Group by count in KQL
Here's a classic SQL query I always need in every technology:
Select some_column, Count(*) as Count
from some_table
where random_column = 'X'
group by some_column
order by 2 desc
In KQL the equivalent is:
some_table
| where random_column == "X"
| summarize Count=count() by some_column
| order by Count desc
KQL is concise but also very powerful when it comes to aggregates.
I love how 'logical' KQL seems to be.