diff --git a/data-explorer/create-cluster-and-database.md b/data-explorer/create-cluster-and-database.md index fe38994520..520da94aad 100644 --- a/data-explorer/create-cluster-and-database.md +++ b/data-explorer/create-cluster-and-database.md @@ -3,7 +3,7 @@ title: "Quickstart: Create an Azure Data Explorer cluster and database" description: In this quickstart, you learn how to create an Azure Data Explorer cluster and database. ms.reviewer: mblythe ms.topic: quickstart -ms.date: 07/02/2023 +ms.date: 06/03/2025 ms.custom: mode-portal adobe-target: true diff --git a/data-explorer/data-explorer-overview.md b/data-explorer/data-explorer-overview.md index 32bb469b5d..a9cb766e80 100644 --- a/data-explorer/data-explorer-overview.md +++ b/data-explorer/data-explorer-overview.md @@ -3,7 +3,7 @@ title: What is Azure Data Explorer? description: Azure Data Explorer is a fast and highly scalable data exploration service for log and telemetry data. ms.reviewer: mblythe ms.topic: overview -ms.date: 08/28/2023 +ms.date: 06/03/2025 adobe-target: true # Customer intent: As a data analyst, I want to understand Azure Data Explorer, so I can decide if it's suitable for my analytics workloads. @@ -68,13 +68,13 @@ Generally speaking, when you interact with Azure Data Explorer, you're going to > [!NOTE] > You can access your Azure Data Explorer resources either in the [Azure Data Explorer web UI](web-query-data.md) or by using [SDKs](/kusto/api/index?view=azure-data-explorer&preserve-view=true). -1. **Create database:** Create a *cluster* and then create one or more *databases* in that cluster. Each Azure Data Explorer cluster can hold up to 10,000 databases and each database up to 10,000 tables. The data in each table is stored in data shards also called "extents". All data is automatically indexed and partitioned based on the ingestion time. This means you can store a lot of varied data and because of the way it's stored, you get fast access to querying it. [Quickstart: Create an Azure Data Explorer cluster and database](create-cluster-and-database.md) +1. **Create database:** Create a *cluster* and then create one or more *databases* in that cluster. Each Azure Data Explorer cluster can hold up to 10,000 databases and each database up to 10,000 tables. The data in each table is stored in data shards also called "extents". All data is automatically indexed and partitioned based on the ingestion time. This means you can store a large ammount of varied data and because of the way it's stored, you get fast access to querying it. [Quickstart: Create an Azure Data Explorer cluster and database](create-cluster-and-database.md) 1. **Ingest data:** Load data into database tables so that you can run queries against it. Azure Data Explorer supports several [ingestion methods](ingest-data-overview.md), each with its own target scenarios. These methods include ingestion tools, connectors and plugins to diverse services, managed pipelines, programmatic ingestion using SDKs, and direct access to ingestion. Get started with the [get data experience](ingest-data-overview.md). 1. **Query database:** Azure Data Explorer uses the [Kusto Query Language](/kusto/query/index?view=azure-data-explorer&preserve-view=true), which is an expressive, intuitive, and highly productive query language. It offers a smooth transition from simple one-liners to complex data processing scripts, and supports querying structured, semi-structured, and unstructured (text search) data. There's a wide variety of query language operators and functions ([aggregation](/kusto/query/aggregation-functions?view=azure-data-explorer&preserve-view=true), filtering, [time series functions](/kusto/query/time-series-analysis?view=azure-data-explorer&preserve-view=true), [geospatial functions](/kusto/query/geospatial-grid-systems?view=azure-data-explorer&preserve-view=true), [joins](/kusto/query/join-operator?view=azure-data-explorer&preserve-view=true), [unions](/kusto/query/union-operator?view=azure-data-explorer&preserve-view=true), and more) in the language. KQL supports [cross-cluster and cross-database queries](/kusto/query/cross-cluster-or-database-queries?view=azure-data-explorer&preserve-view=true), and is feature rich from a parsing (json, XML, and more) perspective. The language also natively supports advanced analytics. - Use the web application to run, review, and share queries and results. You can also send queries programmatically (using an SDK) or to a REST API endpoint. If you're familiar with SQL, get started with the [SQL to Kusto cheat sheet](/kusto/query/sql-cheat-sheet?view=azure-data-explorer&preserve-view=true). [Quickstart: Query data in Azure Data Explorer web UI](web-query-data.md) + Use the web application to run, review, and share queries and results. You can also send queries programmatically (using an SDK) or to a REST API endpoint. If you're familiar with SQL, get started with the [SQL to Kusto cheat sheet](/kusto/query/sql-cheat-sheet?view=azure-data-explorer&preserve-view=true), and [Quickstart: Query data in Azure Data Explorer web UI](web-query-data.md). 1. **Visualize results:** Use different visual displays of your data in the native Azure Data Explorer [Dashboards](azure-data-explorer-dashboards.md). You can also display your results using connectors to some of the [leading visualization services](integrate-visualize-overview.md), such as [Power BI](power-bi-data-connector.md?tabs=connector) and [Grafana](grafana.md). Azure Data Explorer also has [ODBC](connect-odbc.md) and JDBC connector support to tools such as [Tableau](tableau.md) and [Sisense](sisense.md). diff --git a/data-explorer/index.yml b/data-explorer/index.yml index 0a7b550b59..e628369ae1 100644 --- a/data-explorer/index.yml +++ b/data-explorer/index.yml @@ -5,7 +5,7 @@ summary: Azure Data Explorer is a fast, fully managed data analytics service for metadata: title: Azure Data Explorer documentation - description: Azure Data Explorer is a log analytics cloud platform optimized for ad hoc big data queries. + description: Azure Data Explorer is a log analytics cloud platform optimized for as needed big data queries. ms.service: azure-data-explorer ms.topic: landing-page author: spelluru diff --git a/data-explorer/kusto/query/index.md b/data-explorer/kusto/query/index.md index f0d619f879..ed40a96b53 100644 --- a/data-explorer/kusto/query/index.md +++ b/data-explorer/kusto/query/index.md @@ -4,7 +4,7 @@ description: Learn about how to use Kusto Query Language (KQL) to explore data, ms.reviewer: alexans ms.topic: reference ms.custom: build-2023, build-2023-dataai -ms.date: 08/11/2024 +ms.date: 06/03/2025 adobe-target: true monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel" --- @@ -117,7 +117,7 @@ KQL is used by many other Microsoft services. For specific information on the us * [Log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview) * [Understanding the Azure Resource Graph query language](/azure/governance/resource-graph/concepts/query-language) -* [Proactively hunt for threats with advanced hunting in Microsoft 365 Defender](/microsoft-365/security/defender/advanced-hunting-overview) +* [Proactively hunt for threats with advanced hunting in Microsoft Defender](/microsoft-365/security/defender/advanced-hunting-overview) * [CMPivot queries](/mem/configmgr/core/servers/manage/cmpivot-overview#queries) ## Related content diff --git a/data-explorer/start-for-free-web-ui.md b/data-explorer/start-for-free-web-ui.md index 526c5484ce..6d3a46b360 100644 --- a/data-explorer/start-for-free-web-ui.md +++ b/data-explorer/start-for-free-web-ui.md @@ -39,7 +39,7 @@ Quick actions make it easy to get started with your cluster. You can create a da To start a quick action, under **Actions**, select the action you want to perform: * **Ingest data**: Use this action to load data into your cluster. For more information, see the [ingestion overview](ingest-data-overview.md). -* **Query data**: Use this action to run a query against data in your cluster. For more information, see [Run queries](web-query-data.md#run-queries). +* **Query data**: Use this action to run a query against data in your cluster. For more information, see [Run a query](web-query-data.md#run-a-query). * **Create database**: Use this action if you want to create a new database in your cluster. 1. In the **Create new database** card, select **Create**. 1. On the **Create database** page, enter a name for the database, and then select **Create Database**. diff --git a/data-explorer/web-query-data.md b/data-explorer/web-query-data.md index 3da83fc28d..9c258944fd 100644 --- a/data-explorer/web-query-data.md +++ b/data-explorer/web-query-data.md @@ -1,21 +1,23 @@ --- -title: 'Quickstart: Query sample data in the Azure Data Explorer web UI' -description: In this quickstart, you'll learn how to query and share sample data in the Azure Data Explorer web UI. +title: 'Quickstart: Learn How to Query Sample Data in the Azure Data Explorer Web UI' +description: In this quickstart, you learn how to query and share sample data in the Azure Data Explorer web UI. ms.reviewer: olgolden ms.topic: quickstart -ms.date: 02/01/2021 +ms.date: 06/03/2025 ms.custom: mode-portal #Customer intent: As a user of Azure Data Explorer, I want to query data in the Web UI and share data. This will allow me to understand my data and share analysis with colleagues. --- -# Quickstart: Query sample data - -Azure Data Explorer provides a web experience that enables you to connect to your Azure Data Explorer clusters and write, run, and share [Kusto Query Language (KQL)](/kusto/query/index?view=azure-data-explorer&preserve-view=true) commands and queries. The web experience is available in the Azure portal and as a stand-alone web application, the [Azure Data Explorer web UI](https://dataexplorer.azure.com). In this quickstart, you'll learn how to query data in the stand-alone Azure Data Explorer web UI. +# Quickstart: learn how to Query sample data +In this Quickstart, you'll learn how to query data in the stand-alone Azure Data Explorer web UI. +Azure Data Explorer provides a web experience that enables you to connect to your Azure Data Explorer clusters and write, run, and share [Kusto Query Language (KQL)](/kusto/query/index?view=azure-data-explorer&preserve-view=true) commands and queries. The web experience is available in the Azure portal and as a stand-alone web application, the [Azure Data Explorer web UI](https://dataexplorer.azure.com). In the Azure Data Explorer web UI, the query editor provides suggestions and warnings as you write your queries. To customize which suggestions and warnings you receive, see [Set query recommendations](web-customize-settings.md#set-query-recommendations). ## Prerequisites +Before you begin, make sure you have the following items: + * A Microsoft account or a Microsoft Entra user identity. An Azure subscription isn't required. * An Azure Data Explorer cluster and database. Use the publicly available [**help** cluster](https://dataexplorer.azure.com/help) or [create a cluster and database](create-cluster-and-database.md). * Sign in to the [Azure Data Explorer web UI](https://dataexplorer.azure.com/). @@ -24,29 +26,25 @@ In the Azure Data Explorer web UI, the query editor provides suggestions and war When you first open the web UI, in the **Query** page, you should see a connection to the **help** cluster. The examples in this quickstart use the `StormEvents` table in the `Samples` database of the **help** cluster. -If you want to run queries on a different cluster, you must add a connection to that cluster. - -To add a new cluster connection, do the following: +If you want to run queries on a different cluster, you must add a connection to that cluster. To add a new cluster connection, do the following: 1. On the left menu, select **Query**. 1. In the upper left pane, select **Add connection**. 1. In the **Add connection** dialog box, enter the cluster **Connection URI** and **Display name**. 1. Select **Add** to add the connection. -If you don't see the **help** cluster, add it using the previous steps. Use "help" as the **Connection URI**. +If you don't see the **help** cluster, add it using the previous steps and use "help" as the **Connection URI**. -## Run queries +## Run a query To run a query, you must select the database on which you want to run the query in order to set the query context. 1. In the **Cluster connection** pane, under the **help** cluster, select the **Samples** database. - :::image type="content" source="media/web-query-data/samples-db-context.png" alt-text="Screenshot of the Samples database selected."::: - 1. Copy and paste the following query into the query window. At the top of the window, select **Run**. > [!div class="nextstepaction"] - > Run the query + > [Run the query](https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAAwsuyS/KdS1LzSsp5qpRKM4vKlFIqlQILkksKgnJzE1VSEktTgZKlCRmpyoYGgAAl2udPi4AAAA=) ```kusto StormEvents @@ -61,7 +59,7 @@ To run a query, you must select the database on which you want to run the query 1. Copy and paste the following query into the query window, below the first query. Notice how it isn't formatted on separate lines like the first query. > [!div class="nextstepaction"] - > Run the query + > [Run the query](https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA0WMQQrDMBAD73mFHtBD+4fmWgrJB7bxUtzirFmLgCGP74YeotNIA5poXsZNVzbsaObEq2OiOOdcFEnbggGRHdXtowtPe8G4pj/ExqMfT3OvgXcp8tanW1VnD1Vzs6QPcRfmTeOQ8lXcrj+ZB1DRhAAAAA==) ```kusto StormEvents | sort by StartTime desc @@ -82,7 +80,7 @@ To run a query, you must select the database on which you want to run the query 1. Let's run one more query to see a different type of output. > [!div class="nextstepaction"] - > Run the query + > [Run the query](https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA1WMsQ7CQAxDd74iYyt1KBtLGZDY2PoBKFyj9hBJUJprBeLjuYMFFkv2s927Gh8XEp83L5gTM1p8ElCJzkGTePfRqm6A4wAd4DJWBxqjnNBruDygd3QqazUvPteyWyeyvx/Yw3bXthndTa8U/DtsfjsZGslABkFviSVMaP4GmKtNLqQAAAA=) ```kusto StormEvents @@ -105,14 +103,15 @@ To run a query, you must select the database on which you want to run the query ## Provide feedback -1. In the upper right of the application, select the feedback icon :::image type="icon" source="media/web-query-data/icon-feedback.png" border="false":::. +Do the following to provide feedback: +1. In the upper right of the application, select the feedback icon :::image type="icon" source="media/web-query-data/icon-feedback.png" border="false":::. 1. Enter your feedback, then select **Submit**. ## Clean up resources You didn't create any resources in this quickstart, but if you'd like to remove one or both clusters from the application, right-click the cluster and select **Remove connection**. -Another option is to select **Clear local state** from the **Settings** > **General** tab. This action will remove all cluster connections and close all open query tabs. +Another option is to select **Clear local state** from the **Settings** > **General** tab. This action removes all cluster connections and closes all open query tabs. ## Related content