As mentioned earlier, Log Analytics queries can start with either a table name or a search command. We looked at table-based queries at length in the previous section, and will now look at search-based queries.
When dealing with large data sets, search-based queries will have a higher query performance cost, and could take longer to complete than a table-based query. The performance and processing time could be even longer if the search queries are not scoped.
Scope search-based queries where possible by specifying the name of the table(s) in the query.
Because search queries are less structured than table-based queries, they are actually preferable, and are better employed when searching for specific values across columns ...
