mysql_request plugin - Kusto | Microsoft Learn

Syntax

evaluate mysql_request ( ConnectionString , SqlQuery [ , SqlParameters ] ) [ : OutputSchema ]

Parameters

Required Description


   string

The connection string that points at the MySQL Server network endpoint. See authentication and how to specify the network endpoint . SqlQuery


   string

The query that is to be executed against the SQL endpoint. Must return one or more row sets. Only the first set is made available for the rest of the query. SqlParameters


   dynamic

A property bag object that holds key-value pairs to pass as parameters along with the query. OutputSchema The names and types for the expected columns of the


   mysql_request

plugin output.

Syntax :

ColumnName

ColumnType [

...]

Specifying the OutputSchema is highly recommended, as it allows the plugin to be used in scenarios that might otherwise not work without it, such as a cross-cluster query. The OutputSchema can also enable multiple query optimizations.

An error is raised if the run-time schema of the first row set returned by the SQL network endpoint doesn't match the OutputSchema schema.

Authentication and authorization

To authorize to a MySQL Server network endpoint, you need to specify the authorization information in the connection string. The supported authorization method is via username and password.

Set callout policy

The plugin makes callouts to the MySql database. Make sure that the cluster's callout policy enables calls of type mysql to the target MySqlDbUri .

The following example shows how to define the callout policy for MySQL databases. We recommend restricting the callout policy to specific endpoints ( my_endpoint1 , my_endpoint2 ).

"CalloutType": "mysql", "CalloutUriRegex": "my_endpoint1\\.mysql\\.database\\.azure\\.com", "CanCall": true "CalloutType": "mysql", "CalloutUriRegex": "my_endpoint2\\.mysql\\.database\\.azure\\.com", "CanCall": true

The following example shows an .alter callout policy command for mysql CalloutType :

.alter cluster policy callout @'[{"CalloutType": "mysql", "CalloutUriRegex": "\\.mysql\\.database\\.azure\\.com", "CanCall": true}]'
Username and password authentication
The mysql_request plugin only supports username and password authentication to the MySQL server endpoint and doesn't integrate with Microsoft Entra authentication.
The username and password are provided as part of the connections string using the following parameters:
User ID=...; Password=...;
Warning
Confidential or guarded information should be obfuscated from connection strings and queries so that they are omitted from any Kusto tracing.
For more information, see obfuscated string literals.
Encryption and server validation
For security, SslMode is unconditionally set to Required when connecting to a MySQL server network endpoint. As a result, the server must be configured with a valid SSL/TLS server certificate.
Specify the network endpoint
Specify the MySQL network endpoint as part of the connection string.
Syntax:
Server = FQDN [Port = Port]
Where:
FQDN is the fully qualified domain name of the endpoint.
Port is the TCP port of the endpoint. By default, 3306 is assumed.
Examples
SQL query to Azure MySQL DB
The following example sends a SQL query to an Azure MySQL database. It retrieves all records from [dbo].[Table], and then processes the results.
This example shouldn't be taken as a recommendation to filter or project data in this manner. SQL queries should be constructed to return the smallest dataset possible.
evaluate mysql_request(
    'Server=contoso.mysql.database.azure.com; Port = 3306;'
    'Database=Fabrikam;'
    h'UID=USERNAME;'
    h'Pwd=PASSWORD;',
    'select * from `dbo`.`Table`') : (Id: int, Name: string)
| where Id > 0
| project Name
SQL query to an Azure MySQL database with modifications
The following example sends a SQL query to an Azure MySQL database
retrieving all records from [dbo].[Table], while appending another datetime column,
and then processes the results on the Kusto side.
It specifies a SQL parameter (@param0) to be used in the SQL query.
evaluate mysql_request(
    'Server=contoso.mysql.database.azure.com; Port = 3306;'
    'Database=Fabrikam;'
    h'UID=USERNAME;'
    h'Pwd=PASSWORD;',
    'select *, @param0 as dt from `dbo`.`Table`',
    dynamic({'param0': datetime(2020-01-01 16:47:26.7423305)})) : (Id:long, Name:string, dt: datetime)
| where Id > 0
| project Name
SQL query to an Azure MySQL database without a query-defined output schema
The following example sends a SQL query to an Azure MySQL database without an output schema. This is not recommended unless the schema is unknown, as it may impact the performance of the query.
evaluate mysql_request(
    'Server=contoso.mysql.database.azure.com; Port = 3306;'
    'Database=Fabrikam;'
    h'UID=USERNAME;'
    h'Pwd=PASSWORD;',
    'select * from `dbo`.`Table`')
| where Id > 0
| project Name