Time range filter with ago()

bin() for time bucketing

summarize for aggregation

percentiles() for latency

where before summarize

project to select columns

render timechart

take or limit for exploratory query

extend for calculated fields

No bare count() aggregation

Multiple .kql output files

join keyword used

join kind specified

join on CorrelationId or SessionId

where before join

project to limit columns

Time range filter

between() for bounded time range

String filtering function

parse or extract used

Multiple output .kql files

summarize for aggregation

No .kusto.windows.net in cluster name

az kusto cluster list used

az kusto database list used

az rest --method post used

Correct REST endpoint URL pattern

Correct body structure

Cluster name without suffix

Timeout fallback trigger

Service unavailable fallback trigger

Auth failure fallback trigger

Empty response fallback trigger

subscription parameter present

resource-group parameter present