SOLVED

Issue with log analytics query

Copper Contributor

I need to write a log analytics query that can find storage account with supportsHttpsTrafficOnly as false. 

Below is the query that I have formed , but it is giving error:

AzureActivity
| where OperationName == "Create/Update Storage Account"
| where Properties matches regex """supportsHttpsTrafficOnly":true,""

Error message:
Query could not be parsed at ':' on line [3,61] Token: : Line: 3 Position: 61
 
Can someone please help on this
1 Reply
best response confirmed by Shubham150391 (Copper Contributor)
Solution

@Shubham150391 

 

AzureActivity
| where OperationName == "Create/Update Storage Account"
| where Properties has '"supportsHttpsTrafficOnly\\":true'
| project Properties 
That text has a "\" control char, so you need two "\\".  Would as where work for you? 
Annotation 2019-04-15 144226.jpg
 
 
1 best response

Accepted Solutions
best response confirmed by Shubham150391 (Copper Contributor)
Solution

@Shubham150391 

 

AzureActivity
| where OperationName == "Create/Update Storage Account"
| where Properties has '"supportsHttpsTrafficOnly\\":true'
| project Properties 
That text has a "\" control char, so you need two "\\".  Would as where work for you? 
Annotation 2019-04-15 144226.jpg
 
 

View solution in original post