Azure Data Explorer

  1. Azure Data Explorer setting to display datetime values in local timezone

    Can Azure Data Explorer support displaying datetime values in local timezone with a setting?
    I'm a bit tired of extending all queries by doing time arithmetic myself (e.g. | extend localT = timestamp - 8h) which is not daylight saving proof as well :)

    23 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    3 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Provide support to render timepivot / timeline view

    The Timepivot visualization is one of the best visualizations we have come across when analyzing data across hundreds of different tables. It tells the story of “what happened” in a beautiful manner.

    It helps us generates multiple different views of the “same data” by allowing us to pick multiple levels of slicing options views (in this case I have 10 slice options, so for two levels I can get about 90 different views). In addition, clicking on the cells shows the actual activity in detail.

    Given that Kusto is time-optimized and practically every log has timestamps associated with them, we…

    14 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Add ADX as Trusted Microsoft service on firewall

    Please consider to add ADX as a trusted Microsoft service on Azure Event Hubs' (or any other data source service's) firewall or publish IP address range of ingest service.
    For now, we have to deploy the cluster with VNet in order to restrict access of Event Hubs but it seems unnecessary since the traffic between Azure service is completed inside Azure network.
    This option makes it simple/easier for the users to create secure environment.

    14 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Export data from one ADX cluster to a second ADX Cluster

    Add ADX as a destination for the .export capability to be able to move data from one cluster to another. This should work both for one time export and for continuous export.

    11 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Push rows to EventHub

    Enable pushing rows to EventHubs.
    * individual or batched messages

    Example (alerting):
    * IoT data being consumed by ADX
    * An update policy is in place that checks the incoming
    * If the check fails then a notification should be sent to an EventHub
    -> picked up from there by other components

    19 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Pump data to Kusto

    Create log exporter for Azure Monitor Application Insights SDK to enable double pumping of logs to ADX and Application Insights

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Provide tenant level connection string

    It would be awesome if there was a Tenant level connection string to show all LA/AI databases that you have access to. Similar to https://ade.loganalytics.io/tenants/<tenant-id>

    8 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  8. Translate IP addresses to geo coordinates


    • Given an IP-Address

    • There should be a native KQL function to translate the IP address to a coordinate

    • This will enable the user to enrich telemetry from server/app logs with the corresponding location

    11 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Column retention policy

    Feature Suggestion:
    Add support for retention policy in a column level.

    Why?
    As part of our work on keeping privacy and GDPR compliances we are making sure that we are storing only data that we are allow to and only to a specific period.
    I faced a weird situation where I got a an approval to keep all my table’s data for two years period but I had to exclude ONE column as the allow retention period for this column is only 3 months.

    All today solutions are not good enough (remove the column, set the entire table retention for…

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Paste python code as is in KQL

    Currently in order to use the python() plugin you need to "deorate" each line of the python code with quotes and new line character. This is cumbersome and inconvenient. Suggest to support writing/pasting standard python code without any artificial additions when the user types in the context of the Python plugin

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Allow direct ingestion through EventGrid

    We use event grid for flexible event broadcasting to multiple microservices and external components, and Kusto has been extremely helpful for keeping an event log for later triage and monitoring. Today, we have to go through an Event Hub in order to make this work, but allowing a direct pipe from Event Grid to Kusto would make things simpler to set up, cheaper, and more flexible!

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  12. Query builder using Fluent Interface pattern in Kusto SDK

    I think it would be great if you add a query builder to the SDK that uses Fluent Interface for building Kusto queries. Something very similar to how you can query SQL databases using Entity Framework.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. Allow accessing other databases within a RLS let statement

    New RLS functionality has allowed our team to create RLS functions that are data driven; identity to permission associations come from a table.

    However, tables and objects in other databases may not be accessed from within the let statement of the RLS function. In our case, that means we need to copy two tables to each of up to 10+ databases in our two clusters.

    Can the restrictions against the "database" notation be relaxed within the let statement of RLS functions?

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. Please support Delta Lake as a source format

    Currently ADX supports parquet as a data source, but not Delta Lake. Delta Lake is an open-source storage layer that brings ACID
    transactions to Apache Sparks (on top of parquet, see delta.io for more details). Delta Lake is supported in Azure Databricks and Azure Synapse Spark, but currently not supported as data source (e. g. external tables) in ADX.
    Currently Delta Lake data has to be exported to parquet to be consistently consumable by ADX.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Operator to support optimized time window join

    Would be great if the pattern documented here: https://docs.microsoft.com/en-us/azure/kusto/query/join-timewindow could be its own operator. I use this pattern semi-frequently, and always have to look up the example on the docs site to implement it correctly, would be handy to have it encapsulated as a supported operator

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. Cancelling in-flight queued ingestions

    There can be cases in which i would like to discard messages posted for ingestion, after figuring out that something went wrong, or is no longer relevant.

    this is especially relevant when the size of the queue is really large.

    at the moment, the "best solution" is to drop or rename the target table, and patiently wait for all ingestions to fail (which could take a long while)

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  17. Kusto DOS outage: Allow granular throttling of kusto query requests at App or user level

    In our current Kusto outages, certain apps are found to be querying too much which in turn has increased the Kusto ingestion queue increase to 100k. It would be great to have Kusto some granular controls at app or user level to limit how much querying can be executed.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  18. Add follow DB management options in Azure Portal

    Add follow DB management options in Azure Portal
    Attach DB to a leader
    Detach a follower DB

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  19. Queued ingestion Status Tracking

    Support the queued ingestion Status notification integration. Maybe EventGrid or Webhook. Customer can continue monitor and handle the integration job without the pull status from queue by time interval.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  20. ingest

    Add a way to schedule ingestion (queued ingestion) with a kusto command on external table (i.e. ingesting a huge external table reliably).

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
← Previous 1 3 4 5 6
  • Don't see your idea?

Azure Data Explorer

Categories

Feedback and Knowledge Base