Forum Discussion
how can I do in KQL to compare if a value contains another value in the same table in KQL?
Hi everyone, I used the default rule "SharePointFileOperation across devices with previously unseen user agents" and I need to enhance the rule so that if the "USER_ID" column contains a variable...
| where Site_Url in (ReplacedData)
You should use "in" rather than "contains" for the above line
You should use "in" rather than "contains" for the above line
Hi Clive_Watson
But the problem is that I would need that the string is not equal but that it is with the sentence "contains" or similar, because when using "IN" I am indicating that the parameter is equal and I don't want it to be equal but to contain it, because all the parameters are not going to be equal.
Regards.