How can we improve Azure Data Explorer?

Add syntax for aggregation over partitions

It would be helpful to have KQL syntax for expressing aggregation over a partition without summarization.

Something like adding a "by" to an "extend" clause:

StormEvents
| project State, EventId, StartTime, DeathsDirect
| extend TotalDeathsDirectInState = sum(DeathsDirect) by State

Currently the only way to do this in KQL is by joining to a subquery. The equivalent SQL is like:

SELECT
State,
EventId,
StartTime,
DeathsDirect,
SUM(DeathsDirect) OVER (PARTITION BY State) AS TotalDeathsDirectInState
FROM StormEvents

6 votes
Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)

We’ll send you updates on this idea

Alex Kyllo shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

0 comments

Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)
Submitting...

Feedback and Knowledge Base