As organizations move workloads to Azure, visibility into resource performance, security, and operations becomes essential. Azure Monitor is Microsoft’s centralized platform for observability, bringing together telemetry across applications, infrastructure, and services. At the core of this platform is Kusto Query Language (KQL)—a fast, expressive language purpose-built for exploring log data and enabling deep analytics.

This session is your hands-on introduction to KQL, designed for cloud professionals who want to gain actionable insights from Azure Monitor Logs. Through live demos and practical examples, we’ll walk through the core concepts and real-world applications of KQL, including:

Understanding KQL syntax and how it compares to T-SQL

Querying and analyzing log data using Azure Log Analytics

Efficient techniques for filtering, sorting, and summarizing data

Building alerts and identifying anomalies with KQL-based queries

Using joins, time-series functions, and advanced features for deeper analysis

By the end of the session, you'll be equipped to confidently write and use KQL queries to enhance monitoring, security, and operational decision-making in Azure environments.

🎓 Prerequisites:

Basic understanding of SQL or T-SQL

General familiarity with Azure services