Forum Discussion

Shubham150391's avatar
Shubham150391
Copper Contributor
Apr 15, 2019
Solved

Issue with log analytics query

I need to write a log analytics query that can find storage account with supportsHttpsTrafficOnly as false. 

Below is the query that I have formed , but it is giving error:

AzureActivity
| where OperationName == "Create/Update Storage Account"
| where Properties matches regex """supportsHttpsTrafficOnly":true,""

Error message:
Query could not be parsed at ':' on line [3,61] Token: : Line: 3 Position: 61
 
Can someone please help on this
  • Shubham150391 

     

    AzureActivity
    | where OperationName == "Create/Update Storage Account"
    | where Properties has '"supportsHttpsTrafficOnly\\":true'
    | project Properties 
    That text has a "\" control char, so you need two "\\".  Would as where work for you? 
     
     

1 Reply

  • Shubham150391 

     

    AzureActivity
    | where OperationName == "Create/Update Storage Account"
    | where Properties has '"supportsHttpsTrafficOnly\\":true'
    | project Properties 
    That text has a "\" control char, so you need two "\\".  Would as where work for you? 
     
     

Resources