Forum Discussion
How to compare a array values in a column against another array from a watchlist in Kusto
I am getting results with a column named IPAddresses having values in array. I want to compare each value in this array to a list (another array from a watch list). I have been trying to make use of ...
ashishrajsrivastava Your ZSWatchlist variable is a table so normally I would say to use a join but since you are using ipv4_is_in_range for your comparison, that will not work. Have you tried a union command between the ZSWatchlist and users? Then perform the comparison to weed out just those values you want. Not sure how many IP Addresses you have in the watchlist so not sure if this will be feasible or not.