Awesome
Must Learn KQL - the blog series, the book, the video channel, the merch store, the workshop, and much more...<br>
<p align="right"><img src="https://github.com/rod-trent/MustLearnKQL/blob/main/Series_Images/MustLearnKQLBannerSmallSmall.png" alt="Must Learn KQL"></center></p>
This repository contains the code, queries, and eBook included as part of the MustLearnKQL series. The series is a continuing effort to discuss and educate about the power and simplicity of the Kusto Query Language.<br><br>
The eBook (PDF) is updated whenever changes are made or new parts of the series are released. Get the book: https://github.com/rod-trent/MustLearnKQL/tree/main/Book_Version
<br><br>
Want a paperback version of the book? You can order a copy from Amazon.com: https://amzn.to/39maJSX - (<i>as with the merch below, all profit goes directly to <a href="https://www.stjude.org/" target="_blank">St. Jude</a></i>)
<br><br>
There's a YouTube channel for the Must Learn KQL series. My colleague, David Hall, is taking the series and producing follow-along videos: Follow that here: https://youtu.be/rcy2uSMLyqo
<br><br>
Love the series so much you want a coffee mug? There's now a <b>merch store</b> where all proceeds go to <a href="https://www.stjude.org/" target="_blank">St. Jude Children's Research Hospital.</a> Check it out! <b><a href="https://must-learn-kql.creator-spring.com" target="_blank">MUST LEARN STORE</a></b>
<br><br>
The series has it's own shortlink. To return back here, just remember the easy URL: https://aka.ms/MustLearnKQL
<br><br>
Must Learn KQL is always evolving and updating. Curious about what's new and exciting? Monitor the <a href="https://github.com/rod-trent/MustLearnKQL/blob/main/WhatsNew.md" target="_blank">What's New page</a>
<br><br>
Looking for Advanced topics and a fun way to learn them? Check out the <b>The KQL Mysteries</b> series: http://aka.ms/KQLMysteries
<br><br>
<b><h2>Table of Contents</h2></b>
The following are links to the entire series so far:
<br><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-1-tools-and-resources" target="_blank">Must Learn KQL Part 1: Tools and Resources</a> - <i>Posted November 17, 2021</i> - <a href="https://youtu.be/rcy2uSMLyqo" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-2-just-above" target="_blank">Must Learn KQL Part 2: Just Above Sea Level</a> - <i>Posted November 18, 2021</i><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-3-workflow" target="_blank">Must Learn KQL Part 3: Workflow</a> - <i>Posted November 19, 2021</i> - <a href="https://youtu.be/Ga9ZABXtYWM" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-4-search-for" target="_blank">Must Learn KQL Part 4: Search for Fun and Profit</a> - <i>Posted November 22, 2021</i><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-5-turn-search" target="_blank">Must Learn KQL Part 5: Turn Search into Workflow</a> - <i>Posted November 29, 2021</i> - <a href="https://youtu.be/uugHEu4v0bw" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-6-interface-intimacy" target="_blank">Must Learn KQL Part 6: Interface Intimacy</a> - <i>Posted December 2, 2021, Updated May 13, 2022</i> - <a href="https://youtu.be/h18G8s1biXA" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-7-schema-talk" target="_blank">Must Learn KQL Part 7: Schema Talk</a> - <i>Posted December 7, 2021</i> - <a href="https://youtu.be/VdjVv63n3Vc" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-8-the-where-operator" target="_blank">Must Learn KQL Part 8: The Where Operator</a> - <i>Posted December 8, 2021</i> - <a href="https://youtu.be/dBmCNXgpjWM" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-9-the-limit-and" target="_blank">Must Learn KQL Part 9: The Limit/Take Operators</a> - <i>Posted December 13, 2021</i> - <a href="https://youtu.be/CJT-cR1Lfzo" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-10-the-count" target="_blank">Must Learn KQL Part 10: The Count Operator</a> - <i>Posted December 14, 2021</i> - <a href="https://youtu.be/Cc7CcTXok2s" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-11-the-summarize" target="_blank">Must Learn KQL Part 11: The Summarize Operator</a> - <i>Posted January 5, 2022</i> - <a href="https://youtu.be/J3GJ81KsjHQ" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-12-the-render" target="_blank">Must Learn KQL Part 12: The Render Operator (with Bin and Time)</a> - <i>Posted January 10, 2022</i> - <a href="https://youtu.be/yY3IMWRwOmM" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-13-the-extend" target="_blank">Must Learn KQL Part 13: The Extend Operator</a> - <i>Posted January 18, 2022</i> - <a href="https://youtu.be/W4v1u7enWHc" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-14-the-project" target="_blank">Must Learn KQL Part 14: The Project Operator</a> - <i>Posted January 20, 2022</i> - <a href="https://www.youtube.com/watch?v=KYxxW82FAyA" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-15-the-distinct" target="_blank">Must Learn KQL Part 15: The Distinct Operator</a> - <i>Posted January 24, 2022</i> - <a href="https://youtu.be/6rsM-XuBDDI" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-16-the-ordersort" target="_blank">Must Learn KQL Part 16: The Order/Sort and Top Operators</a> - <i>Posted January 26, 2022</i> - <a href="https://youtu.be/HtBZBBNzPsE" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-17-the-let-statement" target="_blank">Must Learn KQL Part 17: The Let Statement</a> - <i>Posted February 1, 2022</i> - <a href="https://youtu.be/P9AJZ-f1MNA" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-18-the-union" target="_blank">Must Learn KQL Part 18: The Union Operator</a> - <i>Posted February 7, 2022</i> - <a href="https://youtu.be/kZCFiK5o58w" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-19-the-join-operator" target="_blank">Must Learn KQL Part 19: The Join Operator</a> - <i>Posted February 14, 2022</i> - <a href="https://youtu.be/kZCFiK5o58w" target="_blank">Video Edition</a><br>
* <a href="https://rodtrent.substack.com/p/must-learn-kql-part-20-building-your" target="_blank">Must Learn KQL Part 20: Building your first Microsoft Sentinel Analytics Rule</a> - <i>Posted February 17, 2022</i> - <a href="https://youtu.be/cu-xw2_77qo" target="_blank">Video Edition</a><br>
<br><br>
Did you complete the entire series?!! Well, congratulations! When you're ready, take the assessment and receive a bona fide certificate!
<br><br>
The assessment is 25 questions taken directly from the Must Learn KQL series. So, you can take advantage of the open book test, or challenge yourself by attempting to pass without help. Based on the honor system, you can miss 5 questions (80%). Once completed, send an email request to <b>MustLearnKQL@sixmilliondollarman.onmicrosoft.com</b> and request your certificate.
<br><br>
Take the assessment: <b><a href="https://forms.office.com/r/6MN69VXLUq" target="_blank">Must Learn KQL Assessment</a></b> (https://aka.ms/PassMustLearnKQL)
<br><br>
<br><br>
March 12, 2024. Happy 10th birthday, KQL!
<p align="center"><img src="https://github.com/rod-trent/MustLearnKQL/blob/main/Series_Images/kqlbdaysmall.jpeg" alt="Happy Birthday, KQL!"></center></p>
<br><br>
<br><br>
<p align="center"><img src="https://github.com/rod-trent/MustLearnKQL/blob/main/Series_Images/MustLearnKQLBannerMissionSmall.png" alt="Must Learn KQL"></center></p>