AZ104-Q: KQL query across resources
Q: Which language do you use to query Azure Monitor log data in a Log Analytics workspace?
- A) PowerShell
Get-AzLog - B) SQL
- C) YAML
- D) KQL (Kusto Query Language) ✓
Answer: D — KQL. Log Analytics stores logs in workspaces queried with Kusto Query Language (KQL), e.g. Heartbeat | where TimeGenerated > ago(1d) | summarize count() by Computer. SQL is not the query language for Log Analytics logs. KQL is also the language of log alerts and Workbooks.
Why it helps
KQL is the engine of the AZ-104 (and monitoring) content: pick it whenever the question is “query log data in Log Analytics”.