Exporting non empty columns from Worskspace

Question

Hi Guys,&nbsp;&nbsp;I wanted to export only non empty columns via queries in work space. Could any one kindly provide the respective query for it.&nbsp;&nbsp;For eg&nbsp;&nbsp;Security Event | where AlertName contains "DCSync Attack"&nbsp; -- &gt; I do not want columns with empty data.&nbsp;

gdulce · Answer

kmanish&nbsp;&nbsp;You can use the function isnotempty() by adding&nbsp;|&nbsp;where&nbsp;isnotempty("ColumnName")&nbsp;to your query&nbsp;

kmanish · Answer

Thanks a lot. This is helpful.&nbsp;&nbsp;Is there a way i can get all the columns which contains some data, without specifying the name of the column .. for eg, i wanted all results in Common Security Log table.. filtering out all the columns which dont have any data&nbsp;&nbsp;regardsmanish

Forum Discussion

Exporting non empty columns from Worskspace

2 Replies

Resources