Forum Discussion
i am trying to fetch the machine list which does not contain letter " l " in 8th position.
I am trying to fetch the machine list which does not contain letter " l " in 8th position. can i use Kusto regex to achieve this. I only see matches regex command.
I have the regex which identifies it and get the results but i want the results not matching the regex. Is there any command or function to achieve this
Can you post the complete query? We will be able to help.
Have you tried using the "| where not" xxxxxxx feature?
- Thanks
I used the not operator and it worked.
Meanwhile below is the query
SecurityRecommendation
| where RecommendationName == "Disk encryption should be applied on virtual machines"
| where RecommendationState in ("NotApplicable", "Unhealthy")
| extend field = split(AssessedResourceId, '/')
| extend VM = tostring(field[8])
| extend resourceGroups = tostring(field[4])
| extend subscriptions = tostring(field[2])
| where not(VM matches regex "^.......[l].*") == true
| project VM, RecommendationDisplayName, resourceGroups, subscriptions, TimeGenerated
| extend HostCustomEntity = VMdeepak198486 You can also try just plain indexof() to see if it is faster than using the regex.
| indexof(VM,"l",8,1)==-1
- CliveWatson
Microsoft
There is also substring. https://docs.microsoft.com/en-gb/azure/data-explorer/kusto/query/substringfunction
let name_ = "thisisanZme";
print a= substring(name_,8, 1)
| where a != "Z"
