Learn KQL in one month (2025 edition)

KQL aka Kusto Query Language is a powerful tool and language used in a lot of solution to write queries in Azure Data Explorer, Azure Sentinel, Microsoft Defender... It helps you to explore data, identify anomalies, create powerful worboook or reports. You can use KQL with Intune to explore things from your devices as well as with Sentinel or others to look for security breach. If you want to start with KQL, this book is for you. The goal is to learn KQL in 30 days of exercises. Every day you will have exercises with key words to make your own research on the web. You will then find the solution and explanation. After more than 380 books sold for the first edition, the second one covers news from 2024 like copilot, new log Analytics. Exercises have been completey reviewed to be used easily.