SOLVED

Concat two column data into one in log queries

%3CLINGO-SUB%20id%3D%22lingo-sub-173477%22%20slang%3D%22en-US%22%3EConcat%20two%20column%20data%20into%20one%20in%20log%20queries%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-173477%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20am%20in%20a%20process%20to%20create%20alert%20and%20there%20I%20want%20to%20merge%202%20columns%20and%20pass%20it%20as%20one.%20Example%20below%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EObject%20-%20Activity%20%2B%20Account%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EThanks.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-173477%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-173903%22%20slang%3D%22en-US%22%3ERe%3A%20Concat%20two%20column%20data%20into%20one%20in%20log%20queries%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-173903%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%0A%3CP%3EYou%20can%20use%20extend%20and%26nbsp%3B%20strcat%20functions.%3C%2FP%3E%0A%3CP%3EExample%3A%3C%2FP%3E%0A%3CPRE%3E...%20%7C%20extend%20New_Column%20%3D%20strcat(First_Column_Name%2C%20Second_Column_Name)%20%3C%2FPRE%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi,

 

I am in a process to create alert and there I want to merge 2 columns and pass it as one. Example below:

 

  • Object - Activity + Account

Thanks.

 

1 Reply
Best Response confirmed by Stanislav Zhelyazkov (MVP)
Solution

Hi

You can use extend and  strcat functions.

Example:

... | extend New_Column = strcat(First_Column_Name, Second_Column_Name)