Forum Discussion
Bas van der Kruijssen - Live ID
Dec 08, 2017Copper Contributor
Log Analytics Query - Azure Active Directory ExtendedProperties
Hello,
I'm currently working on a query in Log Analytics which requires me to filter on properties which are in the ExtendedProperties field. See below example, I would like to use the Extended...
Dan Hadari
Microsoft
Dec 09, 2017Hi, You should be able to do | extend properties =
parse_json(tostring(ExtendedProperties) ) | where
tostring(properties.Name) == "XYZ" You might not be required to cast
Name into string but it doesn't matter. Dan