Robert Cain continues a series on KQL:
As you’ve seen with the
join
in my Fun With KQL – Join post it can be useful to combine two tables in order to clarify the output. What if, though, you need data that isn’t in an existing table?That’s where the
datatable
operator comes into use. Thedatatable
allows you to create a table of data right within the query. We’ll see a few useful examples in this post.
Read on to see how you can create one and what you can do with it.