• Azure
• KqlKustoLogs
• BillUsage

Azure/KqlKustoLogs/BillUsage

• Summarize by table

  Usage 
  | where TimeGenerated > ago(92d)
  | where StartTime >= now(-91d) and EndTime < now()
  | where IsBillable == true
  | summarize BillableDataGB = round(sum(Quantity) / 1000.,2) by DataType, Solution
  | sort by BillableDataGB desc

• Graph by table by day

  Usage 
  | where TimeGenerated > ago(92d)
  | where StartTime >= now(-91d) and EndTime < now()
  | where IsBillable == true
  | summarize BillableDataGB = round(sum(Quantity) / 1000.,2) by DataType, Solution, bin(TimeGenerated, 1d)
  | render columnchart 

• Nginx logs

  f_nginx_CL
  | where TimeGenerated  between (datetime(2023-05-15) .. datetime(2023-05-17))
  | extend parsed = parse_json(log_s)
  | summarize ipcount=count() by tostring(parsed.uri) , bin(TimeGenerated, 6h)