Merging changes synced from https://github.com/MicrosoftDocs/dataexpl…

…orer-docs-pr (branch live)

data-explorer/kusto/includes/multi-arg-index-performance-note.md

@@ -0,0 +1,7 @@
+---
+ms.topic: include
+ms.date: 11/11/2024
+---
+
+> [!NOTE]
+> When more than 128 search terms are used, text index lookup optimization is disabled, which might lead to reduced query performance.

data-explorer/kusto/management/query-acceleration-policy.md

@@ -26,7 +26,7 @@ To enable query acceleration in the Fabric UI, see [Query acceleration over OneL
 * The number of columns in the external table can't exceed 900.
 * Query performance over accelerated external delta tables which have partitions may not be optimal during preview.
 * The feature assumes delta tables with static advanced features, for example column mapping doesn't change, partitions don't change, and so on. To change advanced features, first disable the policy, and once the change is made, re-enable the policy.
-* Schema changes on the delta table must also be followed with the respective `. alter` external delta table schema, which might result in acceleration starting from scratch if there was breaking schema change.
+* Schema changes on the delta table must also be followed with the respective `.alter` external delta table schema, which might result in acceleration starting from scratch if there was breaking schema change.
 * Index-based pruning isn't supported for partitions.
 * Parquet files with a compressed size higher than 6 GB won't be cached.
 ::: moniker range="azure-data-explorer"

data-explorer/kusto/query/has-any-ipv4-function.md

@@ -16,6 +16,10 @@ IP address entrances in a text must be properly delimited with non-alphanumeric
 * "These requests came from: 192.168.1.1, 10.1.1.115 and 10.1.1.201"
 * "05:04:54 127.0.0.1 GET /favicon.ico 404"
 
+## Performance tips
+
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 ## Syntax
 
 `has_any_ipv4(`*source* `,` *ip_address* [`,` *ip_address_2*`,` ...] `)`

data-explorer/kusto/query/has-any-ipv4-prefix-function.md

@@ -16,6 +16,10 @@ IP address entrances in a text must be properly delimited with non-alphanumeric
 * "These requests came from: 192.168.1.1, 10.1.1.115 and 10.1.1.201"
 * "05:04:54 127.0.0.1 GET /favicon.ico 404"
 
+## Performance tips
+
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 ## Syntax
 
 `has_any_ipv4_prefix(`*source* `,` *ip_address_prefix* [`,` *ip_address_prefix_2*`,` ...] `)`  

data-explorer/kusto/query/has-any-operator.md

@@ -13,6 +13,10 @@ Filters a record set for data with any set of case-insensitive strings. `has_any
 
 For more information about other operators and to determine which operator is most appropriate for your query, see [datatype string operators](datatypes-string-operators.md).
 
+## Performance tips
+
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 ## Syntax
 
 *T* `|` `where` *col* `has_any` `(`*expression*`,` ... `)`

data-explorer/kusto/query/in-cs-operator.md

@@ -15,6 +15,8 @@ Filters a record set for data with a case-sensitive string.
 
 ## Performance tips
 
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 [!INCLUDE [performance-tip-note](../includes/performance-tip-note.md)]
 
 ## Syntax

data-explorer/kusto/query/in-operator.md

@@ -15,6 +15,8 @@ Filters a record set for data with a case-insensitive string.
 
 ## Performance tips
 
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 [!INCLUDE [performance-tip-note](../includes/performance-tip-note.md)]
 
 When possible, use the case-sensitive [in](in-cs-operator.md).

data-explorer/kusto/query/ipv4-is-in-any-range-function.md

@@ -11,6 +11,10 @@ ms.date: 08/11/2024
 
 Checks whether IPv4 string address is in any of the specified IPv4 address ranges.
 
+## Performance tips
+
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 ## Syntax
 
 `ipv4_is_in_any_range(`*Ipv4Address* `,` *Ipv4Range* [ `,` *Ipv4Range* ...] `)`

data-explorer/kusto/query/ipv6-is-in-any-range-function.md

@@ -11,6 +11,10 @@ ms.date: 08/11/2024
 
 Checks whether an IPv6 string address is in any of the specified IPv6 address ranges.
 
+## Performance tips
+
+[!INCLUDE [index-performance-tip-note](../includes/multi-arg-index-performance-note.md)]
+
 ## Syntax
 
 `ipv6_is_in_any_range(`*Ipv6Address* `,` *Ipv6Range* [ `,` *Ipv6Range* ...] `)`

data-explorer/kusto/query/print-operator.md

@@ -3,7 +3,7 @@ title:  print operator
 description: Learn how to use the print operator to output a single row with one or more scalar expression results as columns.
 ms.reviewer: alexans
 ms.topic: reference
-ms.date: 08/11/2024
+ms.date: 11/20/2024
 ---
 # print operator
 
@@ -13,7 +13,7 @@ Outputs a single row with one or more scalar expression results as columns.
 
 ## Syntax
 
-`print` [*ColumnName* `=`] *ScalarExpression* [',' ...]
+`print` [*ColumnName* `=`] *ScalarExpression* [`,` ...]
 
 [!INCLUDE [syntax-conventions-note](../includes/syntax-conventions-note.md)]
 
@@ -30,6 +30,10 @@ A table with one or more columns and a single row. Each column returns the corre
 
 ## Examples
 
+### Print sum and variable value
+
+The following example outputs a row with two columns. One column contains the sum of a series of numbers and the other column contains the value of the variable, `x`.
+
 :::moniker range="azure-data-explorer"
 > [!div class="nextstepaction"]
 > <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAAysoyswrUTBQ0FYwBGIjIDYGYhMgNtVRqFCwVVAKzy9XVAIAppjMyScAAAA=" target="_blank">Run the query</a>
@@ -45,6 +49,10 @@ print 0 + 1 + 2 + 3 + 4 + 5, x = "Wow!"
 |--|--|
 |15| Wow!|
 
+### Print concatenated string
+
+The following example outputs the results of the `strcat()` function as a concatenated string.
+
 :::moniker range="azure-data-explorer"
 > [!div class="nextstepaction"]
 > <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAAysoyswrUUhKzMtLLbItLilKTizRUPJIzcnJV9JRgKLw/KKcFEUlTQBf/iftLAAAAA==" target="_blank">Run the query</a>

data-explorer/kusto/query/visualization-timechart.md

@@ -3,14 +3,14 @@ title:  Time chart visualization
 description:  This article describes the time chart visualization.
 ms.reviewer: alexans
 ms.topic: reference
-ms.date: 08/11/2024
+ms.date: 11/13/2024
 monikerRange: "microsoft-fabric || azure-data-explorer || azure-monitor || microsoft-sentinel"
 ---
 # Time chart
 
 > [!INCLUDE [applies](../includes/applies-to-version/applies.md)] [!INCLUDE [fabric](../includes/applies-to-version/fabric.md)] [!INCLUDE [azure-data-explorer](../includes/applies-to-version/azure-data-explorer.md)] [!INCLUDE [monitor](../includes/applies-to-version/monitor.md)] [!INCLUDE [sentinel](../includes/applies-to-version/sentinel.md)]
 
-A time chart visual is a type of line graph. The first column of the query is the x-axis, and should be a datetime. Other numeric columns are y-axes. One string column values are used to group the numeric columns and create different lines in the chart. Other string columns are ignored. The time chart visual is similar to a [line chart](visualization-linechart.md) except the x-axis is always time.
+A time chart visual is a type of line graph. The first column of the query is the x-axis, and should be a datetime. Other numeric columns are y-axes. One string column values are used to group the numeric columns and create different lines in the chart. Other string columns are ignored. The time chart visual is like a [line chart](visualization-linechart.md) except the x-axis is always time.
 
 > [!NOTE]
 > This visualization can only be used in the context of the [render operator](render-operator.md).
@@ -28,7 +28,7 @@ A time chart visual is a type of line graph. The first column of the query is th
 | *T* | `string` |  :heavy_check_mark: | Input table name.
 | *propertyName*, *propertyValue* | `string` | | A comma-separated list of key-value property pairs. See [supported properties](#supported-properties).|
 
-::: moniker range="microsoft-fabric  || azure-data-explorer"
+::: moniker range="microsoft-fabric || azure-data-explorer"
 
 ### Supported properties
 
@@ -64,28 +64,43 @@ This visualization supports splitting into multiple y-axis values:
 
 ### Render a timechart
 
+The following example renders a timechart with a title "Web app. traffic over a month, decomposing" that decomposes the data into baseline, seasonal, trend, and residual components.
+::: moniker-end
+
+::: moniker range="azure-data-explorer"
 > [!div class="nextstepaction"]
-> <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA3WQ3WqEQAyF7/cpcqdS7aqlFLr4FLvQS4ka16HzIzPZn5Y+fDOrCy20V5mQk3O+jCYGo2zL0MCATKwMpXVZvRRlVZTP2W6jowKvfynqonyCun4ty1U3RFE97TYDGdcafKc2kFcU6s0XxLZYWrAn0+D5mErNwFk4iOme0cwwemdWInZrcGCao3f3AUENIF6XiTzdmqaB5LCvEgDYbgECaeoZUGb2qAkiLayho/My6DWhJQ9nFU6o1SeyclYs6cpkB0g7FA9lKZc1DM6izoG9jHLwJImylMmVi2c7UO/M7ALFU3IoqhySuD0qTrIF6S5RMQjcGOHkr+TxE06O/TcvBxSyOxikd+HDTZcJfKxyUzTsJ/QMF8VTyoo1NckbdYDz/Ci2OI6qXxiMszzlv+mS7BvAR09lEAIAAA==" target="_blank">Run the query</a>
+> <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA3WQ3WqDQBCF7%2FMU506l2qilFBp8igR6KRsd49L9kXXy09KH72xioIX2aneYM%2Bd8M4YYVruW0aBXTKwtpXVZvRRlVZTP2WZlokJd%2FlLURfmEun4ty0XXR1E9blY9Wd9a9U7tTEHTXK%2B%2BEMviVsIdbaNOh1TeDN5hJ6ZbVnbCELxdiNgvwTPTFL33H5h1D%2FE6jxToWjQNkt22SgCs18BMhjqGkp47GEKkxRI6%2BCCNzpByFHDS81EZ%2FalYeyeWdGFyPdK9Eg%2FtKJcxNXunTA4O0soRSBJlKJMtb55tT523k58prpKjqHIkcXrQnGQ3pLtExyD4IcLJreTzE06W%2FTcvhxKyOxjSu%2FDhqssEPr6yUzTsRhUYZ81jypoNNckb7aGm6VFs1TDoDv5E8RLWOx7z33xJ9g1PIpCWEgIAAA%3D%3D" target="_blank">Run the query</a>
+::: moniker-end
+
+::: moniker range="microsoft-fabric || azure-data-explorer"
 
-```kusto 
+```kusto
 let min_t = datetime(2017-01-05);
 let max_t = datetime(2017-02-03 22:00);
 let dt = 2h;
 demo_make_series2
 | make-series num=avg(num) on TimeStamp from min_t to max_t step dt by sid 
 | where sid == 'TS1'   //  select a single time series for a cleaner visualization
 | extend (baseline, seasonal, trend, residual) = series_decompose(num, -1, 'linefit')  //  decomposition of a set of time series to seasonal, trend, residual, and baseline (seasonal+trend)
-| render timechart with(title='Web app. traffic of a month, decomposition')
+| render timechart with(title='Web app. traffic over a month, decomposition')
 ```
 
 :::image type="content" source="media/visualization-timechart/visualization-timechart.png" alt-text="Screenshot of timechart visualization output." lightbox="media/visualization-timechart/visualization-timechart.png":::
 
-### Label a time chart
+### Label a timechart
+
+The following example renders a timechart that depicts crop damage grouped by week. The timechart x axis is labled "Date" and the y axis is labled "Crop damage."
+::: moniker-end
+
+::: moniker range="azure-data-explorer"
 
 > [!div class="nextstepaction"]
 > <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA2WOQQrCMBBF957i01UCVlpddFU36gn0AqkZbKBJJR2tiod3GoogDgMz/JnP+0fuoz/cKfCweGNsKRKObCKfnCc0xCNRgLKGiUVR66Ko8qKU1lit8KuX63xTao0FpEyw2BtvLrSL/XXAFoUQhpv3JroXIUF3/S0wapynqTSaJxoX1DfBEpXVYosULEVMqHMrt0QYHbdQaWXHHdXZRJJMExT9fTZky/TymH/2EnmWnv+2+dLRRYh166ylkBT9AeKYKXcqAQAA" target="_blank">Run the query</a>
+::: moniker-end
 
-```kusto 
+::: moniker range="microsoft-fabric || azure-data-explorer"
+
+```kusto
 StormEvents
 | where StartTime between (datetime(2007-01-01) .. datetime(2007-12-31)) 
     and DamageCrops > 0
@@ -103,10 +118,17 @@ StormEvents
 
 ### View multiple y-axes
 
+The following example renders daily hail events in the states of Texas, Nebraska, and Kansas. The visualization uses the `ysplit` property to render each state's events in separate panels for comparison.
+::: moniker-end
+
+::: moniker range="azure-data-explorer"
+
 > [!div class="nextstepaction"]
 > <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAAyWMsQqDMBiE90Lf4ciUgEsfwCEFoSA4GIeuUX8wYKIkvxVLH76x3e6+4zvDS/TViwKn6+WDfaJIMGyZ4AKk6KqnNqKAaKp7q02tz1zrxmSqYMOIn9wdK6EsIR7WzeJ8Spv3Nro3YVi2wFKhP/7HBXoXZI6RO+dzvY3qNCKFkSI4s2HKI3bHE+SR1tlxudpAc1JfbEl6kbAAAAA=" target="_blank">Run the query</a>
 
+::: moniker-end
 
+::: moniker range="microsoft-fabric || azure-data-explorer"
 ```kusto
 StormEvents
 | where State in ("TEXAS", "NEBRASKA", "KANSAS") and EventType == "Hail"
@@ -128,17 +150,19 @@ StormEvents
 
 All properties are optional.
 
-|*PropertyName*|*PropertyValue*                                                                   |
+|*PropertyName*|*PropertyValue*|
 |--------------|----------------------------------------------------------------------------------|
 |`series`      |Comma-delimited list of columns whose combined per-record values define the series that record belongs to.|
-|`title`       |The title of the visualization (of type `string`).                                |
+|`title`       |The title of the visualization (of type `string`). |
 
 ## Example
 
+The following example renders a timechart with a title "Web app. traffic over a month, decomposing" that decomposes the data into baseline, seasonal, trend, and residual components.
+
 > [!div class="nextstepaction"]
 > <a href="https://dataexplorer.azure.com/clusters/help/databases/Samples?query=H4sIAAAAAAAAA3WQ3WqEQAyF7/cpcqdS7aqlFLr4FLvQS4ka16HzIzPZn5Y+fDOrCy20V5mQk3O+jCYGo2zL0MCATKwMpXVZvRRlVZTP2W6jowKvfynqonyCun4ty1U3RFE97TYDGdcafKc2kFcU6s0XxLZYWrAn0+D5mErNwFk4iOme0cwwemdWInZrcGCao3f3AUENIF6XiTzdmqaB5LCvEgDYbgECaeoZUGb2qAkiLayho/My6DWhJQ9nFU6o1SeyclYs6cpkB0g7FA9lKZc1DM6izoG9jHLwJImylMmVi2c7UO/M7ALFU3IoqhySuD0qTrIF6S5RMQjcGOHkr+TxE06O/TcvBxSyOxikd+HDTZcJfKxyUzTsJ/QMF8VTyoo1NckbdYDz/Ci2OI6qXxiMszzlv+mS7BvAR09lEAIAAA==" target="_blank">Run the query</a>
 
-```kusto 
+```kusto
 let min_t = datetime(2017-01-05);
 let max_t = datetime(2017-02-03 22:00);
 let dt = 2h;

data-explorer/security-network-migrate-vnet-to-private-endpoint.md

@@ -85,6 +85,9 @@ To prepare your cluster for migration:
 > [!WARNING]
 > Failure of your cluster to connect to essential services for ingestion and external tables poses a risk of data loss. Additionally, queries calling out to other network-protected services may cease to function.
 
+> [!WARNING]
+> The migration step must be performed within a few hours of completing the preparation steps. Delaying the migration might cause the service to malfunction. ```
+
 ## Migrate your cluster
 
 ### [Azure portal](#tab/portal)