Forum Discussion

acabrales666's avatar
acabrales666
Copper Contributor
May 19, 2022
Solved

KQL query not working

Hi everyone, I'm not a kusto expert so bare with me. I'm trying to replace a text to another text... The one in bold is what I'm tryng to use but is not working.   Basically the log doesn't make a ...
KQL
kusto
Reports
Workbooks
  • Clive_Watson's avatar
    Clive_Watson
    May 19, 2022

    acabrales666 

    Would this work, just use ?

    datatable (ThreatId:string) ["A value","9999","somthing else"]
| extend ThreatId = iif(ThreatId == "9999","URL filtering log",ThreatId)

     

mikhailf's avatar
mikhailf
Iron Contributor
May 19, 2022

Hello acabrales666,

 

Are you trying to replace "9999" in ThreatId column? 

 

    • Clive_Watson's avatar
      Clive_Watson
      Bronze Contributor
      May 19, 2022

      acabrales666 

      Would this work, just use ?

      datatable (ThreatId:string) ["A value","9999","somthing else"]
| extend ThreatId = iif(ThreatId == "9999","URL filtering log",ThreatId)

       

      • acabrales666's avatar
        acabrales666
        Copper Contributor
        May 19, 2022
        perfect it works! You are awesome!

Resources