SPL to KQL

Converting Splunk SPL queries to KQL

Splunk’s Search Processing Language (SPL) and Microsoft’s Kusto Query Language (KQL) are very similar in syntax and form, mostly bearing differences in the functions used.

This article provides a good overview and some examples on the conversion: SPL to KQL