mark: | Input table name| | *propertyName*, *propertyValue* | `string` | | A comma-separated list of key-value property pairs. See [supported properties](#supported-properties).| ### Supported properties @@ -50,8 +50,14 @@ All properties are optional. ## Examples +The example in this section shows how to use the syntax to help you get started. + +The examples in this article use publicly available tables in the help cluster, such as the *StormEvents* table in the Samples database. + ### Dates of storms by state +This query outputs a state-wise visualization of the duration of rain-related storm events, displayed as a ladder chart to help you analyze the temporal distribution of these events. + ```kusto StormEvents | where EventType has "rain" @@ -63,6 +69,8 @@ StormEvents ### Dates of storms by event type +This query outputs a visualization of the duration of various storm events in Washington, displayed as a ladder chart to help you analyze the temporal distribution of these events by type. + ```kusto StormEvents | where State == "WASHINGTON" @@ -74,6 +82,8 @@ StormEvents ### Dates of storms by state and event type +This query outputs a visualization of the duration of various storm events in states starting with "W", displayed as a ladder chart to help you analyze the temporal distribution of these events by state and event type. + ```kusto StormEvents | where State startswith "W" diff --git a/data-explorer/kusto/query/visualization-linechart.md b/data-explorer/kusto/query/visualization-linechart.md index 56d090d23d..897134a9c7 100644 --- a/data-explorer/kusto/query/visualization-linechart.md +++ b/data-explorer/kusto/query/visualization-linechart.md @@ -3,7 +3,7 @@ title: Line chart visualization description: This article describes the line chart visualization. ms.reviewer: alexans ms.topic: reference -ms.date: 08/11/2024 +ms.date: 01/29/2025 monikerRange: "microsoft-fabric || azure-data-explorer" --- # Line chart @@ -25,7 +25,7 @@ The line chart visual is the most basic type of chart. The first column of the q | Name | Type | Required | Description | | -- | -- | -- | -- | -| *T* | `string` | :heavy_check_mark: | Input table name. +| *T* | `string` | :heavy_check_mark: | Input table name.| | *propertyName*, *propertyValue* | `string` | | A comma-separated list of key-value property pairs. See [supported properties](#supported-properties).| ### Supported properties @@ -60,8 +60,14 @@ This visualization supports splitting into multiple y-axis values: ## Examples +The example in this section shows how to use the syntax to help you get started. + +[!INCLUDE [help-cluster](../includes/help-cluster-note.md)] + ### Render a line chart +This query retrieves storm events in Virginia, focusing on the start time and property damage, and then displays this information in a line chart. + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query @@ -78,6 +84,8 @@ StormEvents ### Label a line chart +This query retrieves storm events in Virginia, focusing on the start time and property damage, and then displays this information in a line chart with specified titles for better clarity and presentation. + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query @@ -99,6 +107,8 @@ StormEvents ### Limit values displayed on the y-axis +This query retrieves storm events in Virginia, focusing on the start time and property damage, and then displays this information in a line chart with specified y-axis limits for better visualization of the data. + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query @@ -115,6 +125,8 @@ StormEvents ### View multiple y-axes +This query retrieves hail events in Texas, Nebraska, and Kansas. It counts the number of hail events per day for each state, and then displays this information in a line chart with separate panels for each state. + :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] > Run the query diff --git a/data-explorer/whats-new-archive.md b/data-explorer/whats-new-archive.md index 08dcee38cf..4dfb4bd7af 100644 --- a/data-explorer/whats-new-archive.md +++ b/data-explorer/whats-new-archive.md @@ -9,6 +9,15 @@ ms.date: 12/11/2024 Welcome to what's new in Azure Data Explorer archive. This article is an archive of new and significantly updated content in the Azure Data Explorer documentation. +## January 2024 + +**General** + +| Article title | Description | +|--|--| +| - [Integrations overview](integrate-overview.md)
- [Data integrations overview](integrate-data-overview.md)
- [Query integrations overview](integrate-query-overview.md)
- [Visualize integrations overview](integrate-visualize-overview.md) | New articles. Describes the available data connectors, tools, and query integrations, and updated article on the available visualize integrations.| +| [Schema optimization best practices](schema-best-practice.md)| New article. Describes the best practices for schema design in Azure Data Explorer.| + ## December 2023 **General** diff --git a/data-explorer/whats-new.md b/data-explorer/whats-new.md index 1178c0bfb2..59a72f6f45 100644 --- a/data-explorer/whats-new.md +++ b/data-explorer/whats-new.md @@ -9,6 +9,25 @@ ms.date: 01/14/2025 Welcome to what's new in Azure Data Explorer. This article details new and updated content in the Azure Data Explorer documentation. +## January 2025 + +**General** + +| Article title | Description | +|--|--| +| [Customize settings in the web UI](web-customize-settings.md) | Updated topic. Added how to enable cross-tenant dashboard sharing. | +| [Share dashboards](azure-data-explorer-dashboard-share.md) | New article. Describes how to share dashboards in Azure Data Explorer. | +| [Share queries from web UI](web-share-queries.md) | Updated topic. Added information about shared queries opening in protected mode for enhanced security. | +| [Troubleshoot: Failure to connect to a cluster](troubleshoot-connect-cluster.md) | Updated topic. Added instructions how to verify a cluster is active. | +| [Manage public access to your cluster](security-network-restrict-public-access.md) | Updated topic. Added section to manage access to your cluster by specifying selected IP addresses, CIDER notations, or service tags. | + +**Query** + +| Article title | Description | +|--|--| +| [range operator](/kusto/query/range-operator?view=azure-data-explorer&preserve-view=true) | Updated topic. Added example of using the range operator to combine different stop times. | +| [replace_string() function](/kusto/query/replace-string-function?view=azure-data-explorer&preserve-view=true) | Updated topic. Added a simpler example that replaces words in a string. | + ## December 2024 **Functions library** @@ -220,12 +239,3 @@ No updates. |Article title| Description| |--|--| | [sort operator](/kusto/query/sort-operator?view=azure-data-explorer&preserve-view=true)| Updated article. Added section on the use of special floating-point values.| - -## January 2024 - -**General** - -| Article title | Description | -|--|--| -| - [Integrations overview](integrate-overview.md)
- [Data integrations overview](integrate-data-overview.md)
- [Query integrations overview](integrate-query-overview.md)
- [Visualize integrations overview](integrate-visualize-overview.md) | New articles. Describes the available data connectors, tools, and query integrations, and updated article on the available visualize integrations.| -| [Schema optimization best practices](schema-best-practice.md)| New article. Describes the best practices for schema design in Azure Data Explorer.|