Using KQL for Log Analytics queries
Before we use KQL queries to build a custom chart, let’s get familiar with the syntax and architecture. The data you can query with KQL is stored in the internal database provisioned as part of the Log Analytics workspace. In the previous sections of this chapter, you provisioned a Log Analytics workspace. Then, you provisioned the Application Insights instance and provided the workspace as a reference. As a result, all collected logs and metrics are stored in the workspace’s database and are available for querying.
The Log Analytics services provide you with a rich UI to build and run queries. The UI supports navigation through the tables in the database and its fields. It also supports autofill to help you with KQL syntax. Let’s learn the main syntax structure of the queries. To start querying collected data, you open the Log Analytics workspace instance or open Logs in the Monitoring section of the Application Insights...
