Draft:Kusto Query Language: Difference between revisions

Revision as of 03:08, 14 March 2025

Latest revision as of 03:09, 21 August 2025

(8 intermediate revisions by 5 users not shown)

Line 1:

{{AFC submission|d|nn|u=KawaiiKwi|ns=118|decliner=Liance|declinets=20250314220841|ts=20250314195417}} <!-- Do not remove this line! -->

{{AFC submission|d|npov|u=KawaiiKwi|ns=118|decliner=Samoht27|declinets=20250314071846|small=yes|ts=20250314030035}} <!-- Do not remove this line! -->

{{AFC comment|1=Additional coverage in [[WP:RS|reliable sources]] is needed. Microsoft is not an independent source. ~[[User:Liance|Liance]]^{[[User talk:Liance|talk]]} 22:08, 14 March 2025 (UTC)}}

----

{{Short description|Computer Programming Language}}

{{Draft topics|internet-culture|software|computing|technology}}

{{AfC topic|other}}

{{AfC submission|||ts=20250314030035|u=KawaiiKwi|ns=118}}

{{AfC submission|t||ts=20250314025900|u=KawaiiKwi|ns=118|demo=}}

<!-- Important, do not remove anything above this line before article has been created. -->

== <!-- Important, do not remove anything above this line before article has been created. --> KQL ==

''This article is about the database language.''

<p><b>Kusto Query Language</b> (<b>KQL)</b> (pronounced K-Q-L, or coup-stoh) is a [[Domain-specific language|___domain main-specific language]] used to manage data. Microsoft created the language to fit needs that the similar SQL could not handle. While primarily used with Microsoft products, KQL is also compatible with IBM and can be converted to work in Splunk.<ref>{{Cite web |date=2024-06-17 |title=Splunk query using azure KQL concat |url=https://community.splunk.com/t5/Splunk-Search/Splunk-query-using-azure-KQL-concat/m-p/690911 |access-date=2025-03-14 |website=community.splunk.com |language=en}}</ref> The exact date of creation of this coding language is not specified by Microsoft. The creators of the language are currently anonymous. KQL's namesake is often attributed as being Academy Award winning filmmaker Jacques Cousteau.<ref>{{Cite web |last=Josephine |date=2023-12-26 |title=Kusto (KQL) for Azure SQL Audit |url=https://sqlkitty.com/kusto-kql-azure-sql-audit/#:~:text=According%20to%20Rod%20Trent,%20Kusto,(KQL)%20for%20a%20while. |access-date=2025-03-14 |website=sqlkitty |language=en-US}}</ref>

</p>

KQL stands for Kusto Query Language. Microsoft created the language to fit needs that the similar SQL could not handle.<ref>{{Cite web |last=shsagir |date=2025-02-23 |title=Kusto Query Language (KQL) overview - Kusto |url=https://learn.microsoft.com/en-us/kusto/query/?view=microsoft-fabric#what-is-a-kusto-query |access-date=2025-03-14 |website=learn.microsoft.com |language=en-us}}</ref> The language has over 15 operators that utilize the exclamation mark!<ref>{{Cite web |date={{ lastupdated }} |title=String operators |url=https://www.ibm.com/docs/en/uax?topic=kql-string-operators |access-date=2025-03-14 |website=www.ibm.com |language=en}}</ref> Like SQL, KQL utilizes the asterisk (*) as a wildcard.<ref>{{Cite web |last=Virtuas |date=2022-10-06 |title=Microsoft Search KQL Cheat Sheet - VIRTUAS |url=https://virtuas.com/insights/best-practices/microsoft-search-kql-cheat-sheet/ |access-date=2025-03-14 |website=virtuas.com |language=en-US}}</ref> While primarily used with Microsoft products, KQL is also compatible with IBM and can be converted to work in Splunk.<ref>{{Cite web |date=2024-06-17 |title=Splunk query using azure KQL concat |url=https://community.splunk.com/t5/Splunk-Search/Splunk-query-using-azure-KQL-concat/m-p/690911 |access-date=2025-03-14 |website=community.splunk.com |language=en}}</ref>

=== Syntax ===

While primarily implemented with [[Microsoft Azure]], KQL is also used with [[Microsoft Teams]].<ref>{{Cite web |title=Using the Search Bar in Microsoft Teams |url=https://tech.rochester.edu/using-the-search-bar-in-microsoft-teams/ |access-date=2025-03-17 |website=University IT |language=en-US}}</ref> In KQL there are options to search by speech type, such as the "hassuffix" and "hasprefix" commands. KQL has several crossovers with SQL (Standard Query Language) such as the utilization of the asterisk (*) as a wildcard.<ref>{{Cite web |last=Virtuas |date=2022-10-06 |title=Microsoft Search KQL Cheat Sheet - VIRTUAS |url=https://virtuas.com/insights/best-practices/microsoft-search-kql-cheat-sheet/ |access-date=2025-03-14 |website=virtuas.com |language=en-US}}</ref> The language has over 15 operators that utilize the exclamation mark.<ref>{{Cite web |date=|title=String operators |url=https://www.ibm.com/docs/en/uax?topic=kql-string-operators |access-date=2025-03-14 |website=www.ibm.com |language=en}}</ref>

The exact date of creation of this coding language is not specified by Microsoft. The creators of the language are currently anonymous. KQL's namesake is often attributed as being Academy Award winning filmmaker Jacques Cousteau.<ref>{{Cite web |last=Josephine |date=2023-12-26 |title=Kusto (KQL) for Azure SQL Audit |url=https://sqlkitty.com/kusto-kql-azure-sql-audit/#:~:text=According%20to%20Rod%20Trent,%20Kusto,(KQL)%20for%20a%20while. |access-date=2025-03-14 |website=sqlkitty |language=en-US}}</ref>

=== In Popular Culture ===

The KC7 Foundation has created a series of games for secondary students and career changers to learn KQL while simulating real world cybersecurity events.<ref>{{Cite web |last=Foundation |first=KC7 |title=KC7 - The free cyber detective game |url=https://kc7cyber.com/ |access-date=2025-03-14 |website=kc7cyber.com |language=en}}</ref>

== References ==