Forum Discussion

Michael Faulkinbury's avatar
Michael Faulkinbury
Copper Contributor
Sep 11, 2019

Access to cross-resource functions from within a function?

Step 1: Create a function (with alias 'productavailability') in an application insights instance.             availabilityResults | where name == "blah" Step 2: From a LA workspace, access the fun...
Azure Log Analytics
azure monitor
  • Michael Faulkinbury's avatar
    Michael Faulkinbury
    Copper Contributor
    Sep 12, 2019

    CliveWatson Thanks for your reply. Sure.

     

     

    // definition saved with alias 'allproductmvp' 
union withsource= SourceApp
app('5c657003-fc6a-4a63-99f9-3608ab4bd293').productmvp,
app('23bdf41b-38c2-4292-b960-35a613c777f6').productmvp
// end definition

     

     
    I can run the statement (function body) just fine, but when I try to run the function:

     

    allproductmvp

     

     ...it results in the error posted.
    • CliveWatson's avatar
      CliveWatson
      Former Employee
      Sep 12, 2019

      Michael Faulkinbury 

       

      I doubt it's this but you can try an isfuzzy=true in case one/both the the workspaces isn't available - I'll try and take a deeper look tomorrow.  e.g. 

       

      union isfuzzy=true withsource = SourceApp
workspace('Fabrikamltdprod').SecurityEvent,  
workspace('contosoretail-IT').SecurityEvent 
| parse SourceApp with * "('" applicationName "')" *

       

      • Michael Faulkinbury's avatar
        Michael Faulkinbury
        Copper Contributor
        Sep 14, 2019

        CliveWatson Thanks for looking into this, but I think my case is falling under a known issue.

         

        A function in Azure Monitor cannot contain another function.

        https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/functions

         

        This seems like an important feature in order to avoid violations of the DRY principle.  Would you happen to know if this is on the product backlog or a related user voice item?

Resources