KQL Practice
30 hand-authored questions, dual-engine validated against Azure Data Explorer. Submit once per question. Graded on correctness, refinement, and speed.
Pick a question on the left to begin.
KQL editor
Ready.
Query results
No run yet. Hit Test Run when you've got a query worth checking.
These questions and their gold answers are dual-validated against
Azure Data Explorer using the harness at
SOC Dashboard / KQL Test Lab.
The grading engine running in your browser is a port of Invoke-KqlPS.ps1 -
the same interpreter that produced the gold contract.
See the KQL playground for free-form exploration.