Skip to content

Commit 115f37a

Browse files
Learn Build Service GitHub AppLearn Build Service GitHub App
authored andcommitted
Merging changes synced from https://github.com/MicrosoftDocs/dataexplorer-docs-pr (branch live)
2 parents b016c5b + 109ec60 commit 115f37a

File tree

5 files changed

+30
-9
lines changed

5 files changed

+30
-9
lines changed

data-explorer/business-continuity-overview.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.custom:
1313

1414
# Business continuity and disaster recovery overview
1515

16-
Business continuity and disaster recovery in Azure Data Explorer enables your business to continue operating in the face of a disruption. This article discusses availability (intra-region) and disaster recovery. It details native capabilities and architectural considerations for a resilient Azure Data Explorer deployment. It details recovery from human errors, high availability, followed by multiple disaster recovery configurations. These configurations depend on resiliency requirements such as Recovery Point Objective (RPO) and Recovery Time Objective (RTO), needed effort, and cost.
16+
Business continuity and disaster recovery in Azure Data Explorer enables your business to continue operating in the face of a disruption. This article discusses availability (intra-region) and disaster recovery. It details native capabilities and architectural considerations for a reliable Azure Data Explorer deployment. It details recovery from human errors, high availability, followed by multiple disaster recovery configurations. These configurations depend on recoverability requirements such as Recovery Point Objective (RPO) and Recovery Time Objective (RTO), needed effort, and cost.
1717

1818
## Mitigate disruptive events
1919

@@ -75,7 +75,7 @@ Azure Data Explorer doesn't provide automatic protection against the outage of a
7575

7676
## Disaster recovery configurations
7777

78-
This section details multiple disaster recovery configurations depending on resiliency requirements (RPO and RTO), needed effort, and cost.
78+
This section details multiple disaster recovery configurations depending on recoverability requirements (RPO and RTO), needed effort, and cost.
7979

8080
Recovery time objective (RTO) refers to the time to recover from a disruption. For example, RTO of 2 hours means the application has to be up and running within two hours of a disruption. Recovery point objective (RPO) refers to the interval of time that might pass during a disruption before the quantity of data lost during that period is greater than the allowable threshold. For example, if the RPO is 24 hours, and an application has data beginning from 15 years ago, they're still within the parameters of the agreed-upon RPO.
8181

@@ -119,7 +119,7 @@ The Active-Hot configuration is similar to the [Active-Active configuration](#ac
119119

120120
### On-demand data recovery configuration
121121

122-
This solution offers the least resiliency (highest RPO and RTO), is the lowest in cost and highest in effort. In this configuration, there's no data recovery cluster. Configure continuous export of curated data (unless raw and intermediate data is also required) to a storage account that is configured GRS (Geo Redundant Storage). A data recovery cluster is spun up if there's a disaster recovery scenario. At that time, DDLs, configuration, policies, and processes are applied. Data is ingested from storage with the ingestion property [kustoCreationTime](ingest-data-event-grid-overview.md) to override the ingestion time that defaults to system time.
122+
This solution offers the least recoverability (highest RPO and RTO), is the lowest in cost and highest in effort. In this configuration, there's no data recovery cluster. Configure continuous export of curated data (unless raw and intermediate data is also required) to a storage account that is configured GRS (Geo Redundant Storage). A data recovery cluster is spun up if there's a disaster recovery scenario. At that time, DDLs, configuration, policies, and processes are applied. Data is ingested from storage with the ingestion property [kustoCreationTime](ingest-data-event-grid-overview.md) to override the ingestion time that defaults to system time.
123123

124124
:::image type="content" source="media/business-continuity-overview/on-demand-data-recovery-cluster.png" alt-text="On-demand data recovery cluster configuration.":::
125125

@@ -129,7 +129,7 @@ This solution offers the least resiliency (highest RPO and RTO), is the lowest i
129129

130130
### Summary of disaster recovery configuration options
131131

132-
| **Configuration** | **Resiliency** | **RPO** | **RTO** | **Effort** | **Cost** |
132+
| **Configuration** | **Recoverability** | **RPO** | **RTO** | **Effort** | **Cost** |
133133
| --- | --- | --- | --- | --- | --- |
134134
| **Active-Active-Active-n** | Highest | 0 hours | 0 hours | Lower | Highest |
135135
| **Active-Active** | High | 0 hours | 0 hours | Lower | High |

data-explorer/kusto/management/data-export/continuous-data-export.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -102,12 +102,14 @@ Followed by:
102102
```
103103

104104
::: moniker range="azure-data-explorer"
105+
105106
## Continuous export from a table with Row Level Security
106107

107108
To create a continuous export job with a query that references a table with [Row Level Security policy](../../management/row-level-security-policy.md), you must:
108109

109110
* Provide a managed identity as part of the continuous export configuration. For more information, see [Use a managed identity to run a continuous export job](continuous-export-with-managed-identity.md).
110111
* Use [impersonation](../../api/connection-strings/storage-connection-strings.md#impersonation) authentication for the external table to which the data is exported.
112+
111113
::: moniker-end
112114

113115
## Continuous export to delta table - Preview
@@ -159,15 +161,25 @@ To define continuous export to a delta table, do the following steps:
159161

160162
**Policies**:
161163

164+
:::moniker range="azure-data-explorer"
165+
162166
* Continuous export can't be enabled on a table with [Row Level Security policy](../../management/row-level-security-policy.md) unless specific conditions are met. For more information, see [Continuous export from a table with Row Level Security](#continuous-export-from-a-table-with-row-level-security).
163167
* Continuous export can't be configured on a table with [restricted view access policy](../restricted-view-access-policy.md).
164168

169+
::: moniker-end
170+
:::moniker range="microsoft-fabric"
171+
172+
* Continuous export can't be configured on a table with [restricted view access policy](../restricted-view-access-policy.md).
173+
174+
::: moniker-end
175+
165176
## Related content
166177

167178
:::moniker range="microsoft-fabric"
168179

169180
* [.create or alter continuous-export](create-alter-continuous.md)
170181
* [External tables](../../query/schema-entities/external-tables.md)
182+
171183
:::moniker-end
172184

173185
:::moniker range="azure-data-explorer"

data-explorer/kusto/management/row-level-security-policy.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,9 +38,9 @@ For more information, see [management commands for managing the Row Level Securi
3838
* There's no limit on the number of tables on which Row Level Security policy can be configured.
3939
* Row Level Security policy cannot be configured on [External Tables](../query/schema-entities/external-tables.md).
4040
* The RLS policy can't be enabled on a table under the following circumstances:
41-
* When it's referenced by an [update policy](update-policy.md) query, while the update policy is not configured with a managed identity.
42-
* When it's referenced by a [continuous export](../management/data-export/continuous-data-export.md) that uses an authentication method other than impersonation.
43-
* When a [restricted view access policy](restricted-view-access-policy.md) is configured for the table.
41+
* The table is referenced by an [update policy](update-policy.md) that doesn’t use a managed identity. A managed identity is required so the engine can securely determine which rows from the referenced tables are allowed to be queried.
42+
* The table is referenced by a [continuous export](../management/data-export/continuous-data-export.md) that doesn't uss the `impersonate` authentication method. Impersonation ensures that only users who have access to the target storage account can read the exported (and potentially sensitive) data.
43+
* The table has [restricted view access policy](restricted-view-access-policy.md) configured.
4444
* The RLS query can't reference other tables that have Row Level Security policy enabled.
4545
* The RLS query can't reference tables located in other databases.
4646

data-explorer/kusto/query/join-cross-cluster.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Cross-cluster join
33
description: Learn how to perform the Cross-cluster join operation to join datasets residing on different clusters.
44
ms.reviewer: alexans
55
ms.topic: reference
6-
ms.date: 01/26/2025
6+
ms.date: 01/26/2026
77
monikerRange: "microsoft-fabric || azure-data-explorer"
88
---
99
# Cross-cluster join
@@ -32,6 +32,9 @@ The cluster that runs the query fetches the data from the other cluster.
3232

3333
[!INCLUDE [syntax-conventions-note](../includes/syntax-conventions-note.md)]
3434

35+
> [!NOTE]
36+
> join hints (including hint.remote) are order‑independent and can appear before or after the kind parameter.
37+
3538
## Parameters
3639

3740
|Name|Type|Required|Description|

data-explorer/kusto/query/jsonpath.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,12 @@ Given the following JSON document:
5050
"User ID": "user123",
5151
"Username": "kiana_anderson",
5252
"IP Address": "192.168.1.100"
53-
}
53+
},
54+
"Tags": [
55+
"startup",
56+
"auth",
57+
"performance"
58+
]
5459
}
5560
}
5661
```
@@ -69,6 +74,7 @@ You can represent each of the fields with JSONPath notation as follows:
6974
"$.Details.User['User ID']" // User ID field
7075
"$.Details.User.Username" // Username field
7176
"$.Details.User['IP Address']" // IP Address field
77+
"$.Tags[0]" // First value in the array of the Tags
7278
```
7379

7480
## Related content

0 commit comments

Comments
 (0)