How to retrieve specific date data from the table in kusto query

gopi nath 0
Viewed 38

I need to retrieve the specific date data from the table Can any one help me out this..

Sample data:

Timestamp message
2010-09-12 king
2010-09-12 queen
2010-09-13 raju
2010-09-13 Rani
2010-09-14 Ramu
2010-09-12 somu

Expecting results:

Timestamp message
2010-09-12 king
2010-09-12 queen
2010-09-12 somu

Only 2010-09-12 date results required.

Thanks in advance....

azure-data-explorer kql
1 Answers

If all datetime values are at the start of the day then you can use a simple equality.

datatable(Timestamp:datetime, message:string)
[
    datetime("2010-09-12") ,"king"
   ,datetime("2010-09-12") ,"queen"
   ,datetime("2010-09-13") ,"raju"
   ,datetime("2010-09-13") ,"Rani"
   ,datetime("2010-09-14") ,"Ramu"
   ,datetime("2010-09-12") ,"somu"
]
| where Timestamp == datetime("2010-09-12")

If all datetime values are at the start of the day then you can use a simple equality.

Timestamp message
2010-09-12T00:00:00Z king
2010-09-12T00:00:00Z queen
2010-09-12T00:00:00Z somu

Fiddle

If datetime values have timestamp parts, you'll need to check a range of dates.

datatable(Timestamp:datetime, message:string)
[
    datetime("2010-09-12 00:00:00") ,"king"
   ,datetime("2010-09-12 12:34:56") ,"queen"
   ,datetime("2010-09-13 00:00:00") ,"raju"
   ,datetime("2010-09-13 15:23:02") ,"Rani"
   ,datetime("2010-09-14 11:11:11") ,"Ramu"
   ,datetime("2010-09-12 02:03:04") ,"somu"
]
| where Timestamp >= datetime("2010-09-12") and Timestamp < datetime("2010-09-13")
Timestamp message
2010-09-12T00:00:00Z king
2010-09-12T02:03:04Z somu
2010-09-12T12:34:56Z queen

Fiddle

David דודו Markovitz0
Related