Exploring Further

Graduate from guided filters to full KQL on the Query page

The Logging page is designed for quick, guided exploration — but it can only express a subset of what KQL supports. When you need joins, custom aggregations, or any query the filter builder cannot represent, copy the query it composed onto the Query page.

Show Query — view and copy the KQL that the Logging page composed from your filters

Patterns

Collapse similar log lines into templates to find dominant message types

Tracing

Find traces by structural pattern with trace-find — no KQL required