Forum Discussion
Solved
Directory Search in ConfigurationChange
I'm having an issue searching in ConfigurationChange against directories across workspaces.
When I run my initial query in only one workspace I am able to get results back on what changes were made...
Ok. Than may be this way.
union workspace('workspace1').ConfigurationChange, workspace('workspace2').ConfigurationChange | where * has @"/var/adm" or * has @"/etc/*.conf"Reference: https://docs.loganalytics.io/docs/Language-Reference/Tabular-operators/search-operator
Ok. Than may be this way.
union workspace('workspace1').ConfigurationChange, workspace('workspace2').ConfigurationChange | where * has @"/var/adm" or * has @"/etc/*.conf"
Reference: https://docs.loganalytics.io/docs/Language-Reference/Tabular-operators/search-operator
Yep, that's what I was looking for, thanks again!