Kusto-phase3: update release note for summarize optimization

ClibMouse · Nov 1, 2023 · ee4bd0f · ee4bd0f
1 parent aa5ea0d
commit ee4bd0f
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/src/Parsers/Kusto/KQL_ReleaseNote.md b/src/Parsers/Kusto/KQL_ReleaseNote.md
@@ -5,6 +5,25 @@
    ```
    print lookup_contains('test_rocksDB',1);
    ```
+- Optimizing the 'summarize' operator.
+
+   KQL:
+   ```
+   events_dist 
+   | project original_time, ip
+   | where unixtime_milliseconds_todatetime(original_time) > ago(1h)
+   | summarize ip_count = count(*) by ip
+   ```
+   Optimal SQL:
+   ```
+   SELECT
+      ip,
+      count(*) AS ip_count
+   FROM events_dist
+   WHERE kql_todatetime(fromUnixTimestamp64Milli(original_time, 'UTC')) > (now64(9, 'UTC') + (-1 * toIntervalNanosecond(3600000000000)))
+   GROUP BY ip
+   ```
+
 
 # July, 2023
 ## Features