Robert Cain continues a series on KQL:
As you’ve seen with the
joinin my Fun With KQL – Join post it can be useful to combine two tables in order to clarify the output. What if, though, you need data that isn’t in an existing table?That’s where the
datatableoperator comes into use. Thedatatableallows you to create a table of data right within the query. We’ll see a few useful examples in this post.
Read on to see how you can create one and what you can do with it.