Forum Discussion

Dinesh_G's avatar
Dinesh_G
Copper Contributor
Aug 11, 2021

Unable to use join operator

Hi, I'm unable use join operator.Please help me what's wrong in my syntax Signinlogs | where IPAddress==" xxx" |project ______ |join AADNoninteractiveSignInLogs | where UserDisplayname=="xxx" ...
m_zorich's avatar
m_zorich
Iron Contributor
Aug 12, 2021
When using join you need to tell it what column to join on (must exist in both tables)

SigninLogs
| project UserPrincipalName, IPAddress
| join kind=inner
AADNonInteractiveUserSignInLogs on UserPrincipalName, IPAddress

Resources