Unable to use join operator

%3CLINGO-SUB%20id%3D%22lingo-sub-2638487%22%20slang%3D%22en-US%22%3EUnable%20to%20use%20join%20operator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2638487%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3EI'm%20unable%20use%20join%20operator.Please%20help%20me%20what's%20wrong%20in%20my%20syntax%3CBR%20%2F%3ESigninlogs%3CBR%20%2F%3E%7C%20where%20IPAddress%3D%3D%22%20xxx%22%3CBR%20%2F%3E%7Cproject%20______%3CBR%20%2F%3E%7Cjoin%3CBR%20%2F%3EAADNoninteractiveSignInLogs%3CBR%20%2F%3E%7C%20where%20UserDisplayname%3D%3D%22xxx%22%3CBR%20%2F%3EThis%20is%20the%20query%20I'm%20using%20I'm%20getting%20below%20error%3CBR%20%2F%3EError%3A%20Join%20Operator%20is%20missing%20on%20clause%3CBR%20%2F%3EPlease%20suggest%20what%20is%20wrong%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2638945%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20use%20join%20operator%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2638945%22%20slang%3D%22en-US%22%3EWhen%20using%20join%20you%20need%20to%20tell%20it%20what%20column%20to%20join%20on%20(must%20exist%20in%20both%20tables)%3CBR%20%2F%3E%3CBR%20%2F%3ESigninLogs%3CBR%20%2F%3E%7C%20project%20UserPrincipalName%2C%20IPAddress%3CBR%20%2F%3E%7C%20join%20kind%3Dinner%3CBR%20%2F%3EAADNonInteractiveUserSignInLogs%20on%20UserPrincipalName%2C%20IPAddress%3C%2FLINGO-BODY%3E
Occasional Contributor
Hi,
I'm unable use join operator.Please help me what's wrong in my syntax
Signinlogs
| where IPAddress==" xxx"
|project ______
|join
AADNoninteractiveSignInLogs
| where UserDisplayname=="xxx"
This is the query I'm using I'm getting below error
Error: Join Operator is missing on clause
Please suggest what is wrong
1 Reply
When using join you need to tell it what column to join on (must exist in both tables)

SigninLogs
| project UserPrincipalName, IPAddress
| join kind=inner
AADNonInteractiveUserSignInLogs on UserPrincipalName, IPAddress