Forum Discussion

Dinesh_G's avatar
Dinesh_G
Copper Contributor
Aug 12, 2021

Unable to use join operator

Hi,
I'm unable use join operator.Please help me what's wrong in my syntax
Signinlogs
| where IPAddress==" xxx"
|project ______
|join
AADNoninteractiveSignInLogs
| where UserDisplayname=="xxx"
This is the query I'm using I'm getting below error
Error: Join Operator is missing on clause
Please suggest what is wrong

1 Reply

  • m_zorich's avatar
    m_zorich
    Iron Contributor
    When using join you need to tell it what column to join on (must exist in both tables)

    SigninLogs
    | project UserPrincipalName, IPAddress
    | join kind=inner
    AADNonInteractiveUserSignInLogs on UserPrincipalName, IPAddress

Resources