Querying ADX clusters with lokqldx - NeilMacMullen/kusto-loco GitHub Wiki

Lokqldx can issue KQL queries to ADX (Azure Data Explorer) clusters and render the results locally using the .adx command


.set server https://help.kusto.windows.net/
.set database SampleLogs
.set path $database@$server

.adx $path
RawSysLogs 
| extend cpu = tostring(tags.cpu_id)
| summarize N=count() by Day=bin(timestamp,1d),cpu
| project Day,N,cpu 
| render linechart

image

command format

.adx requires two parameters and must be followed by the query to issue to the cluster

  • ConnectionString. This is the connection-string of the cluster
  • Database. This is the name of the database within the cluster.

The database and connection-string can be combined into a single string as shown in the example above