In Kusto you can combine a case statement and arg_max to perform complex queries with aggergation. For example arg_max(case(START > END, START, END), *) will allow you to compare the values in two columns and then get all rows for the greater of two of them. This allows for filtering even if the correct value is only in one of the columns and the other has default timestamp.