Kusto Query Language learning resources

Kusto Query Language (KQL) is a powerful tool to explore your data and discover patterns, identify anomalies and outliers, create statistical models, and more. Are you new to KQL or do you want to improve your KQL skills? Take a look at the following learning resources.

For more information on KQL, see KQL overview.

General training

This training isn't product-specific and provides basic KQL learning:

• Pluralsight: KQL from scratch
• Kusto Detective Agency
• Tutorial: Learn common operators
• Tutorial: Use aggregation functions
• Tutorial: Join data from multiple tables
• QA (formerly Cloud Academy): Introduction to Kusto Query Language

Azure Data Explorer

• Tutorial: Create geospatial visualizations
• Data analysis in Azure Data Explorer with Kusto Query Language

Real-Time Intelligence in Microsoft Fabric

• Get started with Real-Time Intelligence in Microsoft Fabric

Azure Monitor

• Tutorial: Detect and analyze anomalies using KQL in Azure Monitor
• Analyze monitoring data with Kusto Query Language
• Koenig: KQL for Azure Admins

Microsoft Sentinel

• Must learn KQL
• Udemy: Learn KQL for Microsoft Sentinel
• SC-200: Create queries for Microsoft Sentinel using Kusto Query Language (KQL)
• Infosec Train: Kusto Query Language (KQL) eLearning Training Program Online

Related content

• KQL overview
• Tutorial: Learn common operators
• Query data in the Azure Data Explorer web UI