QuestionQ67

VerifiedIngest and transform data

You have a KQL database that contains two tables named Stream and Reference. Stream contains streaming data in the following format.

Scenario Image

Reference contains reference data in the following format.

Scenario Image

Both tables contain millions of rows.

You have the following KQL queryset.

Scenario Image

You need to reduce how long it takes to run the KQL queryset.

Solution: You add the make_list() function to the output columns.

Does this achieve the goal?

Explanation

make_list() aggregates values into dynamic arrays when used with summarize; it does not optimize the join between the two multi-million-row tables. Aggregating the output columns would also change the row-based data required for the map visualization and can add processing overhead.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!