kusto 中的多个 where 子句与 'and'

Question

在性能方面，是下面的查询

ResourceEvents
| where ResourceType == "Foo" and EventType == "Bar"

几乎与

相同

ResourceEvents
| where ResourceType == "Foo"
| where EventType == "Bar"

或者是按顺序过滤记录，执行两次搜索而不是一次组合搜索？

Answer 1

这两个选项在语义和性能方面是等价的

Answer 2

加上Yoni的回答，大家可以自己看查询计划查一下

.show queryplan  <|
StormEvents
| where State == "TEXAS" and EventType == "Flood"


.show queryplan  <|
StormEvents
| where State == "TEXAS" 
| where EventType == "Flood"

计划是等价的。

kusto 中的多个 where 子句与 'and'

Multiple where clauses vs. 'and' in kusto

kql

azure-data-explorer