Forum Discussion

ChristopherKerry's avatar
ChristopherKerry
Copper Contributor
May 05, 2021

Joining with wildcarded values

I'm trying to join with wildcarded values such as the below with multiple fields. Does anyone know how to do this in KQL?

 

 

let X = datatable(Name:string, Src:string, Dest:string)
[
    'a','42.0.0.3','10.0.0.3',
    'b','42.0.0.3','20.33.44.55'
];
let Y = datatable(Name2:string, Src:string, Dest:string)
[
    'b','42.0.0.3','10.0.*',
    'c','42.0.0.3','20.33.44.55'
];
X | join Y on Src, Dest

 

 

Many thanks

No RepliesBe the first to reply

Resources