Robert Cain continues a series on KQL:
Often we want to get data that is relative to other data. For example, we want a list of computers that have free space that is greater than the free space of other computers. We need to set a threshold, for example we want to return results where the free space is greater than 95% of the free space on other computers.
To do this, Kusto provides the
percentileoperator, along with its variantspercentilesandpercentiles_array.
Read on to see how it works. I do like the way that KQL handles percentile operations.