Azure KUSTO statment fails with "No tabular statement found"

Question

Can someone tell me why this Kusto statement in Log Analytics fails with "no tabular statement found"?

let eventcnt = Event
| where TimeGenerated > ago(10m)

I can run this query and a table of data is returned:

Event
| where TimeGenerated > ago(10m)

The actual error message is "No tabular expression statement found" — jpsebasti, Jun 05 '20 at 20:11

score 25 · Answer 1 · answered Jun 05 '20 at 20:29

25

RE: your first code snippet: it's like you define a function in your program, but you don't actually do anything else in your program (and you don't call that function in your program).

it's the same with let statements and queries: if you want to use what you've just defined, you need to include it in your query. for example:

let eventcnt = Event
| where TimeGenerated > ago(10m);
eventcnt

answered Jun 05 '20 at 20:29

Yoni L.

22,627
2
29
48

1

I forgot the semicolon. Thanks. – duyn9uyen Apr 10 '23 at 15:14

score 3 · Answer 2 · answered Aug 05 '22 at 09:10

3

For other facing this issue, it may as well belong to a missing ";" - a terminator semicolon. For the OP's example, this did not solve it - but it may help others facing the same error message.

answered Aug 05 '22 at 09:10

Adrian Kydland Skaftun

43
7

score 2 · Answer 3 · answered Jun 22 '23 at 14:55

App Insights log explorer gave me this error when there was a blank line between variable declaration and use.

Works

let eventcnt = Event
| where TimeGenerated > ago(10m);
eventcnt

Doesn't work

let eventcnt = Event
| where TimeGenerated > ago(10m);

eventcnt

Azure KUSTO statment fails with "No tabular statement found"

3 Answers3

Works

Doesn't work

Linked