Forum Discussion
Solved
KQL query not working
Hi everyone, I'm not a kusto expert so bare with me. I'm trying to replace a text to another text... The one in bold is what I'm tryng to use but is not working. Basically the log doesn't make a ...
Would this work, just use ?
datatable (ThreatId:string) ["A value","9999","somthing else"] | extend ThreatId = iif(ThreatId == "9999","URL filtering log",ThreatId)
Hi mikhailf, yes that's correct.
Would this work, just use ?
datatable (ThreatId:string) ["A value","9999","somthing else"]
| extend ThreatId = iif(ThreatId == "9999","URL filtering log",ThreatId)
Hi Clive_Watson!
I'm having a problem related to KQL and would really appreciate your advice.
dnsresources
| where id contains '/dnsZones/a.com'
| project name, id, properties
| order by name asc
I want to improve performance. I've been using dnsresource. I've created a new record set, but when I query it, It doesn't return results immediately like using the kql dnszone resource query. It takes a very long time. Does anyone know how to fix this? Please share your solution with me. Thanks !!!!
- perfect it works! You are awesome!
- Your example seems to be a good one.
"case" can be used instead of "iif" too.
