In this recipe, we will review query writing in more detail, and show how to write basic queries.
Azure Log Analytics queries can start with either a table name or a search command. In either case, a table will always be the reference point because Log Analytics data sources store their data in dedicated tables in a workspace (or in several workspaces). The start of a query must, therefore, define a clear scope for the query.
While search commands are effective, a table-based query is preferable for efficiency, returning the relevant data and providing optimal query performance.
We will review both query types in this recipe.