The following 5 new enhancements are available in Logging Anaytics query language: 

• Base64 encoding functions: New functions encode64(), urlDecode(), and urlEncode() are available with eval and where commands.  
• Function to capitalize a word: New function capitalize() is available using which you can capitalize a word in eval and where commands.
• Support for bucket command in Link analyzer: Use the bucket command in analyzer flow to create buckets of the field which can next be used for timestats analysis.
• Support for wildcard * in fields command: If there are several field names with the same prefix, then you can use the wildcard * to filter all of them. The wildcards % and ? are supported too.
• User friendly time comparison: The new capability allows a human readable string to be used to update time in the query. See examples in where command.