Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion data-explorer/create-cluster-and-database.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: "Quickstart: Create an Azure Data Explorer cluster and database"
description: In this quickstart, you learn how to create an Azure Data Explorer cluster and database.
ms.reviewer: mblythe
ms.topic: quickstart
ms.date: 07/02/2023
ms.date: 06/03/2025
ms.custom: mode-portal
adobe-target: true

Expand Down
6 changes: 3 additions & 3 deletions data-explorer/data-explorer-overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: What is Azure Data Explorer?
description: Azure Data Explorer is a fast and highly scalable data exploration service for log and telemetry data.
ms.reviewer: mblythe
ms.topic: overview
ms.date: 08/28/2023
ms.date: 06/03/2025
adobe-target: true

# Customer intent: As a data analyst, I want to understand Azure Data Explorer, so I can decide if it's suitable for my analytics workloads.
Expand Down Expand Up @@ -68,13 +68,13 @@ Generally speaking, when you interact with Azure Data Explorer, you're going to
> [!NOTE]
> You can access your Azure Data Explorer resources either in the [Azure Data Explorer web UI](web-query-data.md) or by using [SDKs](/kusto/api/index?view=azure-data-explorer&preserve-view=true).

1. **Create database:** Create a *cluster* and then create one or more *databases* in that cluster. Each Azure Data Explorer cluster can hold up to 10,000 databases and each database up to 10,000 tables. The data in each table is stored in data shards also called "extents". All data is automatically indexed and partitioned based on the ingestion time. This means you can store a lot of varied data and because of the way it's stored, you get fast access to querying it. [Quickstart: Create an Azure Data Explorer cluster and database](create-cluster-and-database.md)
1. **Create database:** Create a *cluster* and then create one or more *databases* in that cluster. Each Azure Data Explorer cluster can hold up to 10,000 databases and each database up to 10,000 tables. The data in each table is stored in data shards also called "extents". All data is automatically indexed and partitioned based on the ingestion time. This means you can store a large ammount of varied data and because of the way it's stored, you get fast access to querying it. [Quickstart: Create an Azure Data Explorer cluster and database](create-cluster-and-database.md)

1. **Ingest data:** Load data into database tables so that you can run queries against it. Azure Data Explorer supports several [ingestion methods](ingest-data-overview.md), each with its own target scenarios. These methods include ingestion tools, connectors and plugins to diverse services, managed pipelines, programmatic ingestion using SDKs, and direct access to ingestion. Get started with the [get data experience](ingest-data-overview.md).

1. **Query database:** Azure Data Explorer uses the [Kusto Query Language](/kusto/query/index?view=azure-data-explorer&preserve-view=true), which is an expressive, intuitive, and highly productive query language. It offers a smooth transition from simple one-liners to complex data processing scripts, and supports querying structured, semi-structured, and unstructured (text search) data. There's a wide variety of query language operators and functions ([aggregation](/kusto/query/aggregation-functions?view=azure-data-explorer&preserve-view=true), filtering, [time series functions](/kusto/query/time-series-analysis?view=azure-data-explorer&preserve-view=true), [geospatial functions](/kusto/query/geospatial-grid-systems?view=azure-data-explorer&preserve-view=true), [joins](/kusto/query/join-operator?view=azure-data-explorer&preserve-view=true), [unions](/kusto/query/union-operator?view=azure-data-explorer&preserve-view=true), and more) in the language. KQL supports [cross-cluster and cross-database queries](/kusto/query/cross-cluster-or-database-queries?view=azure-data-explorer&preserve-view=true), and is feature rich from a parsing (json, XML, and more) perspective. The language also natively supports advanced analytics.

Use the web application to run, review, and share queries and results. You can also send queries programmatically (using an SDK) or to a REST API endpoint. If you're familiar with SQL, get started with the [SQL to Kusto cheat sheet](/kusto/query/sql-cheat-sheet?view=azure-data-explorer&preserve-view=true). [Quickstart: Query data in Azure Data Explorer web UI](web-query-data.md)
Use the web application to run, review, and share queries and results. You can also send queries programmatically (using an SDK) or to a REST API endpoint. If you're familiar with SQL, get started with the [SQL to Kusto cheat sheet](/kusto/query/sql-cheat-sheet?view=azure-data-explorer&preserve-view=true), and [Quickstart: Query data in Azure Data Explorer web UI](web-query-data.md).

1. **Visualize results:** Use different visual displays of your data in the native Azure Data Explorer [Dashboards](azure-data-explorer-dashboards.md). You can also display your results using connectors to some of the [leading visualization services](integrate-visualize-overview.md), such as [Power BI](power-bi-data-connector.md?tabs=connector) and [Grafana](grafana.md). Azure Data Explorer also has [ODBC](connect-odbc.md) and JDBC connector support to tools such as [Tableau](tableau.md) and [Sisense](sisense.md).

Expand Down
2 changes: 1 addition & 1 deletion data-explorer/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ summary: Azure Data Explorer is a fast, fully managed data analytics service for

metadata:
title: Azure Data Explorer documentation
description: Azure Data Explorer is a log analytics cloud platform optimized for ad hoc big data queries.
description: Azure Data Explorer is a log analytics cloud platform optimized for as needed big data queries.
ms.service: azure-data-explorer
ms.topic: landing-page
author: spelluru
Expand Down
4 changes: 2 additions & 2 deletions data-explorer/kusto/query/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ description: Learn about how to use Kusto Query Language (KQL) to explore data,
ms.reviewer: alexans
ms.topic: reference
ms.custom: build-2023, build-2023-dataai
ms.date: 08/11/2024
ms.date: 06/03/2025
adobe-target: true
monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel"
---
Expand Down Expand Up @@ -117,7 +117,7 @@ KQL is used by many other Microsoft services. For specific information on the us

* [Log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview)
* [Understanding the Azure Resource Graph query language](/azure/governance/resource-graph/concepts/query-language)
* [Proactively hunt for threats with advanced hunting in Microsoft 365 Defender](/microsoft-365/security/defender/advanced-hunting-overview)
* [Proactively hunt for threats with advanced hunting in Microsoft Defender](/microsoft-365/security/defender/advanced-hunting-overview)
* [CMPivot queries](/mem/configmgr/core/servers/manage/cmpivot-overview#queries)

## Related content
Expand Down
2 changes: 1 addition & 1 deletion data-explorer/start-for-free-web-ui.md
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ Quick actions make it easy to get started with your cluster. You can create a da
To start a quick action, under **Actions**, select the action you want to perform:

* **Ingest data**: Use this action to load data into your cluster. For more information, see the [ingestion overview](ingest-data-overview.md).
* **Query data**: Use this action to run a query against data in your cluster. For more information, see [Run queries](web-query-data.md#run-queries).
* **Query data**: Use this action to run a query against data in your cluster. For more information, see [Run a query](web-query-data.md#run-a-query).
* **Create database**: Use this action if you want to create a new database in your cluster.
1. In the **Create new database** card, select **Create**.
1. On the **Create database** page, enter a name for the database, and then select **Create Database**.
Expand Down
35 changes: 17 additions & 18 deletions data-explorer/web-query-data.md
Original file line number Diff line number Diff line change
@@ -1,21 +1,23 @@
---
title: 'Quickstart: Query sample data in the Azure Data Explorer web UI'
description: In this quickstart, you'll learn how to query and share sample data in the Azure Data Explorer web UI.
title: 'Quickstart: Learn How to Query Sample Data in the Azure Data Explorer Web UI'
description: In this quickstart, you learn how to query and share sample data in the Azure Data Explorer web UI.
ms.reviewer: olgolden
ms.topic: quickstart
ms.date: 02/01/2021
ms.date: 06/03/2025
ms.custom: mode-portal

#Customer intent: As a user of Azure Data Explorer, I want to query data in the Web UI and share data. This will allow me to understand my data and share analysis with colleagues.
---
# Quickstart: Query sample data

Azure Data Explorer provides a web experience that enables you to connect to your Azure Data Explorer clusters and write, run, and share [Kusto Query Language (KQL)](/kusto/query/index?view=azure-data-explorer&preserve-view=true) commands and queries. The web experience is available in the Azure portal and as a stand-alone web application, the [Azure Data Explorer web UI](https://dataexplorer.azure.com). In this quickstart, you'll learn how to query data in the stand-alone Azure Data Explorer web UI.
# Quickstart: learn how to Query sample data

In this Quickstart, you'll learn how to query data in the stand-alone Azure Data Explorer web UI.
Azure Data Explorer provides a web experience that enables you to connect to your Azure Data Explorer clusters and write, run, and share [Kusto Query Language (KQL)](/kusto/query/index?view=azure-data-explorer&preserve-view=true) commands and queries. The web experience is available in the Azure portal and as a stand-alone web application, the [Azure Data Explorer web UI](https://dataexplorer.azure.com).
In the Azure Data Explorer web UI, the query editor provides suggestions and warnings as you write your queries. To customize which suggestions and warnings you receive, see [Set query recommendations](web-customize-settings.md#set-query-recommendations).

## Prerequisites

Before you begin, make sure you have the following items:

* A Microsoft account or a Microsoft Entra user identity. An Azure subscription isn't required.
* An Azure Data Explorer cluster and database. Use the publicly available [**help** cluster](https://dataexplorer.azure.com/help) or [create a cluster and database](create-cluster-and-database.md).
* Sign in to the [Azure Data Explorer web UI](https://dataexplorer.azure.com/).
Expand All @@ -24,29 +26,25 @@ In the Azure Data Explorer web UI, the query editor provides suggestions and war

When you first open the web UI, in the **Query** page, you should see a connection to the **help** cluster. The examples in this quickstart use the `StormEvents` table in the `Samples` database of the **help** cluster.

If you want to run queries on a different cluster, you must add a connection to that cluster.

To add a new cluster connection, do the following:
If you want to run queries on a different cluster, you must add a connection to that cluster. To add a new cluster connection, do the following:

1. On the left menu, select **Query**.
1. In the upper left pane, select **Add connection**.
1. In the **Add connection** dialog box, enter the cluster **Connection URI** and **Display name**.
1. Select **Add** to add the connection.

If you don't see the **help** cluster, add it using the previous steps. Use "help" as the **Connection URI**.
If you don't see the **help** cluster, add it using the previous steps and use "help" as the **Connection URI**.

## Run queries
## Run a query

To run a query, you must select the database on which you want to run the query in order to set the query context.

1. In the **Cluster connection** pane, under the **help** cluster, select the **Samples** database.

:::image type="content" source="media/web-query-data/samples-db-context.png" alt-text="Screenshot of the Samples database selected.":::

1. Copy and paste the following query into the query window. At the top of the window, select **Run**.

> [!div class="nextstepaction"]
> <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAAwsuyS/KdS1LzSsp5qpRKM4vKlFIqlQILkksKgnJzE1VSEktTgZKlCRmpyoYGgAAl2udPi4AAAA=" target="_blank">Run the query</a>
> [Run the query](https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAAwsuyS/KdS1LzSsp5qpRKM4vKlFIqlQILkksKgnJzE1VSEktTgZKlCRmpyoYGgAAl2udPi4AAAA=)

```kusto
StormEvents
Expand All @@ -61,7 +59,7 @@ To run a query, you must select the database on which you want to run the query
1. Copy and paste the following query into the query window, below the first query. Notice how it isn't formatted on separate lines like the first query.

> [!div class="nextstepaction"]
> <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA0WMQQrDMBAD73mFHtBD+4fmWgrJB7bxUtzirFmLgCGP74YeotNIA5poXsZNVzbsaObEq2OiOOdcFEnbggGRHdXtowtPe8G4pj/ExqMfT3OvgXcp8tanW1VnD1Vzs6QPcRfmTeOQ8lXcrj+ZB1DRhAAAAA==" target="_blank">Run the query</a>
> [Run the query](https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA0WMQQrDMBAD73mFHtBD+4fmWgrJB7bxUtzirFmLgCGP74YeotNIA5poXsZNVzbsaObEq2OiOOdcFEnbggGRHdXtowtPe8G4pj/ExqMfT3OvgXcp8tanW1VnD1Vzs6QPcRfmTeOQ8lXcrj+ZB1DRhAAAAA==)

```kusto
StormEvents | sort by StartTime desc
Expand All @@ -82,7 +80,7 @@ To run a query, you must select the database on which you want to run the query
1. Let's run one more query to see a different type of output.

> [!div class="nextstepaction"]
> <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA1WMsQ7CQAxDd74iYyt1KBtLGZDY2PoBKFyj9hBJUJprBeLjuYMFFkv2s927Gh8XEp83L5gTM1p8ElCJzkGTePfRqm6A4wAd4DJWBxqjnNBruDygd3QqazUvPteyWyeyvx/Yw3bXthndTa8U/DtsfjsZGslABkFviSVMaP4GmKtNLqQAAAA=" target="_blank">Run the query</a>
> [Run the query](https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA1WMsQ7CQAxDd74iYyt1KBtLGZDY2PoBKFyj9hBJUJprBeLjuYMFFkv2s927Gh8XEp83L5gTM1p8ElCJzkGTePfRqm6A4wAd4DJWBxqjnNBruDygd3QqazUvPteyWyeyvx/Yw3bXthndTa8U/DtsfjsZGslABkFviSVMaP4GmKtNLqQAAAA=)

```kusto
StormEvents
Expand All @@ -105,14 +103,15 @@ To run a query, you must select the database on which you want to run the query

## Provide feedback

1. In the upper right of the application, select the feedback icon :::image type="icon" source="media/web-query-data/icon-feedback.png" border="false":::.
Do the following to provide feedback:

1. In the upper right of the application, select the feedback icon :::image type="icon" source="media/web-query-data/icon-feedback.png" border="false":::.
1. Enter your feedback, then select **Submit**.

## Clean up resources

You didn't create any resources in this quickstart, but if you'd like to remove one or both clusters from the application, right-click the cluster and select **Remove connection**.
Another option is to select **Clear local state** from the **Settings** > **General** tab. This action will remove all cluster connections and close all open query tabs.
Another option is to select **Clear local state** from the **Settings** > **General** tab. This action removes all cluster connections and closes all open query tabs.

## Related content

Expand Down
Loading