Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
DennesTorres
Impactful Individual
Impactful Individual

KQL Query not accepted by alerts

Hi,

 

I have the KQL query below. This query is not being accepted for alert creation.

 

pusummary
| where Window_End_Time > ago(20m)
| where TotalRides >5
| where PULocationID in (pusummary 
    | where Window_End_Time > ago(20m) 
    | where TotalRides >5 
    | summarize TotalRides=sum(toint(TotalRides)) by PULocationID
    |top 5 by TotalRides)
| summarize TotalRides=sum(toint(TotalRides)) by Window_End_Time=bin(Window_End_Time,2m), PULocationID

 

I think I understand the limitations of data activator (https://learn.microsoft.com/en-us/fabric/data-activator/data-activator-limitations#supported-real-ti... ), but I can't understand which one of the limitations this query is breaking.

 

Any suggestions ?

 

 

4 REPLIES 4
DennesTorres
Impactful Individual
Impactful Individual

Hi,

 

The suggestion about hovering the mouse helped a bit.

 

The error message is complaining the query has two time ranges.

Do you suggest something I could do for this query to work, or is this a bug, because the subquery shouldn't be recognized as a 2nd time range ?

 

Kind Regards,

 

Dennes

v-junyant-msft
Community Support
Community Support

Hi @DennesTorres ,

When you mouse over the Set alert icon, you will be prompted as to why you are not allowed to create an alert, please check what the system prompt is?

vjunyantmsft_0-1718585286023.png

Also, please contact your organization's global administrator to see if this option is Enable in the tenant settings in the Admin portal:

vjunyantmsft_1-1718585881210.png


Best Regards,
Dino Tao
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

lbendlin
Super User
Super User

You are already filtering your IDs.  No need to filter them again

 

pusummary
| where PULocationID in (pusummary 
    | where Window_End_Time > ago(20m) 
    | where TotalRides >5 
    | summarize TotalRides=sum(toint(TotalRides)) by PULocationID
    |top 5 by TotalRides)
| summarize TotalRides=sum(toint(TotalRides)) by Window_End_Time=bin(Window_End_Time,2m), PULocationID

Hi,

 

I can remove the 

| where TotalRides >5


But I can't remove the filter by window_end_Time, otherwise it show to me the values for the top 5 Ids for all the time available.

Anyway, none of these options enabled the "Set Alert".

 

Kind Regards,

 

Dennes

 

Helpful resources

Announcements
FabricCarousel_June2024

Fabric Monthly Update - June 2024

Check out the June 2024 Fabric update to learn about new features.

PBI_Carousel_NL_June

Fabric Community Update - June 2024

Get the latest Fabric updates from Build 2024, key Skills Challenge voucher deadlines, top blogs, forum posts, and product ideas.

Top Solution Authors