The max value till the current row.
row_max ( Term [, Restart] )

datatable(A:int)[4,5,6,1,3,7,4,8]
| serialize
| extend B = rowmax(A)
| extend C = rowmin(A)

The result of B is: 4,5,6,6,6,7,7,8
The result of C is: 4,4,4,1,1,1,1,1

It is useful for the ip v4 range comparison. Sorted the ip prefixes by the first address and get the max value of its last address for an IP prefix. It will significantly reduce the complexity of the prefix comparison to detect overlap IP prefixes.

Let me specify databases in the connection pane as my Favorites and then scope my view to only them. It is exceedingly frustrating to have to scroll through a huge list of databases to find the only two I care about. See attached picture for example.

Currently the anomaly chart works only on Kusto explorer. I would like to add anomaly and forecasting in Azure notebooks.

When do you recommend Azure Data Explorer time series capabilities vs. Azure Time Series Insights.

In Kusto:
print "ÉCOLE" =~ "école" // FALSE
print "COLE" =~ "cole" // TRUE
print tolower("École") == "école" // TRUE
print "SØD" =~"sød" // FALSE
print tolower("SØD") == "sød" //TRUE

The tolower() function supports scandinavian letters 'ÆØÅæøå' and the French accented letters. But the string operator =~ does not.

Oftentimes a kusto query will return a time-intensive, large dataset. If I then need to tweak my query, I'll have to execute it in its entirety once again. dgrep avoids this problem with a muti-tiered query system; server-side and local.

.show functions gives the detail of function available in database
If this can be extended for getting usage metrics like how many time function invoked in last 30 days. Might be helpful.

.show functions usage -d 30

Some Kusto built-in functions accept a variable number of arguments, like:

print strcat("foo", "bar")
print strcat("foo", "bar", "baz")

Please add the ability to create user-defined functions that accept a variable number of arguments as well.

I’m ingesting data to Azure Data Explorer from Logstash and figured out a feature that makes uncomfortable to use.
If I put ‘enter’ between query, it occurs syntax error.
(e.g. .If I write [create table sampletable
ingestion json mapping ‘samplemapping’ (…)], it doesn’t work. If I write with one line, it works with no error)

If it fixed, it will be very helpful to introduce ADX to customers :)

It would be great if there were a way to add a plugin to the desktop version of Kusto Explorer.

I have multiple ADE databases within the same cluster, i would like to have the ability to copy permissions from one DB to another using an internal tool instead of doing so manually.

In r studio, we want to get our time series data,

It would be great if we can have a task inside the pipeline to trigger a trigger or more than one trigger.

How to show both percentage and absolute value when rendering a piechart.

Currently, maintaining dashboards is cumbersome, because it cannot be automated.
For example, if I have the same query across n dashboards (different parameter sets). When the query needs an update, I don't want having to make the same change n times. I wish to manage my dashboards via code (preferably powershell), rather than WebUI.

It would be great if we could render a map along with a column chart, bar chart, etc. in Kusto. Currently, the map is only available as a dashboard tile. Also, it would be great if we could set some options on the map in the dashboard. Currently, there are no options. I'd like to be able to control bubble size and color, choose the zoom level and location at which the map first displays and have different display options for the underlying map itself (e.g. road, satellite, etc)

Right now,
ADX supports data encryption, but they're at the service and infra levels

The data in the database table can still be seen if the user has permission to check it, so not sure if ADX will be adding support on column level data encryption and dynamic data masking

We are trying to use docstrings to document dynamic columns with known structure. Rendering new lines will be helpful.

Also it will be really helpful to allow hyperlinks (or full markdown) so we could point users to external documentation site