Visão Geral

Este Curso KQL for Azure Admins Overview,   é para a equipe de operações e fortalecerá as habilidades do participante para consultar e exportar dados de serviços do Azure baseados em análise de log do Azure.

Objetivo

Após realizar este Curso KQL for Azure Admins Overview, você será capaz de:

• Introdução ao KQL
  
• Analise os resultados da consulta usando KQL
• Crie instruções de várias tabelas usando KQL
• Construir instruções KQL para o Microsoft Sentinel
• consultar com KQL
• Exportar dados usando KQL

Materiais

Conteúdo Programatico

Introduction to KQL

1. Introduction to KQL commands
2. Understanding of syntax
3. Elements and operators
4. Running KQ queries

Analyze query results using KQL

1. Summarize Operator uses
2. Summarize Operator to filter results
3. Summarize Operator to prepare data
4. Render operator to create visualizations

Build Multi-Table Statements using KQL

1. Union Operator uses
2. Join Operator uses

Construct KQL Statements for Microsoft Sentinel

1. Understand the KQL language statement structure
2. Let statement uses
3. Search operator uses
4. Where operator uses
5. Extend operator uses
6. Order operator uses
7. Project operator use

Write your first query with KQL

1. Understand the basic structure of a KQ
2. Connect to resources
3. Return a specific number of rows by using the take operator
4. Select column to return by using the project operator
5. Filter data by using the where operator
6. Reorder return data by using the sort operator

Export data using KQL

1. Export to csv files
2. Export to Power BI