Practice Test 5 | Designing And Implementing Microsoft DevOps Solutions | AZ-400 | Dumps | Mock Test
You query a log table using KQL. You need to filter the input table on condition and select columns for your result table.
What two operators will you use in your query?
A. render
B. summarize
C. project
D. let
E. find
F. extend
G. where
H. set
Correct Answers: C and G
Microsoft Azure Monitor stores two types of data: logs and metrics. This data helps users monitor, tune, and troubleshoot their applications and services. Azure Monitor collects data from applications, operating systems, Azure resources, subscriptions, tenants, and custom sources.
Logs data are the records that contain predominantly text information but can include numeric data as well. Typically, logs store event information from a variety of sources. Azure Monitor creates a table for each log source to store its data and uses Log Analytics workspace as a data storage.
Kusto Query Language uses where tabular operator for filtering table data (e.g., StormEvents, Line 1) on conditions (Line 2). The condition consists of a Boolean expression for the table’s columns or predicate. The predicates can be “stacked” using Boolean “and” operator.
Suppose the result table should have selected columns or include, rename, drop, and insert computed columns. In that case, you need to use the project operator (Line 3) with the names of the selected or modified columns.
Only these columns will be included in the result (Number 1).
Tabular operators in tabular expression statements are delimited by the pipe character (|). Each operator in a tabular statement takes input “from the pipe” — the result from previous pipe operation.
- Options A is incorrect because the tabular operator render instructs to present (generate) the result data in a particular way, e.g., visualize data as a chart, card, table (default), and interactive time pivot.
- Options B is incorrect because the tabular operator summarize aggregates the content of the input table for the output.
- Options D is incorrect because the operator let in the let statements binds a variable to a scalar or tabular expression.
- Options E is incorrect because the tabular operator find searches and finds the rows across a table set that matches a Boolean expression (predicate).
- Options F is incorrect because the tabular operator extend creates calculated columns and outputs them in the result set.
- Options H is incorrect because the operator set in the set statements deals with query options and their values.
For more information about Kusto Query Language tabular operators, please visit the below URLs:
Comments are closed, but trackbacks and pingbacks are open.