Q33 Monitor Domain 4 · 20–25% of exam

A team wants to query Azure Monitor logs using SQL-like syntax. Which query language is used?

  1. A SQL
  2. B KQL (Kusto Query Language) (correct answer)
  3. C LINQ
  4. D SPL (Splunk)

Shortcut: Kusto Query Language (KQL) is used for all Azure Monitor log queries (Log Analytics, Application Insights, Microsoft Sentinel). KQL is declarative, read-only, and optimised for time-series log analysis.