Forum Discussion

alchem_rj's avatar
alchem_rj
Copper Contributor
Sep 01, 2020

Table count from custom log

Hello,   I would like to get the count of table name reference in my custom log which is pushed to the Log analytics. The custom log structure is given below.   020-08-31 16:15:38 ProxyEngine [I...
azure monitor
Log Analytics
alchem_rj's avatar
alchem_rj
Copper Contributor
Sep 17, 2020

Hi Rafi_Rabo,

 

 

Is it possible to fetch the exact matching string from Rawdata using "extract" operator? or any other command?

Rafi_Rabo's avatar
Rafi_Rabo
Icon for Microsoft rankMicrosoft
Sep 17, 2020

Hi alchem_rj.,

 

You can tweak the regular expression, using the operator $ which means end of match.

In your case:

extend table_name = (extract ("(abc_8val_yy$)", 0, RawData))

 

Reference for regular expressions supported in Kusto: https://github.com/google/re2/wiki/Syntax

 

Rafi

Resources