I started learning how to write KQL as soon as I became dissatisfied with my reporting methods in Intune. I started when we could only send diagnostic logs from Intune to a Log Analytics workspace and query this data. It was difficult at first, but it got easier the more I wrote queries. After some time, I started a small project to collect and share queries that anyone could copy and paste. This project has grown significantly and can be found here: KQLSearch.com.
