Forum Discussion
Solved
KQL extend command does not seems to work in workbook
Hi all, I have an issue with the extend command in a custom workboook. The following KQL query parses Palo Alto Logs and to extract specific field (like PanOSSourceUserName, etc) and creating ne...
- That wouldn't be normal, make sure your workbook query (when you add query) is set to the same workspace and also the right Time Generated range if you are using a parameter. Also try to | project PanOSSourceUserName in the workbook (as the final line, in case its hitting the displayed column limit?)
That wouldn't be normal, make sure your workbook query (when you add query) is set to the same workspace and also the right Time Generated range if you are using a parameter. Also try to | project PanOSSourceUserName in the workbook (as the final line, in case its hitting the displayed column limit?)
Hi Clive,
The keypoint here is the '| project PanOSSourceUserName' and other fields I want to see...
It works fine now !!
Again, many thanks for your help !!
Regards,
HA
The keypoint here is the '| project PanOSSourceUserName' and other fields I want to see...
It works fine now !!
Again, many thanks for your help !!
Regards,
HA