Draft:Kusto Query Language: Difference between revisions

Revision as of 07:18, 14 March 2025

Revision as of 19:53, 14 March 2025

Line 1:

{{'''AFC submission|d|npov|u=KawaiiKwi|ns=118|decliner=Samoht27|declinets=20250314071846|ts=20250314030035}} <!-- Do not remove this line! -->

{{Short description|Computer Programming Language}}

Line 5:

{{AfC topic|other}}

== <!-- Important, do not remove anything above this line before article has been created. --> KQL ==

''This article is about the database language.''

<p><b>Kusto Query Language</b> (<b>KQL)</b> stands(pronounced forK-Q-L, Kustoor Querycoup-stoh) is a [[Domain-specific language|___domain main-specific language]] used to manage Languagedata. Microsoft created the language to fit needs that the similar SQL could not handle.<ref>{{Cite web |last=shsagir |date=2025-02-23 |title=Kusto Query Language (KQL) overview - Kusto |url=https://learn.microsoft.com/en-us/kusto/query/?view=microsoft-fabric#what-is-a-kusto-query |access-date=2025-03-14 |website=learn.microsoft.com |language=en-us}}</ref> The language has over 15 operators that utilize the exclamation mark!<ref>{{Cite web |date={{ lastupdated }} |title=String operators |url=https://www.ibm.com/docs/en/uax?topic=kql-string-operators |access-date=2025-03-14 |website=www.ibm.com |language=en}}</ref> Like SQL, KQL utilizes the asterisk (*) as a wildcard.<ref>{{Cite web |last=Virtuas |date=2022-10-06 |title=Microsoft Search KQL Cheat Sheet - VIRTUAS |url=https://virtuas.com/insights/best-practices/microsoft-search-kql-cheat-sheet/ |access-date=2025-03-14 |website=virtuas.com |language=en-US}}</ref> While primarily used with Microsoft products, KQL is also compatible with IBM and can be converted to work in Splunk.<ref>{{Cite web |date=2024-06-17 |title=Splunk query using azure KQL concat |url=https://community.splunk.com/t5/Splunk-Search/Splunk-query-using-azure-KQL-concat/m-p/690911 |access-date=2025-03-14 |website=community.splunk.com |language=en}}</ref>

The exact date of creation of this coding language is not specified by Microsoft. The creators of the language are currently anonymous. KQL's namesake is often attributed as being Academy Award winning filmmaker Jacques Cousteau<b>.<ref>{{Cite web |last=Josephine |date=2023-12-26 |title=Kusto (KQL) for Azure SQL Audit |url=https://sqlkitty.com/kusto-kql-azure-sql-audit/#:~:text=According%20to%20Rod%20Trent,%20Kusto,(KQL)%20for%20a%20while. |access-date=2025-03-14 |website=sqlkitty |language=en-US}}</ref>

</p>

=== Syntax ===

</b>In KQL there are options to search by speech type, such as the "hassuffix" and "hasprefix" commands.<ref>{{Cite book |last=Morowczynski |first=Mark |title=The Definitive Guide to KQL: Using Kusto Query Language for operations, defending, and threat hunting |publisher=Microsoft Press |year=2024 |edition=1st}}</ref> KQL has several crossovers with SQL (Standard Query Language) such as the utilization of the asterisk (*) as a wildcard.<ref>{{Cite web |last=Virtuas |date=2022-10-06 |title=Microsoft Search KQL Cheat Sheet - VIRTUAS |url=https://virtuas.com/insights/best-practices/microsoft-search-kql-cheat-sheet/ |access-date=2025-03-14 |website=virtuas.com |language=en-US}}</ref> The language has over 15 operators that utilize the exclamation mark.<ref>{{Cite web |date={{ lastupdated }} |title=String operators |url=https://www.ibm.com/docs/en/uax?topic=kql-string-operators |access-date=2025-03-14 |website=www.ibm.com |language=en}}</ref>

=== In Popular Culture ===

</b>The KC7 Foundation has created a series of games for secondary students and career changers to learn KQL while simulating real world cybersecurity events.<ref>{{Cite web |last=Foundation |first=KC7 |title=KC7 - The free cyber detective game |url=https://kc7cyber.com/ |access-date=2025-03-14 |website=kc7cyber.com |language=en}}</ref>

== References ==

<!-- Inline citations added to your article will automatically display here. See en.wikipedia.org/wiki/WP:REFB for instructions on how to add citations. -->

{{reflist}}'''