Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Don't miss out! 2025 Microsoft Fabric Community Conference, March 31 - April 2, Las Vegas, Nevada. Use code MSCUST for a $150 discount. Prices go up February 11th. Register now.

Reply
rajutechstar
New Member

Need help on Dax for KQL query

Below is the KQL query, i need dax query in Power BI. Could you please provide me the DAX for below KQL queries

 

KQL1:

SecurityIncident
| where TimeGenerated > ago(100d)
| where FirstActivityTime <> ''
| where Status == 'New'
| summarize arg_min(TimeGenerated,*) by IncidentNumber
| extend TimeToTriage = (FirstModifiedTime - CreatedTime)/1s
| summarize min(TimeGenerated), FirstActivity=min(FirstActivityTime), Created=min(CreatedTime) by Title, ProviderIncidentId
| extend DetectTime = (Created - FirstActivity)/1m
| extend TileTitle = 'All'
| summarize MeanTime = percentile(DetectTime, 50) by TileTitle

 

 

KQL2:

UniqueIncidents
where StatusList contains "Closed"
summarize Total=count(),TruePositive=countif(Classification == 'TruePositive')
extend Results = pack("Total",Total,"TruePositives",TruePositive)
project Results
mv-expand Results
extend Title = iff(tostring(Results.Total)<>'','Total','TruePositive')
extend Count = iff(tostring(Results.TruePositives)<>'',toint(Results.TruePositives),toint(Results.Total))
project-away Results
2 REPLIES 2
rajutechstar
New Member

can anybody provide SQL query for above kql queries?

ERD
Community Champion
Community Champion

Hi @rajutechstar ,

Try this article: https://docs.microsoft.com/bs-cyrl-ba/azure/data-explorer/kusto/query/sqlcheatsheet 

If this post helps, then please consider Accept it as the solution ✔️to help the other members find it more quickly.

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly. Appreciate your Kudos.

Check out my latest demo report in the data story gallery.

Stand with Ukraine!


Here are official ways you can support Ukraine financially (accounts with multiple currencies):
1) Support the Armed Forces of Ukraine: https://bank.gov.ua/ua/about/support-the-armed-forces
2) Come Back Alive foundation: https://www.comebackalive.in.ua/

Thank you!

Helpful resources

Announcements
Las Vegas 2025

Join us at the Microsoft Fabric Community Conference

March 31 - April 2, 2025, in Las Vegas, Nevada. Use code MSCUST for a $150 discount! Prices go up Feb. 11th.

Jan25PBI_Carousel

Power BI Monthly Update - January 2025

Check out the January 2025 Power BI update to learn about new features in Reporting, Modeling, and Data Connectivity.

Jan NL Carousel

Fabric Community Update - January 2025

Find out what's new and trending in the Fabric community.