azure - Kusto 中两个连续值之间的差异

Question

我有以下脚本:

let StartTime = datetime(2022-02-18 10:10:00 AM);
let EndTime = datetime(2022-02-18 10:15:00 AM);
MachineEvents
| where Timestamp between (StartTime .. EndTime)
| where Id == "00112233" and Name == "Higher"
| top 2 by Timestamp
| project Timestamp, Value

我得到了以下结果:

之后我想要实现的是检查最后收到的值(在本例中为 15451.433)是否小于 30,000。如果条件为真，那么我应该再次检查最后两个连续值之间的差异(在本例中:15451.433 - 15457.083)。如果差值 < 0，那么我应该将值返回为 true，否则它应该返回为 false(换句话说，值应该给出一个 bool 值，而不是如图所示的 double 值)

Answer 1

datatable(Timestamp:datetime, Value:double)
[
 datetime(2022-02-18 10:15:00 AM), 15457.083,
 datetime(2022-02-18 10:14:00 AM), 15451.433,
 datetime(2022-02-18 10:13:00 AM), 15433.333,
 datetime(2022-02-18 10:12:00 AM), 15411.111
]
| top 2 by Timestamp
| project Timestamp, Value
| extend nextValue=next(Value)
| extend finalResult = iff(Value < 30000, nextValue - Value < 0, false)
| top 1 by Timestamp
| project finalResult

输出:

<表类=“s-表”><标题>最终结果 <正文>1