Join 如何在AppInsights上使用Kusto查询语言进行内部联接
我使用以下查询从使用AppInsights的400失败请求中获取operationId值:Join 如何在AppInsights上使用Kusto查询语言进行内部联接,join,azure-data-explorer,kql,appinsights,Join,Azure Data Explorer,Kql,Appinsights,我使用以下查询从使用AppInsights的400失败请求中获取operationId值: requests | project timestamp, id, operation_Name, success, resultCode, duration, operation_Id, cloud_RoleName, invocationId=customDimensions['InvocationId'] | where cloud_RoleName =~ 'xxxx' and operatio
requests
| project timestamp, id, operation_Name, success, resultCode, duration, operation_Id, cloud_RoleName, invocationId=customDimensions['InvocationId']
| where cloud_RoleName =~ 'xxxx' and operation_Name == 'createCase' and resultCode == 400
| order by timestamp desc
我在以下查询中使用这些operationId值来获取所发生事件的日志:
traces
| union exceptions
| where operation_Id == '35edbc7c13f7ac4c85fa0b8071a12b72'
| order by timestamp asc
有了这些,我得到了我想要的信息,但我需要多次编写和执行查询,因此我尝试在两个查询之间进行连接,但没有成功,因为我不是查询AppInsights的专家,我不确定如何使用联合进行连接,你能帮我吗?请尝试以下查询:
requests
| project timestamp, id, operation_Name, success, resultCode, duration, operation_Id, cloud_RoleName, invocationId=customDimensions['InvocationId']
| where cloud_RoleName =~ 'xxxx' and operation_Name == 'createCase' and resultCode == 400
| join (
traces
| union exceptions
) on operation_Id
| project-away operation_Id1
| order by timestamp asc
有关join
运算符的更多详细信息-