如何透视日志分析数据 (Kusto)

Question

在这件事上我一直在用头撞墙。我有以下数据（有点像键值对），我需要将设置命名为列而不是行

let settings = datatable (Location:int , SettingName:string, SettingValue:string)
    [1, "PaperSize", "A4",
     1, "Orientation", "Vertical",
     1, "Colour", "False",
     2, "PaperSize", "A3",
     2, "Orientation", "Vertical",
     2, "Colour", "False",
     3, "PaperSize", "A4",
     3, "Orientation", "Horizontal",
     3, "Colour", "True"];
settings
| evaluate pivot(SettingName)

我期望 3 行，每个位置一行，以及每个设置（纸张大小、方向、颜色）和位置的一列。但我最终得到了九行和没有多大意义的数据。我想要得到的输出是：

+----------+-----------+-------------+--------+
| Location | PaperSize | Orientation | Colour |
+----------+-----------+-------------+--------+
|        1 | A4        | Vertical    | False  |
|        2 | A3        | Vertical    | False  |
|        3 | A4        | Horizontal  | True   |
+----------+-----------+-------------+--------+

真实数据有很多设置，因此理想情况下我不想在查询中对设置名称进行硬编码。我看过其他功能，例如包和 mv，但没有任何运气。也许这是不可能的，但任何想法都非常感激

Answer 1

您可以通过添加 any() 聚合来做到这一点（假设您对任何值感到满意）

let settings = datatable (Location:int , SettingName:string, SettingValue:string)
    [1, "PaperSize", "A4",
     1, "Orientation", "Vertical",
     1, "Colour", "False",
     2, "PaperSize", "A3",
     2, "Orientation", "Vertical",
     2, "Colour", "False",
     3, "PaperSize", "A4",
     3, "Orientation", "Horizontal",
     3, "Colour", "True"];
settings
| evaluate pivot(SettingName, any(SettingValue))