project-keep operator

Applies to: ✅ Azure Data ExplorerAzure MonitorMicrosoft Sentinel

Select what columns from the input to keep in the output. Only the columns that are specified as arguments will be shown in the result. The other columns are excluded.

Syntax

T | project-keep ColumnNameOrPattern [, ...]

Learn more about syntax conventions.

Parameters

Name Type Required Description
T string ✔️ The tabular input from which to keep columns.
ColumnNameOrPattern string ✔️ One or more column names or column wildcard-patterns to be kept in the output.

Returns

A table with columns that were named as arguments. Contains same number of rows as the input table.

Tip

You can project-keep any columns that are present in the original table or that were computed as part of the query.

Note

The order of the columns in the result is determined by their original order in the table. Only the columns that were specified as arguments are kept. The other columns are excluded from the result.

Example

The following query returns columns from the ConferenceSessions table that contain the word "session".

ConferenceSessions
| project-keep session*

The following table shows only the first 10 results.

sessionid session_title session_type session_location
COM64 Focus Group: Azure Data Explorer Focus Group Online
COM65 Focus Group: Azure Data Explorer Focus Group Online
COM08 Ask the Team: Azure Data Explorer Ask the Team Online
COM137 Focus Group: Built-In Dashboard and Smart Auto Scaling Capabilities in Azure Data Explorer Focus Group Online
CON-PRT157 Roundtable: Monitoring and managing your Azure Data Explorer deployments Roundtable Online
CON-PRT103 Roundtable: Advanced Kusto query language topics Roundtable Online
CON-PRT157 Roundtable: Monitoring and managing your Azure Data Explorer deployments Roundtable Online
CON-PRT103 Roundtable: Advanced Kusto query language topics Roundtable Online
CON-PRT130 Roundtable: Data exploration and visualization with Azure Data Explorer Roundtable Online
CON-PRT130 Roundtable: Data exploration and visualization with Azure Data Explorer Roundtable Online
... ... ... ...