SOLVED

Azure Key Vault

Copper Contributor

@cyb3rmik3

@Clive_Watson

Hello everyone,

We have azure key vault log ingested though data connector and Its logs are in the table AzureDiagnostics. I want to know if the fields identity_claim_oid_g and identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g that are in the table  AzureDiagnostics refer to same value?

In one of the logic, it says to take other if one is not present. E.g:CallerObjectId = iff(isempty(identity_claim_oid_g), identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g, identity_claim_oid_g). I cannot check myself as in my log identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g is empty and it has only value for identity_claim_oid_g. So it would be great if someone can clarify this?

 

Thank you

4 Replies
I've never seen the two populated columns populated in the same workspace, but they are the same format.

123aacf1-1234-12d1-b12e-ec1e2edfa1f2
Hello
@Clive_Watson
Thank you for the reply.
If two fields are not populated in same workspace, does this mean the workspace can have only one of these fields?
best response confirmed by burasathi (Copper Contributor)
Solution
I'd still use the Microsoft provided iif() method - just because I haven't seen it, doesnt mean it cant happen.
However looking at both columns the data is the same (from what I have seen), so using iif() will work.
@Clive_Watson
Thank you for the reply.
1 best response

Accepted Solutions
best response confirmed by burasathi (Copper Contributor)
Solution
I'd still use the Microsoft provided iif() method - just because I haven't seen it, doesnt mean it cant happen.
However looking at both columns the data is the same (from what I have seen), so using iif() will work.

View solution in original post