Guide
SQL, KQL and Analyze
Three ways to ask your logs, traces and metrics a question beyond the Explore search box. Pick the one that matches how you like to work.
Which one to use#
| You want to | Use |
|---|---|
| Write SQL, join logs and spans, chart a result, save a statement or find slow queries | SQL console |
Write a pipeline with | steps, and know which KQL constructs are verified | KQL |
| Pivot by dimensions and measures without a query | Analyze |
| Search and aggregate logs with a short query language | Explore query language |
What they have in common#
All three read the data stored in your workspace, never more than your retention, and every run is time-bounded.
Next: put a chart on a dashboard.