Azure Data Explorer

  1. Allow direct ingestion through EventGrid

    We use event grid for flexible event broadcasting to multiple microservices and external components, and Kusto has been extremely helpful for keeping an event log for later triage and monitoring. Today, we have to go through an Event Hub in order to make this work, but allowing a direct pipe from Event Grid to Kusto would make things simpler to set up, cheaper, and more flexible!

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Export data from one ADX cluster to a second ADX Cluster

    Add ADX as a destination for the .export capability to be able to move data from one cluster to another. This should work both for one time export and for continuous export.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Persist client color highlight settings between query runs

    If I run a query and highlight the rows based on certain conditions, I would like those highlight settings to be persisted so I don't need to re-create them each time that I run this query.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. 2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Reduce barriers to entry by providing a cheaper tier

    I wanted to use ADE, but it costs $2.6K per month at minimum. This makes it impossible for many to try out this service. Please consider a cheaper tier or make ADE cheaper altogether.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  6. Provide max/min value in a new Windows function

    The max value till the current row.
    row_max ( Term [, Restart] )

    datatable(A:int)[4,5,6,1,3,7,4,8]
    | serialize
    | extend B = rowmax(A)
    | extend C = row
    min(A)

    The result of B is: 4,5,6,6,6,7,7,8
    The result of C is: 4,4,4,1,1,1,1,1

    It is useful for the ip v4 range comparison. Sorted the ip prefixes by the first address and get the max value of its last address for an IP prefix. It will significantly reduce the complexity of the prefix comparison to detect overlap IP prefixes.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Support ADX into Azure ARC data Services

    Support ADX into Azure ARC data Services

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  8. Support escaping curly brackets in queries, and json field access

    See https://stackoverflow.microsoft.com/questions/192467

    Our Kusto data contains fields similar to C# string interpolation :

    {

    "{OriginalFormat}": "l1 cache hit for key {key}"
    

    }
    The field is in JSON format.

    I tried to extract the value using different notations, but without success :

    field[(0)] or field[(1)] - returns nothing
    field['{OriginalFormat}'] - this returns an error Parameter 'OriginalFormat' value was not provided

    Then I tried to filter the records using where clause :

    |where customDimensions !contains "l1 cache hit for key {key}"
    which didn't work by returning the error Parameter 'OriginalFormat' value was not provided

    I tried escaping using \ but I couldn't…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Operator to support optimized time window join

    Would be great if the pattern documented here: https://docs.microsoft.com/en-us/azure/kusto/query/join-timewindow could be its own operator. I use this pattern semi-frequently, and always have to look up the example on the docs site to implement it correctly, would be handy to have it encapsulated as a supported operator

    4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Queued ingestion Status Tracking

    Support the queued ingestion Status notification integration. Maybe EventGrid or Webhook. Customer can continue monitor and handle the integration job without the pull status from queue by time interval.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Provide tenant level connection string

    It would be awesome if there was a Tenant level connection string to show all LA/AI databases that you have access to. Similar to https://ade.loganalytics.io/tenants/<tenant-id>

    8 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  12. Make sum() and sumif() "nullable"

    Include an option in sum() and sumif() like this: Foo = sum(Bar, nullable). The "nullable" option causes a sum of null values to be null rather than zero. A sum of null and non-null values would sum the non-null values, returning a number. The use case: to detect the total absence of data (all rows null) in an aggregation. This is important for telemetry applications (e.g., error counts) where zero is the "good" value. This feature would allow us to easily distinguish between the total absence of data, and the presence of some measurements whose value is zero. (I have…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. Too many kust queries should not cause ingestion queue buildup

    In our recent Kusto outage, we have seen that too many Kusto queries were able to increase the ingestion queue by 100k. It would be good to have isolation between the querying and ingestion processes inside Kusto infrastructure so that these don't impact each other.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  14. Kusto DOS outage: Allow granular throttling of kusto query requests at App or user level

    In our current Kusto outages, certain apps are found to be querying too much which in turn has increased the Kusto ingestion queue increase to 100k. It would be great to have Kusto some granular controls at app or user level to limit how much querying can be executed.

    5 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Add the ability to control the cluster resource utilization (CPU, Memory) per database or user

    We would like to control the cluster resource utilization (CPU, Memory) per database or user

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. Add follow DB management options in Azure Portal

    Add follow DB management options in Azure Portal
    Attach DB to a leader
    Detach a follower DB

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  17. AADLoginForLinux/Windows getting failed to install

    Installing AADLogin extensions for Linux and windows is getting failed.

    Selecting this option while creating VMs is taking more than an hour and eventually getting failed to add this extension.

    Example error:
    The handler for VM extension type &#39;Microsoft.Azure.ActiveDirectory.LinuxSSH.AADLoginForLinux&#39; has reported terminal failure for VM extension &#39;AADLoginForLinux&#39; with error message: &#39;[ExtensionOperationError] Non-zero exit code: 20

    example: VM has not reported status for VM agent or extensions. Verify the VM has a running VM agent and that it can establish outbound connections to Azure storage. Please refer to <a rel="nofollow noreferrer" href="https://aka.ms/vmextensionlinuxtroubleshoot">https://aka.ms/vmextensionlinuxtroubleshoot</a> for additional VM agent troubleshooting information.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  18. Let me tag a database as favorite

    Let me specify databases in the connection pane as my Favorites and then scope my view to only them. It is exceedingly frustrating to have to scroll through a huge list of databases to find the only two I care about. See attached picture for example.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. Query builder using Fluent Interface pattern in Kusto SDK

    I think it would be great if you add a query builder to the SDK that uses Fluent Interface for building Kusto queries. Something very similar to how you can query SQL databases using Entity Framework.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  20. Add AAD Account Switcher to Web Explorer

    Add the ability to switch AAD accounts via an account switcher, similar to what is available at portal.azure.com. This is the most frequent request for LinkedIn customers.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Azure Data Explorer

Categories

Feedback and Knowledge Base