Dashboard
Account 🔐
Sign Up
Login
Global Leaderboard
Game Vault
Badge Backpack
Blue Team Glossary
Login and start playing
Leaving so soon?
×
You really want to log out? We were having so much fun!
Home
›
Glossary
›
Kusto
›
take
Take
Kusto
Definition
In KQL, the take operator is a useful tool that provides you with a random number of rows from the incoming dataset. This is **very** helpful when you're trying to determine what types of information a given table is holding.
Explore More Terms
Honeypot
Data-Exfiltration
Prefetch
Website-Defacement
Ransom-Note
Examples & Use Cases
What domain is used by employees' email accounts? ```sql Employees | take 10 ``` What types of information can be found in a process command line? ```sql ProcessEvents | take 25 ``` What does a sha256 hash even look like? ```sql FileCreationEvent | take 5 ``` --- ## Further Reading [Microsoft Learn - take operator](https://learn.microsoft.com/en-us/kusto/query/take-operator)
.png)
