Analyze data streams in Real-Time hub (preview)

  • Article

There are two types of data streams in Real-Time hub: Stream and Table. This article shows how to analyze streams and tables in Real-Time hub.

Screenshot that shows the types of streams available in Real-Time hub.

Note

Real-Time hub is currently in preview.

Analyze streams

To analyze a stream whose parent is an eventstream, do the following steps:

  1. Open the eventstream associated with the data stream in Real-Time hub.
  2. Add a KQL Database destination to the eventstream to send the data to a KQL table.
  3. Open KQL database and run queries against the KQL table.

The following sections provide more details about these steps.

Open eventstream

In Real-Time hub, when you get events from the supported sources, an eventstream is created for you. You can open the eventstream by using one of the following ways:

  • Get events experience:

    At the end of creating this stream, on the Review and create page, you see the Open eventstream link to open the eventstream associated with the stream in an editor. -All data streams page:

    Move the mouse over a stream whose parent is an eventstream, and select the Open link, or select ... (ellipsis), and then select Open eventstream.

  • Detail page:

    Select a stream whose parent is an eventstream on the All data streams page to see a stream detail page. On this page, select Open eventstream link on the ribbon.

Add KQL Database destination to the eventstream

After you open an eventstream in the editor, you can add a KQL database destination. When data is output to a KQL table, you can run queries against the KQL table to analyze the data.

  1. After you open the eventstream, select Edit on the ribbon to enter into the edit mode.

    Screenshot that shows the selection of the Edit button on the ribbon.

  2. Add a KQL Database destination. Select Transform events or add destination tile or Transform events on the ribbon, and then select KQL Database.

    Screenshot that shows the selection of the KQL Database in the list of destinations.

  3. Configure the KQL Database destination by following instructions from Add KQL Database destination to an eventstream.

  4. Wait for the data to be streamed into the KQL destination. Verify the status of streaming into the KQL database on the canvas.

  5. Select the destination tile and switch to the Details tab in the bottom pane.

  6. Select Open item to open the destination KQL database.

    Screenshot that shows the selection of the KQL Database tile on the canvas and a link to open KQL database in the Details pane at the bottom.

  7. Now, Run queries against the destination KQL table to analyze the data streaming into the KQL database.

Analyze tables

You can open the KQL database that's associated with a table by using one of the following ways:

  • On the All data streams page, move the mouse over a data stream of table type, and select the Open link, or select ... (ellipsis), and then select Open KQL Database.

    Screenshot that shows the Open KQL Database links for a stream of type Table.

  • Select a KQL table on the All data streams page to see a table detail page. On this page, you can select Open KQL Database link on the ribbon.

    Screenshot that shows the Open KQL Database links for a stream of type Table from the detail view.

After you open the table, you can run queries against the tables in the database.