Kusto 查询：如何执行嵌套的 for 循环

如何解决Kusto 查询：如何执行嵌套的 for 循环

我正在为我的仪表板构建可靠性查询。我们有多个管道，每个管道每天至少应该有一个成功。我们不想因失败而受到谴责，因为我们的 SLA 要求我们每天只能成功 1 次。

因此，如果我查看一整周的数据，我需要检查过去一周内每个管道的每一天是否至少成功运行了 1 次。苦苦挣扎了 2 天，我只能想到这个 for 循环的表示。

let startDate = todatetime("2021-06-30");
let endDate = todatetime("2021-07-07");
let days = range(startDate,endDate,1d);
let pipelineNames = dynamic(["pipeline1","pipeline2"]);
ADFPipeline
| where PipelineName == pipelineNames[0]
| where TimeGenerated between (todatetime(days[0]) .. 1d)
| where Status == "Succeeded"
| summarize AtLeastOnesuccess = countif(Status == 'Succeeded') > 0

然后

| where PipelineName == pipelineNames[1]
| where TimeGenerated between (todatetime(days[0]) .. 1d)

| where PipelineName == pipelineNames[0]
| where TimeGenerated between (todatetime(days[1]) .. 1d)

| where PipelineName == pipelineNames[1]
| where TimeGenerated between (todatetime(days[1]) .. 1d)

| where PipelineName == pipelineNames[0]
| where TimeGenerated between (todatetime(days[2]) .. 1d)

| where PipelineName == pipelineNames[1]
| where TimeGenerated between (todatetime(days[2]) .. 1d)

最后，以某种方式汇总所有内容，所以我得到，“嘿，在过去的 7 天里，您有 3 天没有运行管道 1，有 1 天没有运行管道 2。所以 4/14 = 71% 的可靠性。

解决方法

您是否考虑过按管道和日期运行聚合，然后根据您的要求处理结果？

let startDate = todatetime("2021-06-30");
let endDate = todatetime("2021-07-07");
let pipelineNames = dynamic(["pipeline1","pipeline2"]);
ADFPipeline
| where TimeGenerated between (startDate .. endDate)
| where PipelineName in (pipelineNames)
| summarize AtLeastOneSuccess = countif(Status == 'Succeeded') > 0
         by PipelineName,startofday(TimeGenerated)