Querying logs with basic KQL (where, summarize, project, render)

Kusto Query Language (KQL) is the read-only query language used by Log Analytics, Azure Monitor log search alerts, Microsoft Sentinel and Azure Resource Graph. You open it in a workspace's Logs blade or a resource's Logs blade. A query starts with a table name and passes the data through a pipeline of operators separated by the pipe character |, each one transforming the result of the previous step. If you know a handful of operators, you can answer most exam questions and handle everyday troubleshooting without memorizing the whole language.