Graph API KQL to extract Disk ID for none-compliance disk

Copper Contributor
I am trying to get left outer join or join with extend or mv-expand on Graph API to list all non-compliant disk with specific path (non-comp reason). In other words, extracting fields from policy and fields from resource e.g.-
resources
| where type == "microsoft.compute/disks"  and subscriptionId == '3mmmmm333333####e35'
    | join kind=leftouter (policyresources
        | where type == "microsoft.policyinsights/policystates"
  

Some resource I am going through are https://www.youtube.com/watch?v=r_3Ydr6fCHQ and https://github.com/globalbao/azure-resource-graph/blob/master/README.md but the join statement to correlate resource query are not working with both outer or join. Maybe I need to narrow down to related item under the resource and resource policy? Azure Management Talk: Azure Resource Graph Zero to Hero - YouTube In this session, Microsoft Consultant Billy York will go over the basics of Azure Resource Graph, including how Kusto Query Language (KQL) is used and its li...

If anyone has similar report extraction code with leftouter join between policy with compute resource that would be helpful

KQL join query to extract compliance report from resource. To get some fields from resource and some from compliance related to resource

0 Replies