Skip to content

nguyen18/WVD-KustoQueries

Repository files navigation

WVD-KustoQueries

KQL (Kusto query language) queries for Azure monitor log analytics!

What is KQL?

Kusto query language is a language developed by Microsoft to query their Azure log databases within Azure Monitor Logs, Azure Monitor Application Insights and others. The language is also similar to SQL so translation between the two would be fairly simple if you understand the fundamental concepts. KQL is very handdy when dealing with large amounts of log data that you would like to organize or manipulate. Because it is within the Azure monitor logs and applications, cost to run these queries is on a pay-as-you-go basis.

Purpose of these queries

Windows Virtual Desktop (WVD) was used to replace on-campus or physical computers with virtual desktops that can be accessed anywhere. As the Covid-19 pandemic was underway and the university was switching to online accomodations, professors were struggling to figure out how undergrad and graduate students were going to access expensive and necessary softwares on in-lab computers. Our team's solution was to create WVDs so that students could access these programs from their homes and bring in-person labs to zoom univeristy. Many students relied on these virtual computers (including myself) to complete school assignments and gain lab experience. These KQL queries were created to monitor the utilization of them, users accessing them, and system resources being consumed by them such as used CPU/RAM. The queries were important to show the team a proof of concept of these virtual desktops and how they can be effectively utilized. Despite returning to in-person school, many of the SDSU staff (such as our team) still use WVD till this day.