Azure/KqlKustoLogs/BillUsage

Summarize by table

Usage 
| where TimeGenerated > ago(92d)
| where StartTime >= now(-91d) and EndTime < now()
| where IsBillable == true
| summarize BillableDataGB = round(sum(Quantity) / 1000.,2) by DataType, Solution
| sort by BillableDataGB desc

Graph by table by day

Usage 
| where TimeGenerated > ago(92d)
| where StartTime >= now(-91d) and EndTime < now()
| where IsBillable == true
| summarize BillableDataGB = round(sum(Quantity) / 1000.,2) by DataType, Solution, bin(TimeGenerated, 1d)
| render columnchart

Nginx logs

f_nginx_CL
| where TimeGenerated  between (datetime(2023-05-15) .. datetime(2023-05-17))
| extend parsed = parse_json(log_s)
| summarize ipcount=count() by tostring(parsed.uri) , bin(TimeGenerated, 6h)