My Games
Account 🔐
Sign Up
Login
Global Leaderboard
Case Vault
Badge Backpack
Blue Team Glossary
Login and start playing
Leaving so soon?
×
You really want to log out? We were having so much fun!
Home
›
Glossary
›
comment
Comment
Definition
In Kusto Query Language (KQL), a comment is text in your query that the Kusto engine ignores — it’s for humans, not the computer. Comments are used to explain what parts of the query do, leave notes for other analysts, or temporarily disable lines without deleting them. KQL supports two types of comments: **Single-line comments** start with `//` and go to the end of the line. ```sql // This gets all failed logins in the last 24 hours AuthenticationEvents | where Result == "Failure" | where TimeGenerated > ago(1d) ``` **Multi-line comments** are wrapped in `/*` and `*/`. ```sql /* This query finds failed logins from the past 24 hours and lists the accounts involved */ AuthenticationEvents | where Result == "Failure" | where TimeGenerated > ago(1d) ``` In investigations, comments are especially useful for: * Documenting your reasoning behind each step * Marking which parts of a query are experimental or optional * Making saved queries easier to read when you revisit them later * Sharing queries with teammates so they know exactly what’s happening Further reading: * Microsoft Docs – [https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/query-syntax#comments](https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/query-syntax#comments)
Explore More Terms
Learn
Pyramid Of Pain
Count
Website-Defacement
Status Code