Sep 11 2019
10:12 AM
- last edited on
Apr 08 2022
10:06 AM
by
TechCommunityAP
Sep 11 2019
10:12 AM
- last edited on
Apr 08 2022
10:06 AM
by
TechCommunityAP
Step 1: Create a function (with alias 'productavailability') in an application insights instance.
availabilityResults | where name == "blah"
Additional information - I can wrap a remote "table" (availabilityResults) in the function and it has no issue with the app().table syntax.
Any suggestions appreciated.
Sep 11 2019 12:59 PM
Sep 12 2019 12:15 PM
@CliveWatson Thanks for your reply. Sure.
// definition saved with alias 'allproductmvp'
union withsource= SourceApp
app('5c657003-fc6a-4a63-99f9-3608ab4bd293').productmvp,
app('23bdf41b-38c2-4292-b960-35a613c777f6').productmvp
// end definition
allproductmvp
Sep 12 2019 12:23 PM
I doubt it's this but you can try an isfuzzy=true in case one/both the the workspaces isn't available - I'll try and take a deeper look tomorrow. e.g.
union isfuzzy=true withsource = SourceApp
workspace('Fabrikamltdprod').SecurityEvent,
workspace('contosoretail-IT').SecurityEvent
| parse SourceApp with * "('" applicationName "')" *
Sep 14 2019 07:59 AM - edited Sep 14 2019 08:02 AM
@CliveWatson Thanks for looking into this, but I think my case is falling under a known issue.
A function in Azure Monitor cannot contain another function.
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/functions
This seems like an important feature in order to avoid violations of the DRY principle. Would you happen to know if this is on the product backlog or a related user voice item?
Sep 16 2019 02:04 AM
Sep 16 2019 03:13 AM
Good news, this just back from the product group...
"This feature is work in progress and should be released in the next week or so"
I'll keep you updated if/when I hear more. Thanks Clive