Join 如何在AppInsights上使用Kusto查询语言进行内部联接

Join 如何在AppInsights上使用Kusto查询语言进行内部联接,join,azure-data-explorer,kql,appinsights,Join,Azure Data Explorer,Kql,Appinsights,我使用以下查询从使用AppInsights的400失败请求中获取operationId值: requests | project timestamp, id, operation_Name, success, resultCode, duration, operation_Id, cloud_RoleName, invocationId=customDimensions['InvocationId'] | where cloud_RoleName =~ 'xxxx' and operatio

我使用以下查询从使用AppInsights的400失败请求中获取operationId值:

requests 
| project timestamp, id, operation_Name, success, resultCode, duration, operation_Id, cloud_RoleName, invocationId=customDimensions['InvocationId'] 
| where cloud_RoleName =~ 'xxxx' and operation_Name == 'createCase' and resultCode == 400 
| order by timestamp desc
我在以下查询中使用这些operationId值来获取所发生事件的日志:

traces
| union exceptions
| where operation_Id == '35edbc7c13f7ac4c85fa0b8071a12b72'
| order by timestamp asc


有了这些,我得到了我想要的信息,但我需要多次编写和执行查询,因此我尝试在两个查询之间进行连接,但没有成功,因为我不是查询AppInsights的专家,我不确定如何使用联合进行连接,你能帮我吗?

请尝试以下查询:

requests 
| project timestamp, id, operation_Name, success, resultCode, duration, operation_Id, cloud_RoleName, invocationId=customDimensions['InvocationId'] 
| where cloud_RoleName =~ 'xxxx' and operation_Name == 'createCase' and resultCode == 400 
| join (
    traces
    | union exceptions
) on operation_Id
| project-away operation_Id1
| order by timestamp asc
有关
join
运算符的更多详细信息-