Sep 19 2017
- last edited on
Apr 07 2022
Using the new OMS Log Analytics query language, how do I get a scalar value out of a table?
That is, what is the equivalent of this TSQL query, presuming Table1 has a single row:
Select @ScalarVar = Column1 from Table1
Sep 19 2017 11:44 PM
Sep 20 2017 07:31 AM
I have some understanding of the let statement.
In all of the examples, you can use a let statement with a query to store a table result, or with a scalar expression to store a scalar result.
How do I get, store and use scalar result that comes from a table query?
For example, I need to run one query that gets and stores the datetime from Column1 of Table1 of a particular single record, so that I can use that scalar value in subsequent queries.
Sep 20 2017 03:02 PMSolution
To pseudocode your example, you'd be looking at something like:
let myDateTime = toscalar(Table1 | summarize max(TimeGenerated));
| where TimeGenerated between ((myDateTime - 5m) .. (myDateTime + 5m))
Sep 20 2017 03:11 PM
Perfect. Thanks. I knew there was something like that in there somewhere, but I was having trouble finding it in the language reference. I see it now under Scalar Functions.
Sep 21 2017 12:05 AM