Forum Discussion

acabrales666's avatar
acabrales666
Copper Contributor
May 19, 2022
Solved

KQL query not working

Hi everyone, I'm not a kusto expert so bare with me. I'm trying to replace a text to another text... The one in bold is what I'm tryng to use but is not working.   Basically the log doesn't make a ...
KQL
kusto
Reports
Workbooks
  • Clive_Watson's avatar
    Clive_Watson
    May 19, 2022

    acabrales666 

    Would this work, just use ?

    datatable (ThreatId:string) ["A value","9999","somthing else"]
| extend ThreatId = iif(ThreatId == "9999","URL filtering log",ThreatId)

     

mikhailf's avatar
mikhailf
Iron Contributor
May 19, 2022

Hello acabrales666,

 

Are you trying to replace "9999" in ThreatId column? 

 

  • Clive_Watson's avatar
    Clive_Watson
    Bronze Contributor
    May 19, 2022

    acabrales666 

    Would this work, just use ?

    datatable (ThreatId:string) ["A value","9999","somthing else"]
| extend ThreatId = iif(ThreatId == "9999","URL filtering log",ThreatId)

     

    • acabrales666's avatar
      acabrales666
      Copper Contributor
      May 19, 2022
      perfect it works! You are awesome!
    • mikhailf's avatar
      mikhailf
      Iron Contributor
      May 19, 2022
      Your example seems to be a good one.
      "case" can be used instead of "iif" too.

Resources