12

Update July 13, 2021

The links used below are now partially obsolete. Here is the new section on language differences.

Original post

On Azure Portal, in my App Insights / Logs view, I can query the app data like this:

app('my-app-name').traces

The app function is described in the article app() expression in Azure Monitor query.

Kusto.Explorer doesn't understand the app() function, which appears to be explained by the fact it is one of the Additional operators in Azure Monitor.

How can I query my App Insights / Logs with Kusto.Explorer? I cannot use cluster as it is one of the functions not supported in Azure Monitor.

Relevant doc: Azure Monitor log query language differences

Note on troubleshooting joins

(added December 16, 2021)

Pro-tip from Kusto team: If you are querying application insights from Kusto.Explorer, and your joins to normal clusters fail with bad gateway or other unexpected error, consider adding hint.remote=left to your join. Like:

tableFromApplicationInsights
| join kind=innerunique hint.remote=left tableFromNormalKustoCluster
Konrad Jamrozik
  • 3,254
  • 5
  • 29
  • 59

2 Answers2

12

We have a private preview for Azure Data Explorer (ADX) Proxy that enables you to treat Log Analytics / Application Insights as a virtual cluster, query it using ADX tools and connecting to it as a second cluster in cross cluster query. Since its a private preview you need to contact adxproxy@microsoft.com in order to get enrolled. The proxy is documented at https://learn.microsoft.com/en-us/azure/data-explorer/query-monitor-data.

(disclaimer - I'm the PM driving this project).

delixfe
  • 2,471
  • 1
  • 21
  • 35
Yaron
  • 121
  • 4
  • Just as a heads-up, when answering questions about your own product or service, you need to [disclose your affiliation](https://stackoverflow.com/help/promotion) in the answer itself. – Hoppeduppeanut Jun 11 '19 at 07:13
  • NIce! I won't be able to sign up for the private preview as the timeframe is all wrong (I'm at a client site right now and wanted this today). I would love to have this, and very happy you're working on it. :) – alirobe Nov 12 '19 at 04:01
  • Hi - this is up and running now. Please contact adxproxy@microsoft.com directly for more info. – Yaron Nov 13 '19 at 06:58
11

Step 1 Connection String

Build your connection string from this template:

https://ade.applicationinsights.io/subscriptions/<subscription-id>/resourcegroups/<resource-group-name>/providers/microsoft.insights/components/<ai-app-name>

Fill in the subscription-id, resource-group-name, and ai-app-name from the portal. Here is an example image

enter image description here

Step 2 Add the connection to Kusto.Explorer

Open Kusto.Explorer, choose Add Connection, and paste your connection string into the Cluster connection field.

enter image description here

After you kit OK, Windows will prompt you to log in with your Azure Active Directory account. Once you have authenticated, Kusto.Explorer will display the Application Insights tables in the Connections panel.

Shaun Luttin
  • 133,272
  • 81
  • 405
  • 467
  • What does it mean if I get 401 unauthorized error when I try to connect? – Arun Sep 28 '21 at 15:31
  • Solution works perfectly. @Arun, if you get a 401 it means that the AAD service principal (Azure account) you're using does not have access read access to the App Insights. You can see what AAD service principal you are using in Kusto Explorer in Connections->"Inspect Your AAD Principal", then on Azure you can go to the App Insights and give access to that AAD service principal. – Duarte Mar 08 '22 at 21:52