= Azure/KqlKustoLogs/BillUsage =
 * Summarize by table {{{
Usage 
| where TimeGenerated > ago(92d)
| where StartTime >= now(-91d) and EndTime < now()
| where IsBillable == true
| summarize BillableDataGB = round(sum(Quantity) / 1000.,2) by DataType, Solution
| sort by BillableDataGB desc
}}}

 * Graph by table by day {{{
Usage 
| where TimeGenerated > ago(92d)
| where StartTime >= now(-91d) and EndTime < now()
| where IsBillable == true
| summarize BillableDataGB = round(sum(Quantity) / 1000.,2) by DataType, Solution, bin(TimeGenerated, 1d)
| render columnchart 
}}}


 * Nginx logs {{{
f_nginx_CL
| where TimeGenerated  between (datetime(2023-05-15) .. datetime(2023-05-17))
| extend parsed = parse_json(log_s)
| summarize ipcount=count() by tostring(parsed.uri) , bin(TimeGenerated, 6h)

}}}