diff --git a/data-explorer/clone-database-schema.md b/data-explorer/clone-database-schema.md index d7d6df9027..75ed3ad1a3 100644 --- a/data-explorer/clone-database-schema.md +++ b/data-explorer/clone-database-schema.md @@ -1,9 +1,10 @@ --- title: Clone a database schema - Azure Data Explorer -description: Learn how to clone a database schema in Azure Data Explorer. +description: Learn how to clone an Azure Data Explorer database schema using management commands. Export your schema as a CSL script and recreate it in a target database. ms.reviewer: zivc ms.topic: how-to -ms.date: 09/26/2023 +ms.date: 06/10/2026 +#customer intent: As a database administrator, I want to clone a database schema so that I can replicate structure to another database without copying data. --- # Clone a database schema in Azure Data Explorer @@ -16,10 +17,10 @@ This article explains how to use [management commands](/kusto/management/index?v ## Clone a database schema -The following steps describe how to clone a database schema using the [Azure Data Explorer web UI](https://dataexplorer.azure.com/). Alternatively, you can use the [Kusto client libraries](/kusto/api/client-libraries?view=azure-data-explorer&preserve-view=true) to run the same management commands. For more information, see [Create an app to run management commands](/kusto/api/get-started/app-management-commands?view=azure-data-explorer&preserve-view=true). +These steps describe how to clone a database schema using the [Azure Data Explorer web UI](https://dataexplorer.azure.com/). Alternatively, you can use the [Kusto client libraries](/kusto/api/client-libraries?view=azure-data-explorer&preserve-view=true) to run the same management commands. For more information, see [Create an app to run management commands](/kusto/api/get-started/app-management-commands?view=azure-data-explorer&preserve-view=true). -1. From the left menu, select **Query**. -1. In the [connection pane](web-ui-query-overview.md#view-clusters-and-databases), select the database whose schema you want to clone. +1. Select **Query** from the left menu. +1. Select the database whose schema you want to clone in the [connection pane](web-ui-query-overview.md#view-clusters-and-databases). :::image type="content" source="media/clone-database-schema/select-database.png" alt-text="Screenshot of selected database in connection pane." lightbox="media/clone-database-schema/select-database.png"::: @@ -29,9 +30,9 @@ The following steps describe how to clone a database schema using the [Azure Dat .show database schema as csl script with (ShowObfuscatedStrings = true) ``` - This command returns a script of management commands to recreate the database schema. Note the number of returned records, which is used for verification in a later step. For more information, see [.show database schema command](/kusto/management/show-schema-database?view=azure-data-explorer&preserve-view=true#show-database-schema-as-csl-script). + This command returns a script of management commands to recreate the database schema. Note the number of returned records, which you'll use for verification in a later step. For more information, see [.show database schema command](/kusto/management/show-schema-database?view=azure-data-explorer&preserve-view=true#show-database-schema-as-csl-script). -1. Copy the CSL script output. To do so, select all of the returned rows. Then, either right-click and select **Copy** or use the *Ctrl + C* keyboard shortcut. +1. Copy the CSL script output by selecting all of the returned rows. Then, either right-click and select **Copy** or use the Ctrl+C keyboard shortcut. :::image type="content" source="media/clone-database-schema/copy-script-output.png" alt-text="Screenshot of the selected records and right-click menu." lightbox="media/clone-database-schema/copy-script-output.png"::: @@ -50,9 +51,9 @@ The following steps describe how to clone a database schema using the [Azure Dat .execute database script <| ``` - This command runs the commands from the script, recreating the database schema on the new database. For more information, see [.execute database script command](/kusto/management/execute-database-script?view=azure-data-explorer&preserve-view=true). + This command executes the script, recreating the database schema on the new database. For more information, see [.execute database script command](/kusto/management/execute-database-script?view=azure-data-explorer&preserve-view=true). -1. Verify that the script ran correctly. To do so, check that the number of returned records is the same as the records from the show schema command. Then, scroll to the final command and check that the `Result` column is `Complete`. If a failure occurs, troubleshoot and run the command again. +1. Verify that the script ran correctly by checking that the number of returned records matches the records from the show schema command. Then, scroll to the final command and check that the `Result` column is `Complete`. If a failure occurs, troubleshoot and run the command again. > [!NOTE] > You can rerun the script as often as needed without clearing resources from the previous run. diff --git a/data-explorer/find-my-partner.md b/data-explorer/find-my-partner.md index 7598767309..c317965da8 100644 --- a/data-explorer/find-my-partner.md +++ b/data-explorer/find-my-partner.md @@ -1,16 +1,20 @@ --- title: Find an Azure Data Explorer partner -description: Learn about our partners and how they can help you with Azure Data Explorer. -ms.topic: concept-article -ms.date: 02/01/2023 +description: Learn about the Azure Data Explorer Find My Partner Program and discover certified partners who can help with consulting, training, implementation, and support. +ms.topic: article +ms.date: 06/14/2026 + +#customer intent: As an Azure Data Explorer user, I want to find certified partners so that I can get help with implementation, consulting, or training. + --- # Find an Azure Data Explorer partner This article describes the partners of the Azure Data Explorer Find My Partner Program. Partners can help you with your Azure Data Explorer implementation, including consulting, training, and support. -The services and expertise are chosen by the partner and shouldn't be considered as endorsement confirmation by Microsoft. The partner is solely responsible for the services it provides. +> [!NOTE] +> Each partner chooses the services and expertise they list. Their choices don't represent endorsement by Microsoft. Partners are solely responsible for the services they provide. -You can also get the list of partners by running the following query on the [help](https://help.kusto.windows.net) cluster: +To get the list of partners, run the following query on the [help](https://help.kusto.windows.net) cluster: > [!div class="nextstepaction"] > [Run the query](https://dataexplorer.azure.com/clusters/help/databases/FindMyPartner?query=H4sIAAAAAAAAAwtILCrJSy0CAIoHlv4HAAAA) @@ -31,7 +35,7 @@ Partner :::image type="icon" source="media/findmypartner/ait-white-logo.jpg"::: -We develop and design sophisticated, forward-looking software solutions based on the latest Microsoft technologies and advise our customers on the development process, architecture, and software design. +AIT develops and designs sophisticated, forward-looking software solutions based on the latest Microsoft technologies. The company advises customers on the development process, architecture, and software design. **Partner type** @@ -57,9 +61,9 @@ We develop and design sophisticated, forward-looking software solutions based on :::image type="icon" source="media/findmypartner/alten-logo.png"::: -ALTEN is the consulting and engineering organization working in various (niche) markets for the high-tech sector and ICT. The development of new High-Tech technologies is costly and requires specialist knowledge. Knowledge in the field of technology plays the most important role, the central pillar within ALTEN. +ALTEN is the consulting and engineering organization working in various niche markets for the high-tech sector and ICT. The development of new high-tech technologies is costly and requires specialist knowledge. Knowledge in the field of technology plays the most important role and is the central pillar within ALTEN. -ALTEN also offers their specialist knowledge in the field of IT. We play an active role regarding quality, reliability, and innovations in the area of Big Data and Internet of Things with our partners in order to strengthen the digital transformation and sustainability. +ALTEN also offers its specialist knowledge in the field of IT. To strengthen the digital transformation and sustainability, the company and its partners play an active role regarding quality, reliability, and innovations in the area of Big Data and Internet of Things. **Partner type** @@ -94,7 +98,7 @@ ALTEN also offers their specialist knowledge in the field of IT. We play an acti :::image type="icon" source="media/findmypartner/am-squared-logo.png"::: -AM Squared Provides specialist consulting, project, and support services with respect to an intelligent edge, IoT, and Azure Cloud Technologies. We provide an enablement platform to support numerous industries in making sense of their data and analytics requirements in support of Digital Transformation. A key differentiator is to integrate OT Data Sources into the enablement platform powered by Azure Data Explorer. +AM Squared provides specialist consulting, project, and support services for intelligent edge, IoT, and Azure Cloud technologies. The company offers an enablement platform to support numerous industries in making sense of their data and analytics requirements in support of digital transformation. A key differentiator is the integration of OT data sources into the enablement platform powered by Azure Data Explorer. **Partner type** @@ -119,7 +123,7 @@ AM Squared Provides specialist consulting, project, and support services with re beanTech is an IT company that has been supporting industries in the challenges of Digital Transformation for over 20 years. -Competence and availability of the technical team, experience gained in hundreds of projects and technologies always at the state of the art respond perfectly to the needs of the modern manufacturing company that isn't looking for a simple supplier but a business partner to grow in its market. +The competence and availability of the technical team, along with experience gained in hundreds of projects and state-of-the-art technologies, perfectly meet the needs of the modern manufacturing company that isn't looking for a simple supplier, but rather a business partner to grow in its market. beanTech is the IT partner that can help you manage the entire data chain in the factory with a complete and integrated offer of solutions ranging from telemetry data acquisition to big data architecture on cloud, from web software development to operation management consultancy, from event analytics to the implementation of sophisticated artificial intelligence algorithms applied to improve performance. @@ -150,13 +154,13 @@ beanTech is the IT partner that can help you manage the entire data chain in the :::image type="icon" source="media/findmypartner/capgemini-logo.jpg"::: -With the world becoming increasingly intelligent and entire value chains being transformed, data is an essential source of understanding and insight. But it’s not enough to have the data, it needs to be reliable, and you need to know how to use it. +As the world becomes increasingly intelligent and entire value chains transform, data is an essential source of understanding and insight. But it's not enough to have the data. It needs to be reliable, and you need to know how to use it. -Perform AI, our full-service portfolio, enables you to take advantage of the transformative power of data and artificial intelligence (AI). By becoming data-powered, your enterprise can adapt to the changing world and achieve sustainable competitive advantage. +Perform AI, Capgemini's full-service portfolio, enables you to take advantage of the transformative power of data and artificial intelligence (AI). By becoming data-powered, your enterprise can adapt to the changing world and achieve sustainable competitive advantage. **"Activate data. Augment intelligence. Amplify outcomes."** -Besides these general descriptions of our capabilities, one of our strongest sectors is Automotive, where we have the chance to work on plenty of IoT use cases and references with the Azure Data Explorer. +Besides these general descriptions of their capabilities, one of their strongest sectors is Automotive, where they work on plenty of IoT use cases and references with Azure Data Explorer. **Partner type** @@ -178,7 +182,7 @@ Besides these general descriptions of our capabilities, one of our strongest sec :::image type="icon" source="media/findmypartner/centric-logo.png"::: -Our primary goal is to solve complex business problems. Whether crafting your data strategy, building a data warehouse or designing a custom solution to meet your unique needs, our consultants go beyond building technology. We take a holistic approach using data to solve business problems and capture opportunities. We look at the people, processes, and technology surrounding data and analytics to deliver insights within the context of your business. High-functioning data and analytics capabilities center around enabling the business to ask better questions – and get better answers – with consistency, a high degree of trust and timeliness. +Centric Consulting's primary goal is to solve complex business problems. Whether crafting your data strategy, building a data warehouse, or designing a custom solution to meet your unique needs, consultants go beyond building technology. Centric takes a holistic approach, using data to solve business problems and capture opportunities. The team looks at the people, processes, and technology surrounding data and analytics to deliver insights within the context of your business. High-functioning data and analytics capabilities center around enabling the business to ask better questions and get better answers with consistency, a high degree of trust, and timeliness. **Partner type** @@ -203,9 +207,9 @@ Our primary goal is to solve complex business problems. Whether crafting your da :::image type="icon" source="media/findmypartner/logo-codit.png"::: -At Codit we want to help make the world an even smarter place. -By creating customer cloud solutions that make the world’s data work better, we help our customers to evolve, and touch the lives of millions across the globe. -Our team of 200 employees across our offices in Belgium, France, Portugal, Switzerland, the United Kingdom, The Netherlands, Malta, and Luxembourg use leading Microsoft Azure Cloud Native technologies to put the world’s data to work. +At Codit, the aim is to help make the world an even smarter place. +By creating customer cloud solutions that make the world’s data work better, you help your customers evolve and touch the lives of millions across the globe. +Your team of 200 employees across offices in Belgium, France, Portugal, Switzerland, the United Kingdom, The Netherlands, Malta, and Luxembourg uses leading Microsoft Azure Cloud Native technologies to put the world’s data to work. **Partner type** @@ -235,7 +239,7 @@ Our team of 200 employees across our offices in Belgium, France, Portugal, Switz :::image type="icon" source="media/findmypartner/cyberproof-logo.png"::: -CyberProof, a UST company, helps our clients transform their security to a cost-effective, cloud-native technology architecture. Our next-generation Managed Detection & Response (MDR) service is built to support large, complex enterprises by combining expert human and virtual analysts. Our services are enabled by our purpose-built platform, the CyberProof Defense Center – enabling us to be more agile, collaborate better, and deliver powerful analytics. Our integrated security services include Threat Intelligence, Threat Hunting, and vulnerability Management. Our experts innovate to meet our clients’ needs with custom use cases, integrations, and automations. +CyberProof, a UST company, helps clients transform their security to a cost-effective, cloud-native technology architecture. Their next-generation Managed Detection and Response (MDR) service supports large, complex enterprises by combining expert human and virtual analysts. Their purpose-built platform, the CyberProof Defense Center, enables them to be more agile, collaborate better, and deliver powerful analytics. Their integrated security services include Threat Intelligence, Threat Hunting, and Vulnerability Management. Their experts innovate to meet clients’ needs with custom use cases, integrations, and automations. **Partner type** @@ -291,8 +295,8 @@ Data Addiction is a specialist provider of Microsoft Data and AI, and Dynamics 3 :::image type="icon" source="media/findmypartner/data-mastery-logo.png"::: -Data Mastery is a Data Engineering and Advanced Analytics consultancy. Our specialty is the design, build, implementation, and management of data analytics solutions. Our consultants are experts in advanced analytics using Azure and Databricks. -Data Mastery help businesses harness the power of their data and make data-driven decisions through advanced analytics, business intelligence, and modern data platforms. We have a wealth of knowledge and experience across the Utilities, Mining, Financial Services, Real Estate and Education sectors. We've delivered some of Sydney's most exciting Cloud Transformation projects and we look forward to helping you in your journey to the cloud. +Data Mastery is a data engineering and advanced analytics consultancy. The company specializes in the design, build, implementation, and management of data analytics solutions. Its consultants are experts in advanced analytics using Azure and Databricks. +Data Mastery helps businesses harness the power of their data and make data-driven decisions through advanced analytics, business intelligence, and modern data platforms. The company has a wealth of knowledge and experience across the utilities, mining, financial services, real estate, and education sectors. It has delivered some of Sydney's most exciting cloud transformation projects and looks forward to helping you in your journey to the cloud. **Partner type** @@ -319,8 +323,8 @@ Data Mastery help businesses harness the power of their data and make data-drive :::image type="icon" source="media/findmypartner/datacore-logo.png"::: -Datacore provides professional services on Data, BI & AL solution on Azure services. Datacore develop best practices to implement Azure Data Explorer solution to variety needs for a fast and scalable data analysis platform easily and quickly and suitable for handling large amounts of diverse data in real time such as logs, tasks, distributing insights, for time series data and more. -We're enabling our customers to make with Azure Data Explorer data-driven decisions and find hidden patterns and trends, which without this tool would be difficult. +Datacore provides professional services on Data, BI, and AI solutions on Azure services. Datacore develops best practices to implement Azure Data Explorer solutions to meet various needs for a fast and scalable data analysis platform. These solutions handle large amounts of diverse data in real time, such as logs, tasks, distributing insights, and time series data. +Datacore enables customers to make data-driven decisions with Azure Data Explorer and find hidden patterns and trends that would be difficult to uncover without this tool. **Partner type** @@ -344,7 +348,7 @@ We're enabling our customers to make with Azure Data Explorer data-driven decisi :::image type="icon" source="media/findmypartner/Delegate-Logo.png"::: -Development and design of cloud native solutions based on the latest Microsoft technologies and services. Guidance and consultancy on DevOps processes and software design, architecture and development of highly scalable solutions. +Development and design of cloud native solutions based on the latest Microsoft technologies and services. Guidance and consultancy on DevOps processes and software design, architecture, and development of highly scalable solutions. **Partner type** @@ -376,9 +380,9 @@ Development and design of cloud native solutions based on the latest Microsoft t **IoT made simple** -Device Insight is a specialist for Internet of Things and Industry 4.0 and one of the IoT pioneers in the DACH/GSA region. The company develops and operates customized applications, platforms, and IoT solutions in various industries and use case domains based on a wide range of Azure technologies. As such, Device Insight provides consulting for setting up, operating and maintaining Azure Data Explorer and has strong experience in using Azure Data Explorer as a time series database and analytics engine. Using Azure Data Explorer, the solutions provide deep insights based on IoT data, energy data, application logs and other time series data, integrated with datasets from other enterprise applications. Combining Azure Data Explorer with other Azure services, Device Insight provides end-to-end solutions for condition monitoring, predictive maintenance, digital customer portals, data platforms, smart services, energy optimization, production, and machine digitization and similar. +Device Insight is a specialist for Internet of Things and Industry 4.0 and one of the IoT pioneers in the DACH/GSA region. The company develops and operates customized applications, platforms, and IoT solutions in various industries and use case domains based on a wide range of Azure technologies. As such, Device Insight provides consulting for setting up, operating, and maintaining Azure Data Explorer and has strong experience in using Azure Data Explorer as a time series database and analytics engine. By using Azure Data Explorer, the solutions provide deep insights based on IoT data, energy data, application logs, and other time series data, integrated with datasets from other enterprise applications. By combining Azure Data Explorer with other Azure services, Device Insight provides end-to-end solutions for condition monitoring, predictive maintenance, digital customer portals, data platforms, smart services, energy optimization, production, and machine digitization and similar. -In addition to the 360-degree consulting & services, Device Insight offers the flexible application framework CENTERSIGHT scale. The framework offers many building blocks for IoT-related applications out of the box as managed services and comes with native support for Azure Data Explorer alongside a multi-tenancy and subtenancy capability. This allows companies to develop their custom IoT solutions faster and be able to manage end user access to the data stored in Azure Data Explorer on a fine-granular level. +In addition to the 360-degree consulting and services, Device Insight offers the flexible application framework CENTERSIGHT scale. The framework offers many building blocks for IoT-related applications out of the box as managed services and comes with native support for Azure Data Explorer alongside a multitenancy and subtenancy capability. This support allows companies to develop their custom IoT solutions faster and manage end user access to the data stored in Azure Data Explorer on a fine-granular level. **Partner type** @@ -401,7 +405,7 @@ In addition to the 360-degree consulting & services, Device Insight offers the f :::image type="icon" source="media/findmypartner/elasta-cloud-logo.png"::: -Elastacloud are experts at building complex real-time solutions using Azure Data Explorer. With a penchant for understanding event-driven architectures for high-performant, high-fidelity platforms, Elastacloud has used Azure Data Explorer to ingest, transform, and serve data for large scale cybersecurity analytics for Security Operations Centers (SOC) and IoT monitoring solutions serving billions of events an hour through real-time queries using KQL. Elastacloud have contributed the popular tool [DexCmd](https://github.com/elastacloud/dexcmdline) back to the community. If you need high performance, high-fidelity event driven platforms built that simplifies and abstract the user journey contact Elastacloud. +Elastacloud is an expert at building complex real-time solutions by using Azure Data Explorer. With a strong understanding of event-driven architectures for high-performance, high-fidelity platforms, Elastacloud uses Azure Data Explorer to ingest, transform, and serve data for large scale cybersecurity analytics for Security Operations Centers (SOC) and IoT monitoring solutions that handle billions of events an hour through real-time queries by using KQL. Elastacloud contributed the popular tool [DexCmd](https://github.com/elastacloud/dexcmdline) back to the community. If you need high performance, high-fidelity event-driven platforms that simplify and abstract the user journey, contact Elastacloud. **Partner type** @@ -425,9 +429,9 @@ Elastacloud are experts at building complex real-time solutions using Azure Data :::image type="icon" source="media/findmypartner/fellowmind-logo.jpg"::: -Data & Analytics team within Fellowmind Denmark is a part of the entire Data & Analytics capacity in the organization that consists of 400 people working with data. In Denmark, the team is counting 35 experts with each their focus area – Power BI, Data Ingestion, Data Modelling etc. +The Data & Analytics team within Fellowmind Denmark is part of the entire Data & Analytics capacity in the organization. It consists of 400 people working with data. In Denmark, the team has 35 experts, each with their own focus area: Power BI, Data Ingestion, Data Modeling, and more. -The team a broad experience within the entire Data Platform in Azure on both small, medium, large and enterprise clients – spanning private sector, public sector, and the utility sector. +The team has broad experience within the entire Data Platform in Azure for small, medium, large, and enterprise clients, spanning private sector, public sector, and the utility sector. With the emerging focus on IoT, Telemetry and streaming data, the need for experts within this field has also expanded to the Danish Data & Analytics team with specific roles for the complete project approach. @@ -452,14 +456,14 @@ With the emerging focus on IoT, Telemetry and streaming data, the need for exper :::image type="icon" source="media/findmypartner/gettech-logo.png"::: -Get Tech is a Microsoft Solutions Partner company with certifications for Azure Digital & App Innovation and Azure Data & AI. Our cloud architects form the backbone of our consultancy having a proven track record of building solutions for customers in the EMEA region. Our projects cover multiple technical areas from Azure infrastructure deployments, IoT architecture and data analytics platform designs, to cloud migrations. Our customers are from multiple domains, including the energy, healthcare, and travel industries. +Get Tech is a Microsoft Solutions Partner company with certifications for Azure Digital & App Innovation and Azure Data & AI. The cloud architects form the backbone of the consultancy, with a proven track record of building solutions for customers in the EMEA region. Their projects cover multiple technical areas, from Azure infrastructure deployments, IoT architecture, and data analytics platform designs, to cloud migrations. Customers come from multiple domains, including the energy, healthcare, and travel industries. **Partner type** - SI - IoT Solution Provider - Cloud Native Software Engineering & Consulting -- Data Engineering & Consulting for BI, ML or AI solutions +- Data Engineering & Consulting for BI, ML, or AI solutions **Focus geography** @@ -480,7 +484,7 @@ Get Tech is a Microsoft Solutions Partner company with certifications for Azure :::image type="icon" source="media/findmypartner/azure-specialist-logo.png"::: -Consulting, architecture and implementation of cloud-native software for the MS Azure Cloud. +Consulting, architecture, and implementation of cloud-native software for the Microsoft Azure Cloud. **Partner type** @@ -504,13 +508,13 @@ Consulting, architecture and implementation of cloud-native software for the MS :::image type="icon" source="media/findmypartner/ilink-digital-logo.png"::: **Data Technology Jumpstart**\ -We help customers accelerate their project timings by familiarizing them with the Azure data platform technologies, and environment setup, providing reference solutions to the customer use-case and setting up guidance for best practices. +The iLink Systems team helps you accelerate your project timelines by familiarizing you with the Azure data platform technologies and environment setup. They provide reference solutions for your use case and guidance for best practices. **Architecture Consulting**\ -Our experts work to architect solutions for our customer's most pressing data architecture use cases. We analyze the existing system, understand the current pain points and provide a future-proof reference architecture, execute a couple of sample use cases, and set up guidance for the best practices. +The iLink Systems experts work to architect solutions for your most pressing data architecture use cases. They analyze the existing system, understand the current pain points, and provide a future-proof reference architecture. They execute a couple of sample use cases and set up guidance for the best practices. **Data Platform Build-up**\ -We build up our customer's data platforms powered with Azure data services. Our team enables our customers to create their own complete data platform from inception to production, set up processes for data analysis, data integration, exposing data as a product, and set up data governance and monitoring for different data-related programs and projects. +The iLink Systems team builds your data platform powered by Azure data services. They enable you to create your own complete data platform from inception to production. They set up processes for data analysis, data integration, exposing data as a product, and set up data governance and monitoring for different data-related programs and projects. **Partner type** @@ -566,11 +570,11 @@ InCycle provides expert consulting for companies seeking to harness data to inno :::image type="icon" source="media/findmypartner/insight-logo.jpg"::: -Insight is ready to help you get more value from your data at any scale. Harnessing the power of Azure Data Explorer, Insight can drive real-time intelligence discovery and delivery over your log, IoT, web-click, or other large-scale, fast-paced data with a secure, cost-effective solution. +Insight helps you get more value from your data at any scale. By harnessing the power of Azure Data Explorer, Insight drives real-time intelligence discovery and delivery over your log, IoT, web-select, or other large-scale, fast-paced data with a secure, cost-effective solution. **Partner type** -- global solutions integrator +- Global solutions integrator - SI **Focus geography** @@ -592,7 +596,7 @@ Insight is ready to help you get more value from your data at any scale. Harness :::image type="icon" source="media/findmypartner/elasta-cloud-intelligent-spaces-logo.png"::: -A product spin-off of Elastacloud, Intelligent Spaces build an Azure backed Digital Twin for managing spaces used by business. Intelligent Spaces handles BIM collaboration and analytics, automated graph creation and a geospatial enrichment engine that produced 3D and AR visualizations. Operating at the intersection of spatial and real-time, their Digital Twin is connected to physical space using IoT technologies. Their Analytics Pack is an Azure Data Explorer powered, web UI that allows business users to drag and drop analytic operations that are then translated and executed directly in Azure Data Explorer. They've contributed the popular tool [AdxUtils](https://github.com/intelligentspaces/AdxUtils) back to the community. If you need Digital Twins or BIM integrations with Azure Data Explorer, contact Intelligent Spaces. +A product spin-off of Elastacloud, Intelligent Spaces builds an Azure-backed digital twin for managing spaces used by business. Intelligent Spaces handles BIM collaboration and analytics, automated graph creation, and a geospatial enrichment engine that produces 3D and AR visualizations. Operating at the intersection of spatial and real-time, their digital twin connects to physical space by using IoT technologies. Their Analytics Pack is an Azure Data Explorer-powered web UI that business users can use to drag and drop analytic operations that are then translated and executed directly in Azure Data Explorer. They contributed the popular tool [AdxUtils](https://github.com/intelligentspaces/AdxUtils) back to the community. If you need digital twins or BIM integrations with Azure Data Explorer, contact Intelligent Spaces. **Partner type** @@ -616,17 +620,17 @@ A product spin-off of Elastacloud, Intelligent Spaces build an Azure backed Digi :::image type="icon" source="media/findmypartner/linkit-logo.png"::: -LINKIT serves more than 100 customers in the Netherlands and Germany, providing digital innovations that help customers accelerate IT to become frontrunners in their industry. For over 25 years, LINKIT helps solve business challenges by combining a winning approach, a knowledge-driven team, and powerful technology like Low-code platforms Mendix and OutSystems, as well as data, cloud & IoT technology. +LINKIT serves more than 100 customers in the Netherlands and Germany, providing digital innovations that help customers accelerate IT to become frontrunners in their industry. For over 25 years, LINKIT helps solve business challenges by combining a winning approach, a knowledge-driven team, and powerful technology like low-code platforms Mendix and OutSystems, as well as data, cloud, and IoT technology. **Partner type** -- IT-partner, focused on low-code software development, data engineering and cloud automation +- IT partner, focused on low-code software development, data engineering, and cloud automation **Focus geography** - Netherlands - Germany -- South-Africa +- South Africa **Contact** @@ -640,9 +644,9 @@ LINKIT serves more than 100 customers in the Netherlands and Germany, providing :::image type="icon" source="media/findmypartner/mm-logo.jpg"::: -M&M Software is a technology and consulting company for digital solutions. Our range of services includes substantiated management and technology consulting, high qualified software development and maintenance as well as comprehensive quality assurance and IT services. +M&M Software is a technology and consulting company for digital solutions. Their range of services includes substantiated management and technology consulting, highly qualified software development and maintenance, as well as comprehensive quality assurance and IT services. -As a project partner for software development services, we drive the success of our customers and support them in the realization of their digital visions - from initial vision to the finished product. Software solutions from M&M pave the way for the future of an intelligently connected world. +As a project partner for software development services, they drive the success of their customers and support them in the realization of their digital visions - from initial vision to the finished product. Software solutions from M&M pave the way for the future of an intelligently connected world. **Partner type** @@ -671,10 +675,10 @@ As a project partner for software development services, we drive the success of :::image type="icon" source="media/findmypartner/mandelbulb-logo.png"::: -Mandelbulb Technologies pioneers innovative Cloud Native, Data, and AI services, tailoring cutting-edge solutions for businesses seeking to amplify their digital footprint. -As partners to Microsoft, we excel in leveraging Microsoft's scalable solutions to deliver beyond client expectations, focusing on data-driven insights powered by advanced analytics, machine learning, and AI integrated with Azure's robust cloud capabilities. This ensures every solution is scalable and secure. -Our expertise extends to Azure Data Explorer (ADX) implementation, crafting swift and scalable data analysis platforms that excel in real-time management of diverse datasets, including logs and time-series data. With ADX, we enable real-time insights and decision-making, uncovering trends that drive businesses forward. -With a strong industry presence in Retail, Healthcare, Manufacturing, Finance, and Fleet & Logistics, Mandelbulb Technologies carves customized solutions that empower informed decision-making and drive exponential business growth. +Mandelbulb Technologies pioneers innovative cloud native, data, and AI services, tailoring cutting-edge solutions for businesses seeking to amplify their digital footprint. +As partners to Microsoft, the company excels in using Microsoft's scalable solutions to deliver beyond client expectations, focusing on data-driven insights powered by advanced analytics, machine learning, and AI integrated with Azure's robust cloud capabilities. This approach ensures every solution is scalable and secure. +The company's expertise extends to Azure Data Explorer (ADX) implementation, crafting swift and scalable data analysis platforms that excel in real-time management of diverse datasets, including logs and time-series data. By using ADX, the company enables real-time insights and decision-making, uncovering trends that drive businesses forward. +With a strong industry presence in retail, healthcare, manufacturing, finance, and fleet and logistics, Mandelbulb Technologies carves customized solutions that empower informed decision-making and drive exponential business growth. **Partner type** @@ -698,12 +702,12 @@ With a strong industry presence in Retail, Healthcare, Manufacturing, Finance, a :::image type="icon" source="media/findmypartner/maq-software-logo.png"::: -As 2021 Microsoft Power BI Partner of the Year, we engage with leading companies to accelerate their business intelligence and analytics initiatives. Our solutions enable our clients to improve their operations, reduce costs, increase sales, and build stronger customer relationships. Our clients consistently recognize us for providing architecture and governance frameworks, implementing best practices to optimize reports, and building team capability through training programs. Our innovative tools and 33 certified visuals expand Power BI capabilities to save time for decision makers. -As a premier supplier to Microsoft for two decades, our clients benefit from our extensive insights on the platform and engineering practices. As a Microsoft Managed Partner, our clients benefit from our breadth and depth of expertise. With globally integrated teams in Redmond, Washington, and three locations in India, we deliver solutions with increased velocity and technical intensity. Inc. magazine has recognized us for sustained growth by listing us on the Inc. 5000 list 10 times – a rare honor. +As the 2021 Microsoft Power BI Partner of the Year, MAQ Software works with leading companies to accelerate their business intelligence and analytics initiatives. Their solutions help clients improve operations, reduce costs, increase sales, and build stronger customer relationships. Clients consistently recognize MAQ Software for providing architecture and governance frameworks, implementing best practices to optimize reports, and building team capability through training programs. Their innovative tools and 33 certified visuals expand Power BI capabilities to save time for decision makers. +As a premier supplier to Microsoft for two decades, clients benefit from MAQ Software's extensive insights on the platform and engineering practices. As a Microsoft Managed Partner, clients benefit from their breadth and depth of expertise. With globally integrated teams in Redmond, Washington, and three locations in India, they deliver solutions with increased velocity and technical intensity. Inc. magazine has recognized MAQ Software for sustained growth by listing them on the Inc. 5000 list 10 times – a rare honor. **Partner type** -- SI mostly with SaaS Offerings +- SI mostly with SaaS offerings **Focus geography** @@ -727,7 +731,7 @@ As a premier supplier to Microsoft for two decades, our clients benefit from our :::image type="icon" source="media/findmypartner/mesh-systems-logo.png"::: -Mesh Systems is an IoT Solutions Provider that develops, operates, and manages end-to-end IoT solutions. Our full stack capabilities span hardware design, embedded software development, device connectivity, cloud-based services, and custom web/app development. Mesh Systems is the ideal partner to launch new connected products, scale a proof-of-value, and reach hyper growth production volume. +Mesh Systems is an IoT Solutions Provider that develops, operates, and manages end-to-end IoT solutions. Its full stack capabilities span hardware design, embedded software development, device connectivity, cloud-based services, and custom web/app development. Mesh Systems is the ideal partner to launch new connected products, scale a proof-of-value, and reach hyper growth production volume. **Partner type** @@ -757,7 +761,7 @@ Mesh Systems is an IoT Solutions Provider that develops, operates, and manages e :::image type="icon" source="media/findmypartner/msg-logo.jpg"::: -Msg is an independent, international group of companies with more than 10,000 employees worldwide. +Msg is an independent, international group of companies with more than 10,000 employees worldwide. It's represented in 32 countries and supports its customers in their digital transformation. Founded in 1980, the consulting and IT company offers strategic business consulting and end-to-end solutions for the industries automotive, banking, consumer products, food, healthcare, insurance, life science & chemicals, manufacturing, public sector, telecommunications, travel & logistics, and utilities. Within the group, independent companies cover the wide variety of industry and topic-based competence. Msg systems ag forms the core of the company group. It's represented in 32 countries/regions and supports its customers in their digital transformation. Founded in 1980, the consulting and IT company‘s range of services includes strategic business consulting and end-to-end solutions for the industries automotive, banking, consumer products, food, healthcare @@ -767,8 +771,8 @@ topic-based competence. Msg systems ag forms the core of the company group. **Partner type** -- Development of Standard Software and Individual Solutions -- System Integration +- Development of standard software and individual solutions +- System integration **Focus geography** @@ -789,7 +793,7 @@ topic-based competence. Msg systems ag forms the core of the company group. :::image type="icon" source="media/findmypartner/no-logo.png"::: -Provide training around Azure Data Explorer. +Provides training around Azure Data Explorer. **Partner type** @@ -812,7 +816,7 @@ Provide training around Azure Data Explorer. :::image type="icon" source="media/findmypartner/option-4-0-logo.png"::: -We have a Co-sell offering on the Azure Market place: https://azuremarketplace.microsoft.com/marketplace/consulting-services/option40ag1624272391965.02052010 +OPTION 4.0 AG has a [Co-sell offering on Azure Marketplace](https://azuremarketplace.microsoft.com/marketplace/consulting-services/option40ag1624272391965.02052010). **Partner type** @@ -835,7 +839,7 @@ We have a Co-sell offering on the Azure Market place: https://azuremarketplace.m :::image type="icon" source="media/findmypartner/orion-innovation-logo.jpg"::: -Orion Innovation is a Leader in Digital transformation services with a Design led, technology driven approach. We're a trusted partner to our Fortune 500, Large, Medium clients in their business transformation initiatives with 99% CSAT. With 25+ years of experience we bring deep domain expertise in Financial Services, Professional Services, Healthcare & Life Sciences, Hi-Tech, Telecom, Media & Entertainment, Sports, and Education Verticals. Our global team of 6,000+ associates in 12 major delivery centers across USA, LATAM, Europe, and APAC delivers those digital transformation services around Experience Design, Digital Product Development, Data Analytics & AI, Cloud & Infrastructure, Business application & Modernization, Embedded & real time solutions, IoT/IIoT, Testing, and Cybersecurity. We're ISO 9001:2015, ISO/IEC 27001:2013 certified, and CMMI®️ Level 3 compliant and have IP's covering Industry Solutions, Accelerators, and proprietary internal tools. +Orion Innovation is a leader in digital transformation services with a design-led, technology-driven approach. The company is a trusted partner to Fortune 500 and mid-size clients in their business transformation initiatives with 99% CSAT. With more than 25 years of experience, Orion brings deep domain expertise in financial services, professional services, healthcare and life sciences, hi-tech, telecom, media and entertainment, sports, and education verticals. A global team of more than 6,000 associates in 12 major delivery centers across the USA, LATAM, Europe, and APAC delivers digital transformation services around experience design, digital product development, data analytics and AI, cloud and infrastructure, business application and modernization, embedded and real-time solutions, IoT/IIoT, testing, and cybersecurity. Orion is ISO 9001:2015 and ISO/IEC 27001:2013 certified, CMMI® Level 3 compliant, and holds IP covering industry solutions, accelerators, and proprietary internal tools. **Partner type** @@ -861,7 +865,7 @@ Orion Innovation is a Leader in Digital transformation services with a Design le :::image type="icon" source="media/findmypartner/skypepointcloud-logo.png"::: -SkyPoint Cloud is a SaaS and Professional Services consultancy company headquartered in Portland, OR. SkyPoint’s Modern Data Stack Platform (MDSP) SaaS solution is a data ingestion hub to manage, clean, and analyze your data with automated pipelines and a myriad of integrations. SkyPoint Cloud Solutions Group (CSG) is our consultancy arm that provides custom data solutions, application development, managed business intelligence, training and mentoring for public and private sector clients. +SkyPoint Cloud is a SaaS and professional services consultancy company headquartered in Portland, OR. SkyPoint’s Modern Data Stack Platform (MDSP) SaaS solution is a data ingestion hub to manage, clean, and analyze your data with automated pipelines and a myriad of integrations. SkyPoint Cloud Solutions Group (CSG) is the consultancy arm that provides custom data solutions, application development, managed business intelligence, training, and mentoring for public and private sector clients. **Partner type** @@ -885,11 +889,11 @@ SkyPoint Cloud is a SaaS and Professional Services consultancy company headquart :::image type="icon" source="media/findmypartner/spartabi-logo.png"::: -SpartaBI provides boutique consulting and development services in the Microsoft data platform stack. We specialize in designing and implementing cloud based analytical systems. +SpartaBI provides boutique consulting and development services in the Microsoft data platform stack. They specialize in designing and implementing cloud-based analytical systems. -Azure Data Explorer combines a powerful and fast engine with many built-in utilizations that make life easier for both developers and users. It's an impressive PaaS offering that fits perfectly as a major player in many cloud architectures. +Azure Data Explorer combines a powerful and fast engine with many built-in features that make life easier for both developers and users. It's an impressive PaaS offering that fits perfectly as a major player in many cloud architectures. -We offer to put our experience and dedication into harnessing the impressive capabilities of Azure Data Explorer and take your solution to great heights. +SpartaBI offers to put their experience and dedication into harnessing the impressive capabilities of Azure Data Explorer and take your solution to great heights. **Partner type** @@ -913,7 +917,7 @@ We offer to put our experience and dedication into harnessing the impressive cap :::image type="icon" source="media/findmypartner/terawe-logo.png"::: -We have deep expertise with custom solutions and also have multiple solution offerings that help businesses move to the next stage of digital transformation and achieve greater efficiencies with the use of Microsoft's Data Platform and AI services. +Terawe Corporation has deep expertise in custom solutions. It also offers multiple solutions that help businesses move to the next stage of digital transformation and achieve greater efficiencies by using Microsoft's Data Platform and AI services. **Partner type** @@ -938,7 +942,7 @@ We have deep expertise with custom solutions and also have multiple solution off :::image type="icon" source="media/findmypartner/tricloud-logo.png"::: -Tricloud provides an end-to-end Industrial IoT Platform based on Azure IoT and Azure Data Explorer, to support the Digitalization efforts of modern industries. Tricloud supports enterprises in their cloud transformation with expert Azure consultants, specializing in Azure IoT and data analytics with Azure Data Explorer. +Tricloud provides an end-to-end Industrial IoT Platform based on Azure IoT and Azure Data Explorer, to support the digitalization efforts of modern industries. Tricloud supports enterprises in their cloud transformation with expert Azure consultants, specializing in Azure IoT and data analytics with Azure Data Explorer. **Partner type** @@ -966,11 +970,11 @@ Tricloud provides an end-to-end Industrial IoT Platform based on Azure IoT and A :::image type="icon" source="media/findmypartner/uptake-logo.png"::: -Uptake provides our customers with the scalable, secure ability to connect their machines, people, and data together to accelerate and unlock AI-enabled industrial intelligence to optimize costs, manage risks, and increase revenue assurance. +Uptake provides customers with the scalable, secure ability to connect their machines, people, and data together to accelerate and unlock AI-enabled industrial intelligence to optimize costs, manage risks, and increase revenue assurance. -Uptake is the intelligence system for industrial assets. With the power of data acquisition and artificial intelligence, Uptake gives all departments, such as maintenance, reliability, and operations teams, a single, shared, and contextualized view of every asset in an operation. Driven by powerful data science models and cloud computing, our products deliver insights to customers that help them predict and prevent asset failure, mitigate risk, optimize maintenance strategy and asset performance, reduce costs, assure productivity, and enhance safety. With 48+ patents and recognized for leadership in Industrial AI by Gartner, the World Economic Forum, CNBC, and Forbes, Uptake is headquartered in Chicago with presence in Canada, South America, Europe, India, and Australia. +Uptake is the intelligence system for industrial assets. With the power of data acquisition and artificial intelligence, Uptake gives all departments, such as maintenance, reliability, and operations teams, a single, shared, and contextualized view of every asset in an operation. Driven by powerful data science models and cloud computing, the products deliver insights to customers that help them predict and prevent asset failure, mitigate risk, optimize maintenance strategy and asset performance, reduce costs, assure productivity, and enhance safety. With more than 48 patents and recognized for leadership in Industrial AI by Gartner, the World Economic Forum, CNBC, and Forbes, Uptake is headquartered in Chicago with presence in Canada, South America, Europe, India, and Australia. -Uptake provides asset-intensive companies the transparency, traceable, secure, cost-effective ability to connect their machines, people, and data together providing assurance on ESG Reporting and Disclosure with Data granularity, accessibility, accuracy, and better governance. +Uptake provides asset-intensive companies the transparency, traceable, secure, cost-effective ability to connect their machines, people, and data together providing assurance on ESG Reporting and Disclosure with data granularity, accessibility, accuracy, and better governance. **Partner type** @@ -993,7 +997,7 @@ Uptake provides asset-intensive companies the transparency, traceable, secure, c :::image type="icon" source="media/findmypartner/zure-ltd-logo.jpg"::: -Experienced company that is focused on full lifecycle custom software development and integrations using Azure PaaS services. +Experienced company that focuses on full lifecycle custom software development and integrations by using Azure PaaS services. **Partner type** @@ -1013,3 +1017,8 @@ Experienced company that is focused on full lifecycle custom software developmen - [Zure Ltd website](https://www.zure.com) - [Microsoft partner site for Zure Ltd](https://appsource.microsoft.com/marketplace/partner-dir/d4842539-1664-4a55-981e-a6a6643b6d02/overview) + +## Related content + +- [Azure Data Explorer overview](data-explorer-overview.md) +- [Get started with Azure Data Explorer](start-for-free.md) diff --git a/data-explorer/ingest-data-splunk.md b/data-explorer/ingest-data-splunk.md index f34fd1d4eb..9c33760646 100644 --- a/data-explorer/ingest-data-splunk.md +++ b/data-explorer/ingest-data-splunk.md @@ -1,9 +1,9 @@ --- title: Ingest data from Splunk to Azure Data Explorer -description: In this article, you learn how to ingest (load) data into Azure Data Explorer from Splunk +description: Learn how to use the Azure Data Explorer Splunk add-on to ingest log and telemetry data from Splunk Enterprise into an Azure Data Explorer table. ms.reviewer: takamara ms.topic: how-to -ms.date: 09/28/2023 +ms.date: 06/10/2026 ms.custom: sfi-image-nochange #Customer intent: As a DevOps engineer, I want to use Splunk to pipeline logs and ingest into Azure Data Explorer so that I can analyze them later. --- @@ -14,7 +14,7 @@ ms.custom: sfi-image-nochange [Splunk Enterprise](https://www.splunk.com/en_us/products/splunk-enterprise.html) is a software platform that allows you to ingest data from many sources simultaneously. The Splunk indexer processes the data and stores it by default in the main index or a specified custom index. Searching in Splunk uses the indexed data for creating metrics, dashboards, and alerts. Azure Data Explorer is a fast and highly scalable data exploration service for log and telemetry data. -In this article, you learn how to the Azure Data Explorer Splunk add-on to send data from Splunk to a table in your cluster. You initially create a table and data mapping, then direct Splunk to send data into the table, and then validate the results. +In this article, you'll learn how to use the Azure Data Explorer Splunk add-on to send data from Splunk to a table in your cluster. You create a table and data mapping, direct Splunk to send data into the table, and then validate the results. The following scenarios are most suitable for ingesting data into Azure Data Explorer: @@ -31,9 +31,9 @@ The following scenarios are most suitable for ingesting data into Azure Data Exp ## Create a table and a mapping object -After you have a cluster and a database, create a table with a schema that matches your Splunk data. You also create a mapping object that is used to transform the incoming data into the target table schema. +After you have a cluster and a database, create a table with a schema that matches your Splunk data. You also create a mapping object that transforms the incoming data into the target table schema. -In the following example, you create a table named `WeatherAlert` with four columns: `Timestamp`, `Temperature`, `Humidity`, and `Weather`. You also create a new mapping named `WeatherAlert_Json_Mapping` that extracts properties from the incoming json as noted by the `path` and outputs them to the specified `column`. +In the following example, you create a table named `WeatherAlert` with four columns: `Timestamp`, `Temperature`, `Humidity`, and `Weather`. You also create a mapping named `WeatherAlert_Json_Mapping` that extracts properties from the incoming JSON as noted by the `path` and outputs them to the specified `column`. In the [web UI query editor](web-ui-query-overview.md#write-and-run-queries), run the following commands to create the table and mapping: @@ -43,7 +43,7 @@ In the [web UI query editor](web-ui-query-overview.md#write-and-run-queries), ru .create table WeatherAlert (Timestamp: datetime, Temperature: string, Humidity: string, Weather: string) ``` -1. Verify that the table `WeatherAlert` was created and is empty: +1. Verify that the `WeatherAlert` table was created and is empty: ```Kusto WeatherAlert @@ -61,9 +61,9 @@ In the [web UI query editor](web-ui-query-overview.md#write-and-run-queries), ru ]``` ~~~ -2. Use the service principal from the [Prerequisites](#prerequisites) to grant permission to work with the database. +1. Use the service principal from the [Prerequisites](#prerequisites) to grant permission to work with the database. - ```kusto + ```Kusto .add database YOUR_DATABASE_NAME admins ('aadapp=YOUR_APP_ID;YOUR_TENANT_ID') 'Entra App' ``` @@ -74,7 +74,7 @@ The Splunk add-on communicates with Azure Data Explorer and sends the data to th 1. Download the [Azure Data Explorer add-on](https://splunkbase.splunk.com/app/6979). 1. Sign in to your Splunk instance as an administrator. 1. Go to **Apps** > **Manage Apps**. -1. Select **Install app from file** and then *Azure Data Explorer add-on* file you downloaded. +1. Select **Install app from file**, and then select the *Azure Data Explorer add-on* file you downloaded. 1. Follow the prompts to complete the installation. 1. Select **Restart Now**. 1. Verify that the add-on is installed by going to **Dashboard** > **Alert Actions** and looking for the *Azure Data Explorer add-on*. @@ -83,12 +83,12 @@ The Splunk add-on communicates with Azure Data Explorer and sends the data to th ## Create a new index in Splunk -Create an index in Splunk specifying the criteria for the data you want to send to Azure Data Explorer. +Create an index in Splunk that specifies the criteria for the data you want to send to Azure Data Explorer. 1. Sign in to your Splunk instance as an administrator. 1. Go to **Settings** > **Indexes**. -1. Specify a name for the index and configure the criteria for the data you want to send to Azure Data Explorer. -1. Configure the remaining properties as required and then save the index. +1. Specify a name for the index, and configure the criteria for the data you want to send to Azure Data Explorer. +1. Configure the remaining properties as required, and then save the index. ## Configure the Splunk add-on to send data to Azure Data Explorer @@ -115,7 +115,7 @@ Create an index in Splunk specifying the criteria for the data you want to send | **Table** | Specify the name of the table you want to send the data to. | | **Mapping** | Specify the name of the mapping object you created earlier. | | **Remove Extra Fields** | Select this option to remove any empty fields from the data sent to your cluster. | - | **Durable Mode** | Select this option to enable durability mode during ingestion. When set to true, the ingestion throughput is impacted. | + | **Durable Mode** | Select this option to enable durability mode during ingestion. When set to true, ingestion throughput is affected. | :::image type="content" source="media/ingest-data-splunk/save-alert-as-connection.png" alt-text="Screenshot of create alert dialog showing the Azure Data Explorer add-on connection settings." lightbox="media/ingest-data-splunk/save-alert-as-connection.png"::: @@ -126,7 +126,7 @@ Create an index in Splunk specifying the criteria for the data you want to send ## Verify that data is ingested into Azure Data Explorer -Once the alert is triggered, data is sent to your Azure Data Explorer table. You can verify that the data is ingested by running a query in the [web UI query editor](web-ui-query-overview.md#write-and-run-queries). +After the alert is triggered, data is sent to your Azure Data Explorer table. You can verify that the data is ingested by running a query in the [web UI query editor](web-ui-query-overview.md#write-and-run-queries). 1. Run the following query to verify that data is ingested into the table: @@ -146,4 +146,4 @@ Once the alert is triggered, data is sent to your Azure Data Explorer table. You ## Related content -* [Write queries](/azure/data-explorer/kusto/query/tutorials/learn-common-operators) +* [Write queries](kusto/query/tutorials/learn-common-operators.md) diff --git a/data-explorer/integrate-mcp-servers.md b/data-explorer/integrate-mcp-servers.md index 4d192d61f4..0655dc3e41 100644 --- a/data-explorer/integrate-mcp-servers.md +++ b/data-explorer/integrate-mcp-servers.md @@ -1,65 +1,82 @@ --- -title: Use the Model Context Protocol (MCP) Server With ADX Clusters -description: Learn how to use Model Context Protocol (MCP) with Azure Data Explorer clusters to create AI agents and applications that analyze real-time data. Get started now! +title: Use a Model Context Protocol (MCP) Server with Azure Data Explorer Clusters +description: Learn how to use the Model Context Protocol (MCP) with Azure Data Explorer clusters to create AI agents and applications that analyze real-time data. ms.reviewer: sharmaanshul author: spelluru ms.author: spelluru ms.topic: concept-article -ms.date: 09/14/2025 +ms.date: 06/09/2026 ms.search.form: MCP, AI, agents -#CustomerIntent: As an ADX AI developer, I want to use the RTI MCP server or Azure MCP server to create AI agents and AI applications. +#CustomerIntent: As an Azure Data Explorer AI developer, I want to use the Real-Time Intelligence MCP server or an Azure MCP Server instance to create AI agents and AI applications so that I can get AI-driven insights and actions. --- -# Use MCP Servers with Azure Data Explorer (preview) +# Use MCP servers with Azure Data Explorer (preview) -Integrating Model Context Protocol (MCP) with Azure Data Explorer (ADX) clusters lets you get AI-driven insights and actions in real time. The MCP server lets AI agents or AI applications interact with ADX by providing tools through the MCP interface, so you can query and analyze data easily. +The [Model Context Protocol](https://modelcontextprotocol.io/introduction) (MCP) lets AI models, like Azure OpenAI models, interact with external tools and resources. MCP makes it easier for agents to find, connect to, and use enterprise data. -[Model Context Protocol](https://modelcontextprotocol.io/introduction) (MCP) is a protocol that lets AI models, like Azure OpenAI models, interact with external tools and resources. MCP makes it easier for agents to find, connect to, and use enterprise data. +When you integrate MCP with Azure Data Explorer clusters, you get AI-driven insights and actions in real time. An MCP server lets AI agents or AI applications interact with Azure Data Explorer by providing tools through the MCP interface. You use these tools to query and analyze data. > [!NOTE] -> > This feature is in preview. -The most common scenario for using the RTI or Azure MCP Server is to connect to it from an existing AI client, such as Cline, Claude, and GitHub copilot. The AI client can then use the available tools to access and interact with ADX resources using natural language. +## Servers for building AI agents -For example, you could use GitHub Copilot agent mode with the RTI MCP Server to list KQL databases or run natural language queries on ADX clusters. +MCP support for Azure Data Explorer is a full open-source MCP server integration. It supports natural language queries and allows agents to discover schemas and metadata dynamically. An MCP server can be used with various AI clients, such as GitHub Copilot, Cline, or Claude Desktop. -## Build AI Agents +You can use the following MCP servers to integrate and build AI agents with Azure Data Explorer: -MCP support for Azure Data Explorer is a full open-source MCP server integration. It supports natural language queries and allows agents to discover schemas and metadata dynamically. The MCP server can be used with various AI clients, such as GitHub Copilot, Cline, or Claude Desktop. +* [Fabric Real-Time Intelligence MCP server (preview)](https://github.com/microsoft/fabric-rti-mcp/). This server is designed for use with Azure Data Explorer clusters or with a Real-Time Intelligence eventhouse. It provides a unified interface for AI agents to query, reason, and act on real-time data. -You can use the following MCP Servers to integrate and build AI agents with Azure Data Explorer: +* [Azure MCP Server instance (preview)](/azure/developer/azure-mcp-server/tools/azure-data-explorer). Azure MCP Server allows you to manage Azure Data Explorer resources by using natural language prompts. You can list clusters, view databases, query data, and more without remembering complex Kusto Query Language (KQL) syntax. -* [Fabric RTI MCP Server (preview)](https://github.com/microsoft/fabric-rti-mcp/) - This server is designed for use with ADX clusters or with a Fabric Real-Time Intelligence (RTI) Eventhouse. It provides a unified interface for AI agents to query, reason, and act on real-time data. +The most common scenario for using the Real-Time Intelligence MCP server or an Azure MCP Server instance is to connect to it from an existing AI client. The AI client can then use the available tools to access and interact with Azure Data Explorer resources by using natural language. -* [Azure MCP Server (preview)](/azure/developer/azure-mcp-server/tools/azure-data-explorer) - The Azure MCP Server allows you to manage Azure Data Explorer resources using natural language prompts. You can list clusters, view databases, query data, and more without remembering complex Kusto Query Language (KQL) syntax. +For example, you can use GitHub Copilot agent mode with the Real-Time Intelligence MCP server to list KQL databases or run natural language queries on Azure Data Explorer clusters. ## Architecture -The MCP Server is at the core of the system and acts as a bridge between AI agents and ADX data sources. Agents send requests to the MCP server, which translates them into ADX queries. +The MCP server is at the core of the system and acts as a bridge between AI agents and Azure Data Explorer data sources. Agents send requests to the MCP server, which translates them into Azure Data Explorer queries. :::image type="content" source="media/model-context-protocol/model-context-protocol-server-architecture.png" alt-text="Diagram that shows the MCP architecture."::: -This architecture lets you build modular, scalable, and secure intelligent applications that respond to real-time signals. MCP uses a client-server architecture, so AI applications can interact with external tools efficiently. The architecture includes the following components: +With this architecture, you can build modular, scalable, intelligent applications that respond to real-time signals. MCP uses a client/server architecture, so AI applications can interact with external tools efficiently. The architecture includes the following components: -- **MCP Host**: The application where AI interactions happen. For example, Visual Studio Code with GitHub Copilot, Claude Desktop, Cline. The host contains the AI model connection, a tool orchestrator, and one or more MCP clients. -* **MCP Server**: Lightweight applications exposing specific capabilities by natural language APIs, databases. For example, to execute KQL queries for real-time data retrieval from ADX clusters. +* **MCP host**. The application where AI interactions happen. For example, the host can be Visual Studio Code with GitHub Copilot, Claude Desktop, or Cline. The host contains the AI model connection, a tool orchestrator, and one or more MCP clients. +* **MCP server**. A lightweight application that exposes specific capabilities by using natural language APIs and databases. For example, you use an MCP server to run KQL queries for real-time data retrieval from Azure Data Explorer clusters. ## Key features -**Real-Time Data Access**: Retrieval of data from ADX clusters in seconds. +**Real-time data access**. Retrieve data from Azure Data Explorer clusters in seconds. -**Natural Language Interfaces**: Users or agents ask questions in plain English or other languages, and the system turns them into optimized queries (NL2KQL). +**Natural language interfaces**. Users or agents ask questions in plain English or other languages, and the system turns them into optimized queries. For more information, see [this blog post about the NL2KQL framework](https://techcommunity.microsoft.com/blog/securitycopilotblog/empowering-security-copilot-with-nl2kql-transforming-natural-language-into-insig/4388930). -**Schema Discovery**: MCP servers show schema and metadata, so agents can learn data structures dynamically. +**Schema discovery**. MCP servers show schema and metadata, so agents can learn data structures dynamically. -**Plug-and-Play Integration**: MCP clients like GitHub Copilot, Claude, and Cline connect to RTI with minimal setup because of standardized APIs and discovery mechanisms. +**Plug-and-play integration**. MCP clients like GitHub Copilot, Claude, and Cline connect to Real-Time Intelligence with minimal setup because of standardized APIs and discovery mechanisms. -**Local Language Inference**: Use your preferred language to work with your data. +**Local language inference**. Use your preferred language to work with your data. + +## Considerations and limitations + +### Security + +MCP is a new phenomenon. As with all new technology standards, consider doing a security review to ensure that any systems that integrate with MCP servers follow all regulations and standards that your system must adhere to. This review includes not only the Real-Time Intelligence MCP servers, but any MCP client or agent that you choose to implement (down to the model provider). + +You should follow Microsoft security guidance for MCP servers, including enabling Microsoft Entra ID authentication, secure token management, and network isolation. For more information, see the [Microsoft security documentation](/security/). + +### Permissions and risk + +MCP clients can invoke operations based on the user's Microsoft Entra ID permissions. Autonomous or misconfigured clients might perform destructive actions. Review and apply least-privilege permissions and implement safeguards before deployment. + +Certain safeguards, such as flags to prevent destructive operations, aren't standardized in the MCP specification and might not be supported by all clients. + +### Compliance responsibility + +An MCP server might be installed with, be used with, and share data with clients and services. These clients and services can include non-Microsoft large language models (LLMs), AI agents, or services that operate outside the compliance boundaries of Fabric. You're responsible for ensuring that any integration complies with applicable organizational, regulatory, and contractual requirements. ## Related content -* [RTI MCP server](https://github.com/microsoft/fabric-rti-mcp/) +* [Real-Time Intelligence MCP server](https://github.com/microsoft/fabric-rti-mcp/) * [Azure MCP Server](/azure/developer/azure-mcp-server/) * [Model Context Protocol (MCP) overview](https://modelcontextprotocol.io/introduction) diff --git a/data-explorer/kusto/includes/slm-embeddings-fl-fabric.md b/data-explorer/kusto/includes/slm-embeddings-fl-fabric.md index d4a39bc7be..d1ce183b99 100644 --- a/data-explorer/kusto/includes/slm-embeddings-fl-fabric.md +++ b/data-explorer/kusto/includes/slm-embeddings-fl-fabric.md @@ -46,9 +46,9 @@ let slm_embeddings_fl = (tbl:(*), text_col:string, embeddings_col:string, batch_ { let kwargs = bag_pack('text_col', text_col, 'embeddings_col', embeddings_col, 'batch_size', batch_size, 'model_name', model_name, 'prefix', prefix); let code = ```if 1: + import os from sandbox_utils import Zipackage Zipackage.install('embedding_engine.zip') - Zipackage.install('tokenizers-0.22.1.whl') from embedding_factory import create_embedding_engine @@ -60,7 +60,8 @@ let slm_embeddings_fl = (tbl:(*), text_col:string, embeddings_col:string, batch_ Zipackage.install(f'{model_name}.zip') - engine = create_embedding_engine(model_name, cache_dir="C:\\Temp") + work_dir = os.environ.get("UPLOAD_PATH") # "/app/temp" + engine = create_embedding_engine(model_name, cache_dir=work_dir) embeddings = engine.encode(df[text_col].tolist(), batch_size=batch_size, prefix=prefix) # prefix is used only for E5 result = df @@ -69,7 +70,6 @@ let slm_embeddings_fl = (tbl:(*), text_col:string, embeddings_col:string, batch_ tbl | evaluate hint.distribution=per_node python(typeof(*), code, kwargs, external_artifacts = bag_pack( 'embedding_engine.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/embedding_engine.zip;impersonate', - 'tokenizers-0.22.1.whl', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/tokenizers-0.22.1-cp39-abi3-win_amd64.whl;impersonate', 'harrier-v1-270m.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/harrier-v1-270m.zip;impersonate', 'jina-v2-small.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/jina-v2-small.zip;impersonate', 'e5-small-v2.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/e5-small-v2.zip;impersonate')) @@ -90,9 +90,9 @@ slm_embeddings_fl(tbl:(*), text_col:string, embeddings_col:string, batch_size:in { let kwargs = bag_pack('text_col', text_col, 'embeddings_col', embeddings_col, 'batch_size', batch_size, 'model_name', model_name, 'prefix', prefix); let code = ```if 1: + import os from sandbox_utils import Zipackage Zipackage.install('embedding_engine.zip') - Zipackage.install('tokenizers-0.22.1.whl') from embedding_factory import create_embedding_engine @@ -104,7 +104,8 @@ slm_embeddings_fl(tbl:(*), text_col:string, embeddings_col:string, batch_size:in Zipackage.install(f'{model_name}.zip') - engine = create_embedding_engine(model_name, cache_dir="C:\\Temp") + work_dir = os.environ.get("UPLOAD_PATH") # "/app/temp" + engine = create_embedding_engine(model_name, cache_dir=work_dir) embeddings = engine.encode(df[text_col].tolist(), batch_size=batch_size, prefix=prefix) # prefix is used only for E5 result = df @@ -113,7 +114,6 @@ slm_embeddings_fl(tbl:(*), text_col:string, embeddings_col:string, batch_size:in tbl | evaluate hint.distribution=per_node python(typeof(*), code, kwargs, external_artifacts = bag_pack( 'embedding_engine.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/embedding_engine.zip;impersonate', - 'tokenizers-0.22.1.whl', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/tokenizers-0.22.1-cp39-abi3-win_amd64.whl;impersonate', 'harrier-v1-270m.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/harrier-v1-270m.zip;impersonate', 'jina-v2-small.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/jina-v2-small.zip;impersonate', 'e5-small-v2.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/e5-small-v2.zip;impersonate')) @@ -137,9 +137,9 @@ let slm_embeddings_fl = (tbl:(*), text_col:string, embeddings_col:string, batch_ { let kwargs = bag_pack('text_col', text_col, 'embeddings_col', embeddings_col, 'batch_size', batch_size, 'model_name', model_name, 'prefix', prefix); let code = ```if 1: + import os from sandbox_utils import Zipackage Zipackage.install('embedding_engine.zip') - Zipackage.install('tokenizers-0.22.1.whl') from embedding_factory import create_embedding_engine @@ -151,7 +151,8 @@ let slm_embeddings_fl = (tbl:(*), text_col:string, embeddings_col:string, batch_ Zipackage.install(f'{model_name}.zip') - engine = create_embedding_engine(model_name, cache_dir="C:\\Temp") + work_dir = os.environ.get("UPLOAD_PATH") # "/app/temp" + engine = create_embedding_engine(model_name, cache_dir=work_dir) embeddings = engine.encode(df[text_col].tolist(), batch_size=batch_size, prefix=prefix) # prefix is used only for E5 result = df @@ -160,7 +161,6 @@ let slm_embeddings_fl = (tbl:(*), text_col:string, embeddings_col:string, batch_ tbl | evaluate hint.distribution=per_node python(typeof(*), code, kwargs, external_artifacts = bag_pack( 'embedding_engine.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/embedding_engine.zip;impersonate', - 'tokenizers-0.22.1.whl', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/tokenizers-0.22.1-cp39-abi3-win_amd64.whl;impersonate', 'harrier-v1-270m.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/harrier-v1-270m.zip;impersonate', 'jina-v2-small.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/jina-v2-small.zip;impersonate', 'e5-small-v2.zip', 'https://artifactswestus.z22.web.core.windows.net/models/SLM/e5-small-v2.zip;impersonate')) diff --git a/data-explorer/kusto/query/tutorials/your-first-graph.md b/data-explorer/kusto/query/tutorials/your-first-graph.md index ceb251b8e4..65e7df8c6a 100644 --- a/data-explorer/kusto/query/tutorials/your-first-graph.md +++ b/data-explorer/kusto/query/tutorials/your-first-graph.md @@ -6,7 +6,8 @@ ms.author: spelluru ms.service: azure-data-explorer ms.topic: tutorial ms.custom: mvc -ms.date: 05/26/2025 +ms.date: 06/10/2026 +#customer intent: As a data analyst, I want to create and query graphs in KQL so that I can analyze interconnected data like organizational hierarchies. --- # Tutorial: Create your first graphs in Kusto Query Language @@ -15,7 +16,7 @@ ms.date: 05/26/2025 Graph semantics in Kusto enables you to model and query data as interconnected networks, making it intuitive to analyze complex relationships like organizational hierarchies, social networks, and attack paths. Unlike traditional relational queries that rely on joins, graphs use direct relationships between entities to traverse connections efficiently. -In this tutorial, you learn how to: +In this tutorial, you: ::: moniker range="microsoft-fabric || azure-data-explorer" > [!div class="checklist"] > @@ -32,7 +33,7 @@ In this tutorial, you learn how to: > * [Compare](#compare-transient-and-persistent-graphs) transient versus persistent graph approaches ::: moniker-end -If you don't have an Azure Data Explorer cluster, [create a free cluster](/azure/data-explorer/start-for-free-web-ui) before you begin the tutorial. +If you don't have an Azure Data Explorer cluster, [create a free cluster](/azure/data-explorer/start-for-free-web-ui) before you begin. ## Prerequisites @@ -59,16 +60,16 @@ Navigate to the advanced hunting page to start querying Microsoft Sentinel data. ::: moniker-end ::: moniker range="azure-monitor" -Navigate to Logs or to a Logs Analytics workspace in the Azure portal to start querying Azure Monitor data. +Navigate to Logs or to a Log Analytics workspace in the Azure portal to start querying Azure Monitor data. ::: moniker-end ## Create a transient graph with organizational data -In this section, you'll create your first graph using sample organizational data. Transient graphs are created dynamically during query execution using the `make-graph` operator, making them perfect for ad-hoc analysis and exploration. +Create your first graph using sample organizational data. Transient graphs are created dynamically during query execution using the `make-graph` operator, which makes them ideal for ad-hoc analysis and exploration. You'll work with a simple company structure where employees report to managers. This organizational hierarchy provides an intuitive example for understanding graph relationships: -:::image type="content" source="../media/graphs/tutorial-first-graph.png" alt-text="A diagram showing the organization hierarchy."::: +:::image type="content" source="../media/graphs/tutorial-first-graph.png" alt-text="Diagram that shows the organizational hierarchy with Alice as CEO, Bob and Carol as managers, and Dave, Eve, and Frank as individual contributors."::: Create the organizational graph structure using employee and reporting relationship data: @@ -116,9 +117,9 @@ reports ## Query relationships with graph-match patterns -Now you'll learn to use the `graph-match` operator to find specific patterns in your organizational graph. The `graph-match` operator searches for relationships and connections within the graph structure. +Use the `graph-match` operator to find specific patterns in your organizational graph. The `graph-match` operator searches for relationships and connections within the graph structure. -First, find all employees who directly report to Alice by matching the immediate reporting relationship pattern: +Find all employees who directly report to Alice by matching the immediate reporting relationship pattern: :::moniker range="azure-data-explorer" > [!div class="nextstepaction"] @@ -206,9 +207,9 @@ reports > [!NOTE] > This feature is currently in public preview. Functionality and syntax are subject to change before General Availability. -Persistent graphs are stored in the database and can be queried repeatedly without rebuilding the graph structure. You'll now create the same organizational structure as a persistent graph for better performance and reusability. +Persistent graphs are stored in the database and can be queried repeatedly without rebuilding the graph structure. Create the same organizational structure as a persistent graph for better performance and reusability. -Create functions that return your sample data, then define a graph model structure: +Create functions that return your sample data, and then define a graph model structure: ```kusto // Create a function that returns employee data @@ -293,7 +294,7 @@ graph("OrganizationGraph") project employee = employee.name, role = employee.role, age = employee.age ``` -Find all employees in Alice's organization including indirect reports: +Find all employees in Alice's organization, including indirect reports: ```kusto graph("OrganizationGraph") @@ -324,12 +325,12 @@ Understanding when to use each approach helps you choose the right method for yo | **Reusability** | Must rebuild for each query | Query repeatedly without rebuilding | | **Performance** | Good for smaller datasets | Optimized for large, complex graphs | | **Use cases** | Ad-hoc analysis, exploration | Production analytics, repeated queries | -| **Memory limits** | Limited by node memory | Can handle larger datasets | +| **Memory limits** | Limited by node memory | Handles larger datasets | ## Clean up resources ::: moniker range="azure-data-explorer || microsoft-fabric" -If you're not going to continue using the persistent graph models, delete them with the following commands: +If you don't plan to continue using the persistent graph models, delete them with the following commands: 1. Drop the graph model: diff --git a/data-explorer/query-monitor-data.md b/data-explorer/query-monitor-data.md index e05d52d73c..7806e2de42 100644 --- a/data-explorer/query-monitor-data.md +++ b/data-explorer/query-monitor-data.md @@ -1,36 +1,37 @@ --- title: 'Query data in Azure Monitor with Azure Data Explorer' -description: 'In this article, query data in Azure Monitor (Application Insights resource and Log Analytics workspace) by creating Azure Data Explorer cross product queries.' +description: Query data in Azure Monitor, including Application Insights and Log Analytics workspaces, by creating Azure Data Explorer cross-service queries. ms.reviewer: guywi-ms ms.topic: how-to -ms.date: 05/28/2025 +ms.date: 06/07/2026 ms.custom: sfi-image-nochange -#Customer intent: I want to query data in Azure Monitor using Azure Data Explorer. +#Customer intent: As a data analyst, I want to query data in Azure Monitor using Azure Data Explorer so that I can run cross-service queries against Log Analytics and Application Insights data. + --- # Query data in Azure Monitor using Azure Data Explorer -The Azure Data Explorer supports cross-service queries between Azure Data Explorer, [Application Insights resource (AI)](/azure/azure-monitor/app/app-insights-overview), and [Log Analytics workspace (LA)](/azure/azure-monitor/platform/data-platform-logs). You can query your Log Analytics workspace or Application Insights resource using Azure Data Explorer query tools and in a cross-service query. The article shows you how to create a cross-service query and add the Log Analytics workspace or Application Insights resource to the Azure Data Explorer web UI. +Azure Data Explorer supports cross-service queries between Azure Data Explorer, [Application Insights resource (AI)](/azure/azure-monitor/app/app-insights-overview), and [Log Analytics workspace (LA)](/azure/azure-monitor/platform/data-platform-logs). You can query your Log Analytics workspace or Application Insights resource using Azure Data Explorer query tools and in a cross-service query. This article shows you how to create a cross-service query and add the Log Analytics workspace or Application Insights resource to the Azure Data Explorer web UI. -The Azure Data Explorer cross-service queries flow: +Azure Data Explorer cross-service query flow: :::image type="content" source="media/query-monitor-data/query-monitor-workflow.png" alt-text="Diagram showing the Azure Data Explorer cross-service query flow." lightbox="media/query-monitor-data/query-monitor-workflow.png"::: -> [!IMPORTANT] -> Starting July 1, 2025, querying log data and events requires TLS 1.2 or higher when using [query API endpoints for Log Analytics or Application Insights](/azure/azure-monitor/fundamentals/azure-monitor-network-access#logs-query-api-endpoints). For more information, see [Secure data in transit](/azure/azure-monitor/fundamentals/best-practices-security#secure-logs-data-in-transit). - ## Add a Log Analytics workspace/Application Insights resource to Azure Data Explorer client tools Add a Log Analytics workspace or Application Insights resource to Azure Data Explorer client tools to enable cross-service queries for your clusters. +> [!IMPORTANT] +> Starting July 1, 2025, querying log data and events requires TLS 1.2 or higher when using [query API endpoints for Log Analytics or Application Insights](/azure/azure-monitor/fundamentals/azure-monitor-network-access#logs-query-api-endpoints). For more information, see [Secure data in transit](/azure/azure-monitor/fundamentals/best-practices-security#secure-logs-data-in-transit). + 1. Verify your Azure Data Explorer native cluster (such as **help** cluster) appears on the left menu before you connect to your Log Analytics workspace or Application Insights resource. :::image type="content" source="media/query-monitor-data/web-ui-help-cluster.png" lightbox="media/query-monitor-data/web-ui-help-cluster.png" alt-text="Screenshot showing the left menu with the help cluster selected as an Azure Data Explorer native cluster."::: 1. In the [Azure Data Explorer UI](https://dataexplorer.azure.com/clusters), select **+ Add** then **Connection**. -1. In the *Add Connection* window, add the URL and display name of the Log Analytics (LA) workspace or Application Insights (AI) resource. +1. In the **Add Connection** window, add the URL and display name of the Log Analytics (LA) workspace or Application Insights (AI) resource. * For Log Analytics (LA) workspace: `https://ade.loganalytics.io/subscriptions//resourcegroups//providers/microsoft.operationalinsights/workspaces/` * For Application Insights (AI) resource: `https://ade.applicationinsights.io/subscriptions//resourcegroups//providers/microsoft.insights/components/` @@ -42,12 +43,12 @@ Add a Log Analytics workspace or Application Insights resource to Azure Data Exp :::image type="content" source="media/query-monitor-data/add-connection.png" alt-text="Screenshot showing the add connection window." lightbox="media/query-monitor-data/add-connection.png"::: - >[!NOTE] + > [!NOTE] > - >* There are different endpoints for the following: - >* Azure Government- `adx.monitor.azure.us/` - >* Azure China- `adx.monitor.azure.cn/` - >* If you add a connection to more than one Log Analytics workspace/Application insights resource, give each a different name. Otherwise they'll all have the same name in the left pane. + > * There are different endpoints for the following: + > * Azure Government: `adx.monitor.azure.us/` + > * Azure operated by 21Vianet: `adx.monitor.azure.cn/` + > * If you add a connection to more than one Log Analytics workspace/Application Insights resource, give each a different name. Otherwise they all have the same name in the left pane. 1. After the connection is established, your Log Analytics workspace or Application Insights resource will appear in the left pane with your native Azure Data Explorer cluster. @@ -67,8 +68,8 @@ You can run the queries using client tools that support Kusto queries, such as: > > * The database should have the same name as the resource specified in the cross-service query. Names are case sensitive. > * In cross-service queries, make sure that Application Insights resource and Log Analytics workspace names are correct. -> * If names contain special characters, they are replaced by URL encoding in the cross-service query. -> * If names include characters that don't meet [KQL identifier name rules](/kusto/query/schema-entities/entity-names?view=azure-data-explorer&preserve-view=true), they are replaced by the dash **-** character. +> * If names contain special characters, they're replaced by URL encoding in the cross-service query. +> * If names include characters that don't meet [KQL identifier name rules](/kusto/query/schema-entities/entity-names?view=azure-data-explorer&preserve-view=true), they're replaced by the dash **-** character. ### Direct query on your Log Analytics workspace or Application Insights resources from Azure Data Explorer client tools @@ -100,10 +101,10 @@ let CL1 = 'https://ade.loganalytics.io/subscriptions//resourceg union , cluster(CL1).database(). ``` -:::image type="content" source="media/query-monitor-data/cross-query.png" alt-text="Screenshot showing cross service query from the Azure Data Explorer web U I."::: +:::image type="content" source="media/query-monitor-data/cross-query.png" alt-text="Screenshot showing cross-service query from the Azure Data Explorer web UI."::: > [!TIP] -> Using the [`join` operator](/kusto/query/join-operator), instead of union, may require a [`hint`](/kusto/query/join-operator?view=azure-data-explorer&preserve-view=true#hints) to run it on an Azure Data Explorer native cluster. +> Using the [`join` operator](/kusto/query/join-operator), instead of union, might require a [`hint`](/kusto/query/join-operator?view=azure-data-explorer&preserve-view=true#hints) to run it on an Azure Data Explorer native cluster. ### Join data from an Azure Data Explorer cluster in one tenant with an Azure Monitor resource in another @@ -117,16 +118,16 @@ If the Azure Data Explorer resource is in *tenant-name-a* and Log Analytics work ### Connect to Azure Data Explorer clusters from different tenants -Kusto Explorer automatically signs you into the tenant to which the user account originally belongs. To access resources in other tenants with the same user account, the `tenantId` has to be explicitly specified in the connection string: -`Data Source=https://ade.applicationinsights.io/subscriptions/SubscriptionId/resourcegroups/ResourceGroupName;Initial Catalog=NetDefaultDB;AAD Federated Security=True;Authority ID=` +Kusto Explorer automatically signs you into the tenant to which the user account originally belongs. To access resources in other tenants with the same user account, you must explicitly specify the `tenantId` in the connection string: +`Data Source=https://ade.applicationinsights.io/subscriptions//resourcegroups/;Initial Catalog=NetDefaultDB;AAD Federated Security=True;Authority ID=` >[!NOTE] > -> The `tenantId` parameter is not directly configurable in the Azure Data Explorer web UI. For the `tenantId` use the Microsoft Entra identity. +> The `tenantId` parameter isn't directly configurable in the Azure Data Explorer web UI. For the `tenantId`, use the Microsoft Entra identity. ## Function supportability -The Azure Data Explorer cross-service queries support functions for both Application Insights resource and Log Analytics workspace. +Azure Data Explorer cross-service queries support functions for both Application Insights resource and Log Analytics workspace. This capability enables cross-cluster queries to reference an Azure Monitor tabular function directly. The following commands are supported with the cross-service query: @@ -144,7 +145,7 @@ The following commands are supported with the cross-service query: * Private Link (private endpoints) and IP restrictions don't support cross-service queries. -## Additional syntax examples +## Use other syntax options The following syntax options are available when calling the Application Insights resource or Log Analytics workspaces: @@ -159,4 +160,4 @@ The following syntax options are available when calling the Application Insights ## Related content -* [Write queries](/azure/data-explorer/kusto/query/tutorials/learn-common-operators) +* [Write queries](/kusto/query/tutorials/learn-common-operators?view=azure-data-explorer&preserve-view=true) diff --git a/data-explorer/start-for-free.md b/data-explorer/start-for-free.md index ddb8327ef3..fccd595223 100644 --- a/data-explorer/start-for-free.md +++ b/data-explorer/start-for-free.md @@ -14,7 +14,14 @@ Free cluster allows anyone with a Microsoft account or a Microsoft Entra user id The free cluster can be used for any purpose and is the ideal solution for anyone who wants to get started quickly with Azure Data Explorer. It allows you to explore the wide range of [data ingestion](ingest-data-overview.md) methods, use the [Kusto Query Language](/kusto/query/index?view=azure-data-explorer&preserve-view=true), and experience the incredible ingestion and query performance. -The cluster's trial period is for a year and might automatically be extended. The cluster is provided *as-is* and isn't subject to the Azure Data Explorer service level agreement. At any time, you can upgrade the cluster to a full Azure Data Explorer cluster. +> [!IMPORTANT] +> +> * Microsoft grants you the right to access and use the **one** Free Cluster at no charge for commercial or non-commercial use for a period of one year. +> * Microsoft may automatically renew the trial period. +> * Your data is stored at a location of your choosing in one of three available geographies (Europe, Asia and North America). +> * The cluster is provided free of charge, and as such is not subject to service layer agreement. +> * You may upgrade the cluster to a full Azure Data Explorer cluster at any time. +> * For additional terms and conditions, see the [Disclaimer](#disclaimer) section below. Start your journey by [creating your own free cluster](https://aka.ms/kustofree) and reviewing the [Microsoft Software License Terms](https://aka.ms/kustofreeeula). @@ -61,6 +68,16 @@ The free cluster is a subset of the full Azure Data Explorer cluster that provid | Azure Monitor and Insights | :heavy_check_mark: | | | Azure Resource Manager (ARM) templates | :heavy_check_mark: | | +## Disclaimer + +The following special terms apply to Azure Data Explorer Free Clusters + +* Free clusters are provided "as-is," "with all faults," and "as available," and are excluded from all service level agreements and warranties. +* Microsoft may suspend or delete clusters, if it is deemed necessary for preventing unauthorized access, abusive or malicious use. +* Unless otherwise noted, you should not use the free cluster to process Personal Data or other data that is subject to legal or regulatory compliance requirements. +* The following terms in the DPA do not apply to this Free Cluster: Processing of Personal Data; GDPR, Data Security, and HIPAA Business Associate. +* Microsoft may change or discontinue the Free Cluster service at any time without notice. + ## Related content * [Get started with your free cluster](start-for-free-web-ui.md) diff --git a/data-explorer/web-sync.md b/data-explorer/web-sync.md index bb110d584f..f56086374b 100644 --- a/data-explorer/web-sync.md +++ b/data-explorer/web-sync.md @@ -20,7 +20,7 @@ Before enabling sync, consider the following points: * The first browser where syncing is enabled becomes the primary data source, overriding data in other browsers. * Data is account-specific and can't be shared across different user accounts on the same machine. -* Syncing uploads your current device's data to the cloud, replacing local data on other browsers or devices with the cloud-stored version. +* Syncing uploads your current device's data to the cloud, replacing local data on other browsers or devices with the cloud-stored version. However, user accounts that haven’t enabled Sync can still access the local profile as it existed before the Sync was turned on. If you need to access the replaced queries, use [`.show queries`](/kusto/management/show-queries-command). * Synced data is stored in your tenant's region. If no Azure region exists in the tenant's region, data is stored in an Azure region in Europe. * Syncing is irreversible; once enabled: * Data is no longer stored exclusively on your device