Azure Monitor 日志查询语言差异Azure Monitor log query language differences

虽然 Azure Monitor 中的日志是基于 Azure 数据资源管理器构建的并使用相同的 Kusto 查询语言,但该语言的版本确实有一些差异。While logs in Azure Monitor is built on Azure Data Explorer and uses the same Kusto query language, the version of the language does have some differences. 本文介绍了在数据资源管理器使用的语言版本与 Azure Monitor 日志查询使用的版本之间存在差异的元素。This article identifies elements that are different between the version of the language used for Data Explorer and the version used for Azure Monitor log queries.


本文最近已更新,从使用术语“Log Analytics”改为使用术语“Azure Monitor 日志”。This article was recently updated to use the term Azure Monitor logs instead of Log Analytics. 日志数据仍然存储在 Log Analytics 工作区中,并仍然由同一 Log Analytics 服务收集并分析。Log data is still stored in a Log Analytics workspace and is still collected and analyzed by the same Log Analytics service. 我们正在更新术语,以便更好地反映 Azure Monitor 中日志的角色。We are updating the terminology to better reflect the role of logs in Azure Monitor. 有关详细信息,请参阅 Azure Monitor 术语更改See Azure Monitor terminology changes for details.

Azure Monitor 中不支持的 KQL 元素KQL elements not supported in Azure Monitor

以下各部分介绍了 Azure Monitor 不支持的 Kusto 查询语言的元素。The following sections describe elements of the Kusto query language that aren't supported by Azure Monitor.

Azure Monitor 中不支持的语句Statements not supported in Azure Monitor

Azure Monitor 中不支持的函数Functions not supported in Azure Monitor

Azure Monitor 中不支持的运算符Operators not supported in Azure Monitor

Azure Monitor 中不支持的插件Plugins not supported in Azure Monitor

Azure Monitor 中的附加运算符Additional operators in Azure Monitor

下列运算符支持特定的 Azure Monitor 功能并且在 Azure Monitor 外部不可用。The following operators support specific Azure Monitor features and are not available outside of Azure Monitor.

后续步骤Next steps