Azure Key Vault

[burasathi]

@cyb3rmik3

@Clive_Watson

Hello everyone,

We have azure key vault log ingested though data connector and Its logs are in the table AzureDiagnostics. I want to know if the fields identity_claim_oid_g and identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g that are in the table  AzureDiagnostics refer to same value?

In one of the logic, it says to take other if one is not present. E.g:CallerObjectId = iff(isempty(identity_claim_oid_g), identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g, identity_claim_oid_g). I cannot check myself as in my log identity_claim_http_schemas_microsoft_com_identity_claims_objectidentifier_g is empty and it has only value for identity_claim_oid_g. So it would be great if someone can clarify this?

Thank you

[#2]

I've never seen the two populated columns populated in the same workspace, but they are the same format.

123aacf1-1234-12d1-b12e-ec1e2edfa1f2

[#3]

Hello
@Clive_Watson
Thank you for the reply.
If two fields are not populated in same workspace, does this mean the workspace can have only one of these fields?

[#4 · Accepted solution]

I'd still use the Microsoft provided iif() method - just because I haven't seen it, doesnt mean it cant happen.
However looking at both columns the data is the same (from what I have seen), so using iif() will work.

[#5]

@Clive_Watson
Thank you for the reply.