WHERE条件的KQL表现

Kos*_*osh 1 where-clause kql azure-data-explorer

使用ADD语句连接WHERE条件和单独添加它们在KQL性能上有什么区别吗?

会喜欢吗

Events
| where Source == "myapp"
and Timestamp > ago(7d)
and isnotnull(DeviceId)
and isnotnull(UserId)
Run Code Online (Sandbox Code Playgroud)

Events
| where Source == "myapp"
| where Timestamp > ago(7d)
| where isnotnull(DeviceId)
| where isnotnull(UserId)
Run Code Online (Sandbox Code Playgroud)

小智 5

没有任何区别。两个查询是等效的。