Edit

Share via


Create a KQL queryset

In this article, you learn how to create a new KQL queryset. The KQL Queryset is the item used to run queries, view, and customize query results on data from different data sources, such as Eventhouse, KQL database, and more.

Prerequisites

Create a KQL queryset

The KQL Queryset exists within the context of a workspace. A new KQL queryset is always associated with the workspace you're using when you create it.

  1. Go to the desired workspace.

  2. Select +New item.

    Screenshot of adding a new KQL queryset from workspace homepage.

    Select KQL Queryset. Use the search bar to filter by item type.

    Screenshot of adding a new KQL queryset in the New item box.

  3. In the New KQL Queryset window, enter a unique name. You can use alphanumeric characters, underscores, periods, and hyphens. Special characters aren't supported.

    Note

    You can create multiple KQL Querysets in a single workspace.

  4. Select Create.

  5. In the Get started... window, add a data source to the KQL Queryset. You can add a data source from the following options:

    Select one of the options to add a data source to the KQL Queryset. For connection details for each option, see Select a data source.

    • Eventhouse / KQL Database: See the list of databases in the OneLake catalog.
    • Azure Data Explorer: Connect to Azure Data Explorer (ADX) clusters to query data.
    • Azure Application Insights: Run direct or cross-service queries.
    • Azure Log Analytics: Connect to Log Analytics workspaces to query direct or cross-service data.

    Screenshot of get started page with add data sources highlighted.

Open an existing KQL queryset

  1. To access an existing KQL queryset, go to your workspace.

  2. Optionally, you can reduce the number of items displayed by filtering on the item type. Select Filter > KQL Queryset.

    Screenshot of filtering types of items in workspace.

  3. Select the KQL queryset from the list of items that appear in the workspace.

Next step