Forum Discussion
Solved
Include workspace name in query output
Is there a way to systematically collect the workspace name and include it in the output of a log analytics query? We are working on an event management project and the json output includes the w...
Hi,
There is no such option available as far as I know. If you manage your configuration as code you can potentially when deploying every query/alert that you have to put statically the name of the workspace with something like
| extend workspaceName = 'Workspace1'
Mark this reply as answer if it provides some answer to your question.
Maybe you can use this:
Usage
| where TimeGenerated > ago(1h)
| summarize arg_max(ResourceUri,*) by TimeGenerated
| extend dynamicuri = split(ResourceUri,"/")
| extend workspacename = dynamicuri.[-1]
| project workspacename