Forum Discussion
Bhavini
Sep 29, 2023Copper Contributor
Kusto query
I am using below query in analytics rule and it is giving error "Query returned more than one result set. Only one result set is supported per rule". Please suggest. Query: let IP = (_GetWatchl...
- Oct 03, 2023Looks like the line starting with "workspace" will return one result set while the line starting with "nxDomainDnsEvents" returns another. Did you mean to set up the first one as temp table?
GBushey
Oct 03, 2023Former Employee
Looks like the line starting with "workspace" will return one result set while the line starting with "nxDomainDnsEvents" returns another. Did you mean to set up the first one as temp table?
Bhavini
Oct 03, 2023Copper Contributor
Yes. Previously, it was working fine. But by using cross workspace query, I started getting this error message.